Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
File: qoj641tmtN4uQcpe4He17wtKtkk.mft (raw, json)
Hash identifier: WHzIxU9MmjY7V1lLRoNYV74m1xKFsvQUFDN+B0BOFaY=
Subject key identifier: DF:1D:15:5E:E2:B5:11:24:6E:54:29:A4:66:09:60:1F:AC:00:E9:DF
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 01A0DFBCE96224E1C450628E2CD0E7619E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
Manifest number: 19DB
Signing time: Sat 26 Sep 2026 22:01:34 +0000
Manifest this update: Sat 26 Sep 2026 22:01:34 +0000
Manifest next update: Sun 27 Sep 2026 22:01:34 +0000
Files and hashes: 1: BvtEp7ZykJYdaMqo7blsUuKtvPY.roa (hash: JWrGFKwI8ZmYJkc5AseOHeCw/Nb3xRt6/+xGW3jCg44=)
2: d9IYgCb4O0zZISXP4tK4QuK4cvs.roa (hash: jBG8EC6qVRrjvDS0o4yvkb3drCofFVHmM9LgSbzRM0s=)
3: qoj641tmtN4uQcpe4He17wtKtkk.crl (hash: NL3vQ7OY21aA12xGb8CzU2ICDASgI1sIRLNFn+csEeo=)
4: zKQ09Wpk_sKjI1YhqBd22SglJPI.roa (hash: sGEPj5oiG+Z1hsWttL/M7GZNmLLDhgxlhH4HT0fE8Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:e9:62:24:e1:c4:50:62:8e:2c:d0:e7:61:9e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Sep 26 22:01:34 2026 GMT
Not After : Sep 27 22:01:34 2026 GMT
Subject: CN=df1d155ee2b511246e5429a46609601fac00e9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c3:73:46:01:e6:0e:90:79:a5:81:b4:9f:d5:
aa:92:f4:8e:68:da:5e:97:1c:b1:b1:f6:6a:3c:37:
df:19:5a:7e:62:dd:88:10:f1:c7:47:5e:97:9b:1f:
0a:f6:4f:f3:c7:49:56:df:d1:37:96:90:b1:6e:95:
6a:ec:51:2f:95:1c:f7:ce:20:fc:d7:86:51:11:18:
42:d2:d9:c0:3b:d4:18:42:5d:39:e2:94:bd:ae:4c:
88:67:ae:f9:8a:1d:b8:87:e3:24:47:10:0f:d5:e2:
5f:c6:c3:cb:d3:bd:cd:d1:7d:4b:9a:96:20:fa:3a:
36:81:d8:a1:50:cd:58:ac:51:5d:78:0b:03:31:8b:
e0:ea:a2:32:01:13:d9:00:95:c8:93:8b:65:2c:74:
31:0b:8d:47:80:52:63:11:76:9d:82:48:a1:39:6a:
b5:81:49:fa:f5:c6:0d:36:3d:b2:f8:c1:a0:9c:f2:
f1:5c:a5:a7:7b:d6:ee:80:3e:ae:a1:d0:b2:64:90:
eb:7e:3e:0b:a5:ba:28:a3:b8:77:b3:3f:76:e0:25:
8b:3e:bd:4f:f8:d2:6c:af:dc:6c:cc:79:c6:7e:ce:
d5:aa:be:c9:b1:c7:c8:df:7e:51:fd:99:f7:79:a5:
1b:f6:6f:fd:c2:26:27:a0:ba:91:b2:3f:6a:92:c3:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1D:15:5E:E2:B5:11:24:6E:54:29:A4:66:09:60:1F:AC:00:E9:DF
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:98:c1:34:b4:ce:35:bf:e2:87:55:e1:46:4a:d9:ed:f4:0f:
e6:87:78:2c:ee:13:fa:1c:41:89:70:19:91:f3:c2:12:93:b9:
53:90:dc:dd:27:56:54:cf:48:44:a7:3f:03:12:28:b1:98:8b:
78:b1:cb:4f:ec:96:cd:6f:40:36:3d:9e:22:a2:75:9a:d7:1b:
0f:8e:ff:86:26:cb:2e:42:24:e9:72:9e:e7:7a:f3:2c:35:81:
64:4a:ca:c5:10:63:c5:80:51:78:af:93:29:d1:20:71:28:f5:
59:23:e5:c6:b4:86:8c:1f:96:ad:15:44:c9:c5:fd:b5:0a:3c:
a2:c5:88:81:f6:20:43:51:89:eb:9f:89:fb:12:50:2a:e4:ae:
71:a0:88:b6:e4:df:84:17:c9:d1:06:79:86:81:d6:46:74:dc:
f6:de:ba:47:27:e1:ed:b1:75:98:b1:05:3e:e7:67:3b:d4:c1:
74:6b:4f:b2:50:44:ad:9e:cd:c6:07:90:2f:64:94:a1:e7:40:
57:70:9d:ec:78:dc:88:01:d4:21:13:84:4e:9f:f5:bf:a2:ce:
d9:a9:90:6e:d1:98:9e:c0:6f:93:3c:c9:a0:9a:6a:24:cd:cf:
c9:45:ea:1e:3a:fd:10:cf:3c:59:2c:4f:cc:cc:c8:fb:c8:e9:
e4:ea:17:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvOliJOHEUGKOLNDnYZ5tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODhmYWUzNWI2NmI0ZGUyZTQxY2E1ZWUwNzdiNWVmMGI0
YWI2NDkwHhcNMjYwOTI2MjIwMTM0WhcNMjYwOTI3MjIwMTM0WjAzMTEwLwYDVQQD
EyhkZjFkMTU1ZWUyYjUxMTI0NmU1NDI5YTQ2NjA5NjAxZmFjMDBlOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18NzRgHmDpB5pYG0n9WqkvSOaNpe
lxyxsfZqPDffGVp+Yt2IEPHHR16Xmx8K9k/zx0lW39E3lpCxbpVq7FEvlRz3ziD8
14ZRERhC0tnAO9QYQl054pS9rkyIZ675ih24h+MkRxAP1eJfxsPL073N0X1LmpYg
+jo2gdihUM1YrFFdeAsDMYvg6qIyARPZAJXIk4tlLHQxC41HgFJjEXadgkihOWq1
gUn69cYNNj2y+MGgnPLxXKWne9bugD6uodCyZJDrfj4Lpbooo7h3sz924CWLPr1P
+NJsr9xszHnGfs7Vqr7JscfI335R/Zn3eaUb9m/9wiYnoLqRsj9qksMQ3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8dFV7itREkblQppGYJYB+sAOnfMB8GA1UdIwQY
MBaAFKqI+uNbZrTeLkHKXuB3te8LSrZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzct
YjkyY2I2MTEzMDM1LzEvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzctYjkyY2I2MTEzMDM1
LzEvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5jBNLTO
Nb/ih1XhRkrZ7fQP5od4LO4T+hxBiXAZkfPCEpO5U5Dc3SdWVM9IRKc/AxIosZiL
eLHLT+yWzW9ANj2eIqJ1mtcbD47/hibLLkIk6XKe53rzLDWBZErKxRBjxYBReK+T
KdEgcSj1WSPlxrSGjB+WrRVEycX9tQo8osWIgfYgQ1GJ65+J+xJQKuSucaCItuTf
hBfJ0QZ5hoHWRnTc9t66Ryfh7bF1mLEFPudnO9TBdGtPslBErZ7NxgeQL2SUoedA
V3Cd7HjciAHUIROETp/1v6LO2amQbtGYnsBvkzzJoJpqJM3PyUXqHjr9EM88WSxP
zMzI+8jp5OoXqQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:49:31 2026 by rpki-client