Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: H5JP4ECLDQep8IldXdf5nkmk+KeDKDregcwKah2d+2E=
Subject key identifier: 7A:BE:69:F2:5D:81:C6:11:42:65:09:DC:7C:A0:6E:EC:C7:3B:A5:39
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 01A0C66A3443752579B5CEE4BC796AA2C26E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 041A
Signing time: Tue 22 Sep 2026 00:00:43 +0000
Manifest this update: Tue 22 Sep 2026 00:00:43 +0000
Manifest next update: Wed 23 Sep 2026 00:00:43 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: XxbVe+41nvHQaHIgts8k9Q8dn+ru3rTwPq8YakFjz98=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:34:43:75:25:79:b5:ce:e4:bc:79:6a:a2:c2:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Sep 22 00:00:43 2026 GMT
Not After : Sep 23 00:00:43 2026 GMT
Subject: CN=7abe69f25d81c611426509dc7ca06eecc73ba539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:01:c8:a0:af:24:8e:b4:5a:82:02:81:87:75:
bc:65:8b:6a:0d:b3:17:17:12:fd:25:d2:29:81:c8:
49:35:c4:03:32:76:cf:ee:88:ed:0f:ad:4c:da:f0:
36:6b:d2:29:b9:34:54:9b:a3:f1:88:fb:2d:2c:31:
32:f3:60:f4:b6:93:55:56:ae:a5:86:29:cb:63:c0:
e7:82:77:ac:39:9e:49:2c:ee:1f:92:1a:77:3a:2d:
53:e9:f8:e0:a1:3c:45:03:62:99:38:ff:ba:f6:99:
fb:21:27:8b:16:b5:4d:c0:83:1f:44:c9:59:9d:fb:
38:06:de:c3:5a:a5:df:f9:81:4a:94:31:01:bd:a7:
45:2b:5a:6e:94:d3:73:46:71:b8:11:2f:23:07:d3:
76:73:2a:b7:0e:1d:45:04:48:16:48:ca:54:af:bb:
c4:15:85:e7:83:6d:f4:19:17:a0:64:1d:76:fc:b9:
95:c3:1c:0a:c0:98:07:4a:85:32:3f:25:75:68:5c:
a8:34:2b:54:5e:9d:b8:d7:0b:81:46:c7:56:68:d2:
97:e2:0c:7e:92:a1:c6:ee:d8:5b:41:b0:ff:fb:9e:
a4:58:2f:42:ac:49:ae:95:fe:2a:35:b2:99:d0:65:
88:ec:19:6b:a4:60:ab:c6:4d:47:9b:94:04:d0:8c:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BE:69:F2:5D:81:C6:11:42:65:09:DC:7C:A0:6E:EC:C7:3B:A5:39
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9f:cc:8e:a0:77:87:26:a7:3c:ec:6d:e2:2b:b3:e1:d2:27:
45:5d:9e:41:58:10:8f:30:6b:e7:0e:50:dd:ec:d2:17:02:b2:
33:e6:d8:d4:d5:e7:be:ec:a0:37:29:13:bc:02:3f:62:4a:9c:
e8:ef:0b:8d:fc:23:f5:a6:23:aa:1d:e2:3f:ff:04:3d:58:d9:
09:97:ad:f1:2f:05:62:00:91:34:f6:e8:1e:73:40:bc:b7:bd:
87:e4:89:fd:92:87:9d:2f:1e:88:98:87:73:38:0d:a1:48:3c:
17:10:6f:4e:41:46:c2:c1:1e:ea:1c:69:02:57:46:3c:60:1c:
94:fc:2b:47:55:a8:63:b7:87:e5:6d:7c:91:d5:46:4a:77:60:
dd:57:cc:80:f5:48:08:19:61:af:9f:be:0e:1a:2c:ca:98:d9:
a4:eb:b4:39:7e:40:5d:2c:00:d4:7e:2c:ab:e2:21:2c:9f:11:
a4:28:75:0c:dd:bd:63:d2:6a:5d:f6:24:a1:0f:6b:7a:6e:5e:
32:82:6e:cf:e8:22:64:d4:5d:a5:ff:e3:81:e2:02:8e:00:ee:
bf:44:78:2d:44:d7:31:12:71:ca:9c:62:6e:5c:65:5b:47:23:
46:40:89:d3:6b:83:7d:6a:95:ac:7a:a4:75:2d:ad:04:54:1e:
29:45:07:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGajRDdSV5tc7kvHlqosJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MzNiMDgwMWQ0MGQwNTg0OTA3MmUyZmM4MTIxM2IwMjVk
MmEyYmMwHhcNMjYwOTIyMDAwMDQzWhcNMjYwOTIzMDAwMDQzWjAzMTEwLwYDVQQD
Eyg3YWJlNjlmMjVkODFjNjExNDI2NTA5ZGM3Y2EwNmVlY2M3M2JhNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAHIoK8kjrRaggKBh3W8ZYtqDbMX
FxL9JdIpgchJNcQDMnbP7ojtD61M2vA2a9IpuTRUm6PxiPstLDEy82D0tpNVVq6l
hinLY8DngnesOZ5JLO4fkhp3Oi1T6fjgoTxFA2KZOP+69pn7ISeLFrVNwIMfRMlZ
nfs4Bt7DWqXf+YFKlDEBvadFK1pulNNzRnG4ES8jB9N2cyq3Dh1FBEgWSMpUr7vE
FYXng230GRegZB12/LmVwxwKwJgHSoUyPyV1aFyoNCtUXp241wuBRsdWaNKX4gx+
kqHG7thbQbD/+56kWC9CrEmulf4qNbKZ0GWI7BlrpGCrxk1Hm5QE0IzLpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq+afJdgcYRQmUJ3HygbuzHO6U5MB8GA1UdIwQY
MBaAFKgzsIAdQNBYSQcuL8gSE7Al0qK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mNDJhYjEtMTA4OS00YjE0LWIyZjkt
MTdiZjA2NmRhNGM1LzEvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9mNDJhYjEtMTA4OS00YjE0LWIyZjktMTdiZjA2NmRhNGM1
LzEvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqp/MjqB3
hyanPOxt4iuz4dInRV2eQVgQjzBr5w5Q3ezSFwKyM+bY1NXnvuygNykTvAI/Ykqc
6O8Ljfwj9aYjqh3iP/8EPVjZCZet8S8FYgCRNPboHnNAvLe9h+SJ/ZKHnS8eiJiH
czgNoUg8FxBvTkFGwsEe6hxpAldGPGAclPwrR1WoY7eH5W18kdVGSndg3VfMgPVI
CBlhr5++DhosypjZpOu0OX5AXSwA1H4sq+IhLJ8RpCh1DN29Y9JqXfYkoQ9rem5e
MoJuz+giZNRdpf/jgeICjgDuv0R4LUTXMRJxypxiblxlW0cjRkCJ02uDfWqVrHqk
dS2tBFQeKUUHvg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:25:13 2026 by rpki-client