Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
File: qZqHY_p1CetPmwhGtYXUhz6xHDk.mft (raw, json)
Hash identifier: iK808qS44V7UKVB9RYcSwKmkkIwG226Gb5UJbssl+fw=
Subject key identifier: 63:CA:E4:4F:64:87:55:0C:B4:5E:A1:83:98:CC:02:D3:81:C4:2D:D8
Authority key identifier: A9:9A:87:63:FA:75:09:EB:4F:9B:08:46:B5:85:D4:87:3E:B1:1C:39
Certificate issuer: /CN=a99a8763fa7509eb4f9b0846b585d4873eb11c39
Certificate serial: 01A129FB171D6E091A07ED71F4A6FBA84A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
Manifest number: B4
Signing time: Sun 11 Oct 2026 08:01:23 +0000
Manifest this update: Sun 11 Oct 2026 08:01:23 +0000
Manifest next update: Mon 12 Oct 2026 08:01:23 +0000
Files and hashes: 1: 07HgvTpzt_I3I4EOcFJZcLyN3gk.roa (hash: 2KLYAgLwlLD1ziStycUNwOuuTXGCU8iVgQkazsIAxM8=)
2: qZqHY_p1CetPmwhGtYXUhz6xHDk.crl (hash: R5xbckxgVLX4tzHkxmCYazJUWkEVvK7bhEBsJVQITeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:fb:17:1d:6e:09:1a:07:ed:71:f4:a6:fb:a8:4a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99a8763fa7509eb4f9b0846b585d4873eb11c39
Validity
Not Before: Oct 11 08:01:23 2026 GMT
Not After : Oct 12 08:01:23 2026 GMT
Subject: CN=63cae44f6487550cb45ea18398cc02d381c42dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:33:64:ea:da:4a:e5:91:c4:14:89:37:79:
15:70:e2:6e:6d:89:e9:5b:cd:cd:63:6c:0b:f1:40:
9b:99:6a:8e:fa:98:ff:d7:19:e3:d9:24:b4:3f:4c:
9a:8c:2a:15:95:6b:79:74:00:ba:ff:45:67:fc:29:
4a:b6:11:a4:8e:75:46:54:c5:ad:45:ba:e0:6c:05:
52:8b:f1:96:18:9e:7b:7c:ed:4e:bd:0c:0a:e1:85:
6a:d7:70:3d:36:27:6a:5f:00:37:dd:27:f8:b8:0e:
15:39:13:07:80:1f:e5:87:d1:25:74:15:db:40:81:
7e:26:89:d3:5e:16:1a:a5:83:f6:6d:81:de:8f:74:
11:db:1e:3d:f3:34:89:3f:01:31:d1:d4:74:b4:b8:
86:e6:a3:26:af:ff:8a:0d:4a:f2:56:85:a1:bc:74:
f9:2f:d1:74:26:3b:11:93:28:23:12:3d:85:ba:f4:
0b:74:26:ed:47:12:8b:7a:05:df:96:84:23:2b:c0:
af:62:14:7f:27:91:ef:8f:1e:35:d4:47:dd:8e:d9:
94:43:2c:f8:06:3d:e0:fe:2a:1f:51:09:fc:64:a1:
fb:e1:68:ae:60:0e:b7:a5:95:86:f1:82:9c:f3:56:
1a:45:55:4d:78:62:68:df:92:7a:2f:f2:bc:d4:20:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CA:E4:4F:64:87:55:0C:B4:5E:A1:83:98:CC:02:D3:81:C4:2D:D8
X509v3 Authority Key Identifier:
keyid:A9:9A:87:63:FA:75:09:EB:4F:9B:08:46:B5:85:D4:87:3E:B1:1C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c6:d1:b0:f1:8e:6e:92:7c:45:40:c6:02:b5:ad:00:2b:24:
73:8a:6f:c2:31:62:95:6c:cf:38:bf:73:31:f0:70:8f:34:46:
fd:b5:ce:47:4a:74:23:aa:56:a5:d4:ea:e4:9d:6d:21:5d:ac:
25:ec:10:8b:a8:98:15:82:77:a4:05:68:bc:bf:34:e8:ba:51:
c3:ff:1d:c5:d9:3a:37:ea:7c:b9:c8:cf:e9:d9:c3:19:a3:95:
9f:a1:79:44:0e:52:c6:09:19:61:f6:e2:f3:0e:86:4b:6b:74:
f5:b0:cf:4c:21:7f:39:73:bb:b9:38:e3:5e:87:3c:22:87:a2:
65:ba:75:77:c5:34:86:f4:ee:a7:13:5f:bd:b1:ca:bb:2a:d8:
36:b8:54:f3:a9:02:ec:c3:0f:4c:78:6b:6e:05:51:25:c1:f2:
8a:8c:3e:30:3a:e2:b5:a5:54:96:06:08:d5:6d:1a:cb:eb:af:
2e:28:2e:a2:f0:5b:93:55:4f:91:f6:0e:eb:e2:c5:01:bf:71:
6e:3e:3f:8e:dc:c2:ab:18:97:62:56:5c:c7:d1:e7:fa:c8:72:
93:31:f3:5c:f8:bd:10:51:51:fc:b5:39:7e:00:0c:f5:8c:53:
8f:26:91:cb:2f:2c:a1:d3:2e:c5:8f:a1:a3:57:f3:e3:7a:17:
80:81:73:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEp+xcdbgkaB+1x9Kb7qEoFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5OWE4NzYzZmE3NTA5ZWI0ZjliMDg0NmI1ODVkNDg3M2Vi
MTFjMzkwHhcNMjYxMDExMDgwMTIzWhcNMjYxMDEyMDgwMTIzWjAzMTEwLwYDVQQD
Eyg2M2NhZTQ0ZjY0ODc1NTBjYjQ1ZWExODM5OGNjMDJkMzgxYzQyZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/ozZOraSuWRxBSJN3kVcOJubYnp
W83NY2wL8UCbmWqO+pj/1xnj2SS0P0yajCoVlWt5dAC6/0Vn/ClKthGkjnVGVMWt
RbrgbAVSi/GWGJ57fO1OvQwK4YVq13A9NidqXwA33Sf4uA4VORMHgB/lh9EldBXb
QIF+JonTXhYapYP2bYHej3QR2x498zSJPwEx0dR0tLiG5qMmr/+KDUryVoWhvHT5
L9F0JjsRkygjEj2FuvQLdCbtRxKLegXfloQjK8CvYhR/J5Hvjx411EfdjtmUQyz4
Bj3g/iofUQn8ZKH74WiuYA63pZWG8YKc81YaRVVNeGJo35J6L/K81CBtVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPK5E9kh1UMtF6hg5jMAtOBxC3YMB8GA1UdIwQY
MBaAFKmah2P6dQnrT5sIRrWF1Ic+sRw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVpxSFlfcDFDZXRQbXdoR3RZWFVoejZ4SERrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85YTVkZDYtZWM3Zi00ZWQwLTk3ODAt
M2IwODQ0Mzg5NjlkLzEvcVpxSFlfcDFDZXRQbXdoR3RZWFVoejZ4SERrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85YTVkZDYtZWM3Zi00ZWQwLTk3ODAtM2IwODQ0Mzg5Njlk
LzEvcVpxSFlfcDFDZXRQbXdoR3RZWFVoejZ4SERrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJsbRsPGO
bpJ8RUDGArWtACskc4pvwjFilWzPOL9zMfBwjzRG/bXOR0p0I6pWpdTq5J1tIV2s
JewQi6iYFYJ3pAVovL806LpRw/8dxdk6N+p8ucjP6dnDGaOVn6F5RA5SxgkZYfbi
8w6GS2t09bDPTCF/OXO7uTjjXoc8IoeiZbp1d8U0hvTupxNfvbHKuyrYNrhU86kC
7MMPTHhrbgVRJcHyiow+MDritaVUlgYI1W0ay+uvLiguovBbk1VPkfYO6+LFAb9x
bj4/jtzCqxiXYlZcx9Hn+shykzHzXPi9EFFR/LU5fgAM9YxTjyaRyy8sodMuxY+h
o1fz43oXgIFzMA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:45:44 2026 by rpki-client