Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: jfjOPkdmb/Nd4r6TaZ9RU5pVK+/4cpLYXqJr/zpJhIs=
Subject key identifier: 0E:A1:B4:F3:55:BB:C9:E9:B5:61:4A:A8:B5:24:23:27:3F:0C:11:B0
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 01A118D02FFBA84282CB14B85D122934A00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1A6A
Signing time: Thu 08 Oct 2026 00:00:59 +0000
Manifest this update: Thu 08 Oct 2026 00:00:59 +0000
Manifest next update: Fri 09 Oct 2026 00:00:59 +0000
Files and hashes: 1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: PLd3sBKyp5nDEHBwPkNeqcHX92ccUZu7Y1OFXvjpQuk=)
3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:d0:2f:fb:a8:42:82:cb:14:b8:5d:12:29:34:a0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Oct 8 00:00:59 2026 GMT
Not After : Oct 9 00:00:59 2026 GMT
Subject: CN=0ea1b4f355bbc9e9b5614aa8b52423273f0c11b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:12:d7:99:be:5b:ed:e5:8a:56:3d:b5:7a:
08:61:1c:3c:d8:39:d9:28:90:74:48:b8:55:f8:9d:
e4:06:c8:61:31:18:07:bf:fd:54:c2:44:09:ba:b4:
bd:76:1c:c8:0c:b9:9a:2b:c5:c1:f8:57:81:63:8a:
8e:41:a9:08:bc:71:13:30:c5:5f:96:14:58:5a:27:
c9:79:ea:d7:dd:e7:be:be:af:e6:4b:8a:ff:5c:a0:
8c:3f:ad:bc:10:4a:ea:c7:8a:e8:71:30:9d:fd:00:
c6:67:c3:bf:18:77:f5:89:1b:f5:54:d5:ca:d0:9c:
7f:f8:69:ed:53:6e:04:68:f3:bd:cc:28:33:00:e3:
1f:86:fc:ff:1e:64:d4:75:7c:30:93:98:56:04:fe:
07:95:44:4d:ba:4a:da:f4:48:e9:f3:58:42:cb:3c:
c1:8d:a5:0e:a5:94:39:db:3b:d1:cb:61:8a:ab:31:
6d:ad:c4:de:bf:7b:ca:03:db:0c:13:b1:10:68:84:
9e:85:36:ec:98:ca:55:ca:2d:2e:b8:2f:98:47:ef:
6e:99:1d:d9:ac:7f:ac:13:2f:c5:8c:e3:1c:56:42:
65:78:32:60:fc:2b:f0:bd:93:08:de:b5:cc:21:0f:
13:06:e6:0d:cd:c0:03:9a:9e:29:f8:68:f3:68:bc:
ff:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A1:B4:F3:55:BB:C9:E9:B5:61:4A:A8:B5:24:23:27:3F:0C:11:B0
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c6:e6:fb:c9:04:2b:84:0c:a3:00:87:b8:43:ab:f4:fe:4a:
4f:b9:34:fe:12:f7:d8:7b:b6:52:08:dd:a3:f8:36:e9:7f:be:
4a:83:01:7d:97:5b:24:9e:90:1f:de:a4:7b:01:17:17:60:7c:
7e:2f:3b:54:76:95:48:42:b8:e4:1a:4c:d7:1f:0e:db:d1:0f:
1b:63:9a:45:71:3a:8e:a5:e6:87:e3:bc:6a:a6:af:14:1d:34:
4a:89:c1:91:8f:c6:67:1d:20:d6:d1:6b:1e:5c:84:ea:73:46:
51:f6:92:92:41:30:14:75:25:4a:b6:80:3d:a7:c7:bb:09:ad:
ef:14:70:ab:7b:4c:fe:ef:dd:72:0b:ae:0a:7d:34:0c:c1:7a:
d4:57:71:34:ed:94:19:d8:83:3e:f6:74:f8:06:2e:cb:45:17:
cf:08:f2:e5:c8:05:76:18:8a:fb:bd:86:b1:07:c1:de:5d:8f:
a9:64:41:c8:22:23:e4:83:7d:29:d5:a1:00:00:0f:bf:65:61:
41:15:42:08:36:12:da:7a:8c:23:c8:98:37:52:f5:b2:75:09:
d3:ee:3d:3d:4d:83:1d:a6:a0:bc:6d:07:79:ec:60:a6:10:6d:
e1:a4:9a:ab:fd:08:38:be:3e:01:49:f1:3b:74:b1:58:91:56:
77:e5:2e:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEY0C/7qEKCyxS4XRIpNKAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZmM0MWFhZmJiY2NhYTk2NzExODQ5NzQ1ZWY3MjJhNTI2
MGFjN2UwHhcNMjYxMDA4MDAwMDU5WhcNMjYxMDA5MDAwMDU5WjAzMTEwLwYDVQQD
EygwZWExYjRmMzU1YmJjOWU5YjU2MTRhYThiNTI0MjMyNzNmMGMxMWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WkS15m+W+3lilY9tXoIYRw82DnZ
KJB0SLhV+J3kBshhMRgHv/1UwkQJurS9dhzIDLmaK8XB+FeBY4qOQakIvHETMMVf
lhRYWifJeerX3ee+vq/mS4r/XKCMP628EErqx4rocTCd/QDGZ8O/GHf1iRv1VNXK
0Jx/+GntU24EaPO9zCgzAOMfhvz/HmTUdXwwk5hWBP4HlURNukra9Ejp81hCyzzB
jaUOpZQ52zvRy2GKqzFtrcTev3vKA9sME7EQaISehTbsmMpVyi0uuC+YR+9umR3Z
rH+sEy/FjOMcVkJleDJg/CvwvZMI3rXMIQ8TBuYNzcADmp4p+GjzaLz/7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6htPNVu8nptWFKqLUkIyc/DBGwMB8GA1UdIwQY
MBaAFKr8Qar7vMqpZxGEl0XvcipSYKx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjct
MWJjMzFjNjI0MDFmLzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjctMWJjMzFjNjI0MDFm
LzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcbm+8kE
K4QMowCHuEOr9P5KT7k0/hL32Hu2Ugjdo/g26X++SoMBfZdbJJ6QH96kewEXF2B8
fi87VHaVSEK45BpM1x8O29EPG2OaRXE6jqXmh+O8aqavFB00SonBkY/GZx0g1tFr
HlyE6nNGUfaSkkEwFHUlSraAPafHuwmt7xRwq3tM/u/dcguuCn00DMF61FdxNO2U
GdiDPvZ0+AYuy0UXzwjy5cgFdhiK+72GsQfB3l2PqWRByCIj5IN9KdWhAAAPv2Vh
QRVCCDYS2nqMI8iYN1L1snUJ0+49PU2DHaagvG0HeexgphBt4aSaq/0IOL4+AUnx
O3SxWJFWd+UuQA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 02:21:49 2026 by rpki-client