Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
File: qT8yMceH9x3SSE7gAtpzpxdb0kk.mft (raw, json)
Hash identifier: fk1odsHQrVxe5idv0bVJYogiZkj6FewK12+NOSmD/K0=
Subject key identifier: D7:AF:72:D1:AA:70:CA:39:EC:FF:AA:61:DB:94:4C:B6:BD:7A:7B:CD
Authority key identifier: A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
Certificate issuer: /CN=a93f3231c787f71dd2484ee002da73a7175bd249
Certificate serial: 01A12F21B37C1B584C6609427E53472BA02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
Manifest number: 17E8
Signing time: Mon 12 Oct 2026 08:01:40 +0000
Manifest this update: Mon 12 Oct 2026 08:01:40 +0000
Manifest next update: Tue 13 Oct 2026 08:01:40 +0000
Files and hashes: 1: YKQ7bJ5Uygsy5yN7dP8YeQLmEx4.roa (hash: qv62jghVn/xc1zYuKekCyiDZQVZ2Kui3yZ/JmsGwwSk=)
2: qT8yMceH9x3SSE7gAtpzpxdb0kk.crl (hash: 47l884Yp3f3vOF2dYKsmYKDiigFImMcmtX+qCZO50zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:b3:7c:1b:58:4c:66:09:42:7e:53:47:2b:a0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93f3231c787f71dd2484ee002da73a7175bd249
Validity
Not Before: Oct 12 08:01:40 2026 GMT
Not After : Oct 13 08:01:40 2026 GMT
Subject: CN=d7af72d1aa70ca39ecffaa61db944cb6bd7a7bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3d:d6:85:be:ad:c2:7b:9e:fe:98:75:d8:84:
ac:16:ca:7e:d3:40:bc:7a:24:93:8e:35:9d:f2:9c:
2a:f9:a4:8f:9c:ef:9b:a5:7e:f2:f9:90:f1:cc:5e:
37:30:f6:26:f2:87:11:3f:2a:d5:90:55:d4:1a:1c:
81:d8:00:bd:b4:ef:c8:a2:be:7c:a6:df:d3:b5:d3:
e6:e2:05:ac:b3:76:30:b5:8c:86:54:29:d7:9b:cc:
82:7b:e6:89:2b:bf:25:a2:16:54:b5:26:7a:c3:15:
32:14:3f:a4:07:f9:eb:5e:88:36:2e:83:14:d8:21:
e3:5b:24:d3:33:98:25:ea:7c:40:7f:39:01:ad:72:
8f:e4:76:93:94:38:ac:f8:58:96:0f:04:f4:1b:72:
42:df:e2:59:d4:af:62:6d:45:05:f6:e0:5f:17:66:
d5:48:60:af:57:33:31:be:6a:66:2e:f1:74:62:de:
40:b2:96:9b:ec:49:cb:b3:a8:73:90:af:d9:9b:b0:
49:63:86:75:b5:74:de:2f:fd:71:f6:71:f4:85:dc:
e6:6b:59:a9:f7:be:9f:31:e8:a5:66:58:5d:85:70:
5e:6d:16:f6:33:51:96:4a:bb:1a:aa:e4:a3:f3:9a:
0c:27:42:36:3e:f6:03:cf:e2:95:fd:6e:b1:16:ca:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AF:72:D1:AA:70:CA:39:EC:FF:AA:61:DB:94:4C:B6:BD:7A:7B:CD
X509v3 Authority Key Identifier:
keyid:A9:3F:32:31:C7:87:F7:1D:D2:48:4E:E0:02:DA:73:A7:17:5B:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT8yMceH9x3SSE7gAtpzpxdb0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4dc795-8956-4408-a5cc-b54bcae17d40/1/qT8yMceH9x3SSE7gAtpzpxdb0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:24:de:35:24:03:69:d8:08:71:50:c4:ce:87:30:da:76:c3:
84:98:16:1c:20:11:29:e4:ee:76:57:b8:3b:f3:9b:a4:61:84:
ad:2b:d6:b9:6e:00:e5:98:6f:5f:a1:0d:27:ea:29:64:2e:75:
ef:c2:cd:fb:2d:d3:93:25:77:77:f5:77:03:ac:4c:c2:b0:67:
e1:13:07:1a:d9:a6:07:69:78:c8:ad:ad:9e:b4:6c:54:b2:66:
7e:d3:46:fa:07:c7:e2:77:20:52:3d:c4:2e:8c:c8:ea:e3:f2:
c9:b8:10:bb:90:65:6f:1e:e7:de:58:15:90:03:02:e9:1b:b9:
0b:1a:50:c7:a6:9e:ba:5b:f4:15:bd:20:6c:a7:e6:6a:d6:63:
46:ee:7b:4d:e9:4f:de:ea:0b:f0:9e:d6:d7:52:1b:7f:ec:cb:
ed:4f:b7:8a:38:df:a4:b7:e3:fb:16:08:ed:3e:72:06:84:48:
a8:80:96:3f:b4:d0:94:40:cb:da:1d:a0:c2:b2:7e:f8:41:3b:
67:6b:ed:54:ff:a6:f8:af:78:4b:fd:f5:82:89:8e:2d:f7:2d:
51:0a:ce:28:c6:00:5f:a5:4e:3f:75:e2:3e:3f:95:34:6c:7b:
7c:11:b3:b0:37:89:57:b1:eb:df:5b:f3:b4:0e:ef:f9:2d:2f:
26:b0:6e:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEvIbN8G1hMZglCflNHK6AsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5M2YzMjMxYzc4N2Y3MWRkMjQ4NGVlMDAyZGE3M2E3MTc1
YmQyNDkwHhcNMjYxMDEyMDgwMTQwWhcNMjYxMDEzMDgwMTQwWjAzMTEwLwYDVQQD
EyhkN2FmNzJkMWFhNzBjYTM5ZWNmZmFhNjFkYjk0NGNiNmJkN2E3YmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD3Whb6twnue/ph12ISsFsp+00C8
eiSTjjWd8pwq+aSPnO+bpX7y+ZDxzF43MPYm8ocRPyrVkFXUGhyB2AC9tO/Ior58
pt/TtdPm4gWss3YwtYyGVCnXm8yCe+aJK78lohZUtSZ6wxUyFD+kB/nrXog2LoMU
2CHjWyTTM5gl6nxAfzkBrXKP5HaTlDis+FiWDwT0G3JC3+JZ1K9ibUUF9uBfF2bV
SGCvVzMxvmpmLvF0Yt5Aspab7EnLs6hzkK/Zm7BJY4Z1tXTeL/1x9nH0hdzma1mp
976fMeilZlhdhXBebRb2M1GWSrsaquSj85oMJ0I2PvYDz+KV/W6xFsqgmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNevctGqcMo57P+qYduUTLa9envNMB8GA1UdIwQY
MBaAFKk/MjHHh/cd0khO4ALac6cXW9JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2Mt
YjU0YmNhZTE3ZDQwLzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80ZGM3OTUtODk1Ni00NDA4LWE1Y2MtYjU0YmNhZTE3ZDQw
LzEvcVQ4eU1jZUg5eDNTU0U3Z0F0cHpweGRiMGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyTeNSQD
adgIcVDEzocw2nbDhJgWHCARKeTudle4O/ObpGGErSvWuW4A5ZhvX6ENJ+opZC51
78LN+y3TkyV3d/V3A6xMwrBn4RMHGtmmB2l4yK2tnrRsVLJmftNG+gfH4ncgUj3E
LozI6uPyybgQu5Blbx7n3lgVkAMC6Ru5CxpQx6aeulv0Fb0gbKfmatZjRu57TelP
3uoL8J7W11Ibf+zL7U+3ijjfpLfj+xYI7T5yBoRIqICWP7TQlEDL2h2gwrJ++EE7
Z2vtVP+m+K94S/31gomOLfctUQrOKMYAX6VOP3XiPj+VNGx7fBGzsDeJV7Hr31vz
tA7v+S0vJrBubg==
-----END CERTIFICATE-----
Generated at Mon Oct 12 12:01:18 2026 by rpki-client