Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: 8W4k4Z9+MKqFd5DH67SnYcYTz+TolfncN7u8BMJ7jZs=
Subject key identifier: 89:13:9E:94:EF:DB:FA:6C:0B:F5:5F:85:1E:7F:F4:E7:A7:62:CA:90
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 01A0DC846128A213F58F1245409887C5689E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 15A1
Signing time: Sat 26 Sep 2026 07:00:57 +0000
Manifest this update: Sat 26 Sep 2026 07:00:57 +0000
Manifest next update: Sun 27 Sep 2026 07:00:57 +0000
Files and hashes: 1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: EIMdE+O/FRcRTy7+qqYh4UC1ryEvFr/Wkm8hk8sOwds=)
2: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (hash: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI=)
3: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (hash: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:61:28:a2:13:f5:8f:12:45:40:98:87:c5:68:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Sep 26 07:00:57 2026 GMT
Not After : Sep 27 07:00:57 2026 GMT
Subject: CN=89139e94efdbfa6c0bf55f851e7ff4e7a762ca90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a5:57:74:d9:87:f6:9e:8d:4b:61:4a:e3:3f:
a5:39:46:6f:a8:dd:b0:3c:49:9b:67:74:f8:79:a3:
81:e1:52:f8:d3:28:4e:a3:90:b6:75:d7:8a:f2:e1:
0f:f1:0b:4b:a5:8b:d5:07:11:df:74:c5:26:77:ff:
8b:11:da:26:60:ae:a9:a5:31:25:51:84:c0:fc:25:
94:e0:25:fd:1a:27:dd:3f:68:de:fc:21:c8:d2:2b:
5d:c9:2a:57:e7:ec:5d:f7:b7:01:77:6a:d0:06:de:
89:12:10:c3:30:21:93:b9:36:89:6b:84:60:fe:64:
aa:84:69:ef:b5:53:1a:da:76:b0:7d:ac:f8:55:fe:
cd:fb:3d:c9:ee:2b:c7:00:0b:ad:0c:3a:77:ad:13:
94:64:9b:81:ce:be:cc:e5:16:47:17:6e:da:28:92:
8c:bf:bf:33:39:cb:45:eb:eb:9d:f6:1c:47:ce:24:
8b:96:56:29:cf:81:b2:5a:32:28:c6:d3:bc:da:ca:
4d:ae:8c:c4:f4:a9:70:83:71:37:e1:8e:31:4a:26:
f8:f3:2c:13:1c:ac:5e:c1:1b:9f:e4:42:85:46:07:
3a:63:dd:c1:00:0f:1d:70:6a:46:a3:51:db:c1:87:
6c:17:c4:07:d6:d7:82:ab:79:3f:47:41:f2:ce:da:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:13:9E:94:EF:DB:FA:6C:0B:F5:5F:85:1E:7F:F4:E7:A7:62:CA:90
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:61:4e:07:20:96:50:99:3c:54:9d:70:7e:c7:2a:6f:d1:53:
78:f2:fc:a7:1e:7b:28:d3:31:b2:b3:36:59:d5:d4:bf:0d:3e:
9f:88:db:a5:87:31:fd:31:b8:e4:0a:1d:62:5c:53:4c:3b:c4:
92:73:13:96:5d:d0:64:64:99:0b:c2:86:87:b0:d8:b0:39:8a:
33:67:84:17:25:96:76:8e:99:4b:4a:68:cf:82:8f:f2:89:85:
87:2c:57:9b:84:ae:8a:40:90:13:a7:e2:4e:21:b7:36:be:86:
6a:3f:c5:63:33:cd:09:68:aa:1d:c3:f4:e0:77:28:af:f4:aa:
28:9e:7f:47:69:49:bb:72:e0:59:d3:9c:dc:8b:65:89:3a:62:
23:5e:8d:68:92:54:c7:82:f2:f0:22:da:16:38:95:fe:38:cb:
6c:20:a6:5e:13:fe:c1:74:58:f1:24:a8:55:02:76:be:f1:0b:
a8:3a:d7:4d:7d:ed:19:06:89:2c:05:26:39:7e:fe:ea:86:fd:
04:51:44:d6:86:69:94:62:9b:97:24:d7:7e:d4:42:62:31:38:
0b:33:9e:e4:29:82:ee:51:92:f1:ec:99:72:e7:d3:8c:48:63:
d3:db:0c:d5:40:a7:3f:d8:71:6c:26:6b:20:2c:3a:9c:2c:a9:
a2:35:8e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDchGEoohP1jxJFQJiHxWieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk
OWNmYmUwHhcNMjYwOTI2MDcwMDU3WhcNMjYwOTI3MDcwMDU3WjAzMTEwLwYDVQQD
Eyg4OTEzOWU5NGVmZGJmYTZjMGJmNTVmODUxZTdmZjRlN2E3NjJjYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKVXdNmH9p6NS2FK4z+lOUZvqN2w
PEmbZ3T4eaOB4VL40yhOo5C2ddeK8uEP8QtLpYvVBxHfdMUmd/+LEdomYK6ppTEl
UYTA/CWU4CX9GifdP2je/CHI0itdySpX5+xd97cBd2rQBt6JEhDDMCGTuTaJa4Rg
/mSqhGnvtVMa2nawfaz4Vf7N+z3J7ivHAAutDDp3rROUZJuBzr7M5RZHF27aKJKM
v78zOctF6+ud9hxHziSLllYpz4GyWjIoxtO82spNrozE9Klwg3E34Y4xSib48ywT
HKxewRuf5EKFRgc6Y93BAA8dcGpGo1HbwYdsF8QH1teCq3k/R0HyztroDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkTnpTv2/psC/VfhR5/9OenYsqQMB8GA1UdIwQY
MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt
Y2ZiYmMxNDY3MWEzLzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz
LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2FOByCW
UJk8VJ1wfscqb9FTePL8px57KNMxsrM2WdXUvw0+n4jbpYcx/TG45AodYlxTTDvE
knMTll3QZGSZC8KGh7DYsDmKM2eEFyWWdo6ZS0poz4KP8omFhyxXm4SuikCQE6fi
TiG3Nr6Gaj/FYzPNCWiqHcP04Hcor/SqKJ5/R2lJu3LgWdOc3ItliTpiI16NaJJU
x4Ly8CLaFjiV/jjLbCCmXhP+wXRY8SSoVQJ2vvELqDrXTX3tGQaJLAUmOX7+6ob9
BFFE1oZplGKblyTXftRCYjE4CzOe5CmC7lGS8eyZcufTjEhj09sM1UCnP9hxbCZr
ICw6nCypojWO3Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:12:41 2026 by rpki-client