Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
File: qdvUwWus1i0mMqoeF7LozQEA1oQ.mft (raw, json)
Hash identifier: FhgdjvVXqCXIsiqha2Fmtd0KIWdcN5YPGM1Q05P95+Y=
Subject key identifier: 86:14:AF:9E:44:17:5D:6C:E9:9C:ED:8E:BB:6E:B2:B1:80:7F:4A:68
Authority key identifier: A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
Certificate issuer: /CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Certificate serial: 01A0DF858B89A373EA8E75CA3AE751BC8380
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
Manifest number: 1A7D
Signing time: Sat 26 Sep 2026 21:01:06 +0000
Manifest this update: Sat 26 Sep 2026 21:01:06 +0000
Manifest next update: Sun 27 Sep 2026 21:01:06 +0000
Files and hashes: 1: qdvUwWus1i0mMqoeF7LozQEA1oQ.crl (hash: GpmSDusWU/ZO1sVxhKZsVzBAix7cb/gitJ+bGHVqtHY=)
2: z_aohf0nvgrxwGRTbVmz5aObwgs.roa (hash: uED0obTkRG8cxn/WVBRgbTdBw3zAOTzzg1FW8rl0WuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:8b:89:a3:73:ea:8e:75:ca:3a:e7:51:bc:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dbd4c16bacd62d2632aa1e17b2e8cd0100d684
Validity
Not Before: Sep 26 21:01:06 2026 GMT
Not After : Sep 27 21:01:06 2026 GMT
Subject: CN=8614af9e44175d6ce99ced8ebb6eb2b1807f4a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:dc:51:da:be:f7:ba:78:4b:30:e1:22:cc:
85:24:4c:21:24:79:60:3c:d8:dc:cc:a8:45:6c:79:
c5:51:1c:89:e8:93:37:65:fb:19:30:1f:11:08:8c:
73:56:92:91:7e:26:ee:66:bf:df:20:fb:4d:eb:dc:
f5:3e:cc:da:3d:b8:ba:e5:81:ce:6c:6f:6d:53:b9:
a7:78:99:9d:27:0a:ab:6b:1c:32:6d:dd:19:4f:8b:
62:e2:97:31:6c:bd:9d:1b:92:77:92:59:d0:67:57:
06:99:f3:0e:2b:b0:70:a8:9b:1e:57:10:4f:5f:c3:
39:10:38:3f:cd:dd:d5:bb:3b:40:49:00:6f:12:6d:
cc:5e:15:25:a0:33:fd:46:a3:f7:1e:fd:2d:01:b9:
b2:44:e9:61:50:bf:d7:a1:58:8a:a4:f7:7d:a4:de:
4e:0a:7e:9a:25:a1:14:2e:fb:d6:5c:ae:7e:bc:ef:
4a:34:a5:47:48:fb:ec:bb:ef:7c:aa:a8:d9:7a:01:
66:fd:51:4f:57:d8:7e:b7:d4:b8:47:dd:9b:27:b2:
5a:60:67:ea:6d:27:64:99:40:9c:b0:f5:d6:1a:71:
af:87:31:f2:2e:8a:b0:92:a0:4a:ba:64:32:e0:e6:
de:05:84:c0:b3:7f:66:c1:5e:6d:64:13:fd:df:1f:
5c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:14:AF:9E:44:17:5D:6C:E9:9C:ED:8E:BB:6E:B2:B1:80:7F:4A:68
X509v3 Authority Key Identifier:
keyid:A9:DB:D4:C1:6B:AC:D6:2D:26:32:AA:1E:17:B2:E8:CD:01:00:D6:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdvUwWus1i0mMqoeF7LozQEA1oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/cd46d6-457a-4122-8a73-b6c283511d08/1/qdvUwWus1i0mMqoeF7LozQEA1oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c6:c9:73:aa:65:2b:f9:4b:42:2e:bb:03:01:22:89:94:32:
a2:bf:ff:98:e8:0a:a8:ab:49:9f:9d:19:91:bc:08:4a:dc:fc:
4b:f8:d4:2f:84:0b:d3:da:e6:68:23:a7:cf:bc:a5:45:ad:3c:
24:a3:a7:1c:52:d3:4c:3b:a1:4e:0c:97:a0:7a:35:bd:f1:c8:
dc:30:33:6f:da:77:22:b4:d1:f7:e7:fc:ce:7a:25:4c:7c:63:
14:65:aa:ad:f6:9d:96:85:d8:16:35:0a:d1:28:5c:0a:9d:23:
5a:f0:13:58:ab:7b:d0:26:53:08:d2:01:4e:d0:7d:5e:96:88:
cc:36:0b:19:37:d9:f4:d7:92:83:50:d3:0f:61:55:63:6b:45:
22:c3:86:d5:ac:72:eb:a7:3a:89:00:b2:8a:18:b8:2c:1f:06:
c4:60:28:74:74:ce:44:2f:d9:8c:0d:8f:5a:4a:19:59:c3:9a:
d5:64:57:ed:30:5d:55:8c:4f:c0:e2:ff:40:5f:44:1a:2e:ad:
13:5d:e7:c1:f6:a4:8d:f2:e7:cb:7d:2f:34:f9:55:86:54:55:
77:b8:e0:20:12:bc:88:24:c8:7b:cb:ac:c2:c9:7d:8a:f2:0b:
b6:9b:30:c0:85:53:3b:88:cb:0d:9c:77:54:40:67:2b:ae:15:
92:bf:5e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfhYuJo3PqjnXKOudRvIOAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZGJkNGMxNmJhY2Q2MmQyNjMyYWExZTE3YjJlOGNkMDEw
MGQ2ODQwHhcNMjYwOTI2MjEwMTA2WhcNMjYwOTI3MjEwMTA2WjAzMTEwLwYDVQQD
Eyg4NjE0YWY5ZTQ0MTc1ZDZjZTk5Y2VkOGViYjZlYjJiMTgwN2Y0YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2ncUdq+97p4SzDhIsyFJEwhJHlg
PNjczKhFbHnFURyJ6JM3ZfsZMB8RCIxzVpKRfibuZr/fIPtN69z1PszaPbi65YHO
bG9tU7mneJmdJwqraxwybd0ZT4ti4pcxbL2dG5J3klnQZ1cGmfMOK7BwqJseVxBP
X8M5EDg/zd3VuztASQBvEm3MXhUloDP9RqP3Hv0tAbmyROlhUL/XoViKpPd9pN5O
Cn6aJaEULvvWXK5+vO9KNKVHSPvsu+98qqjZegFm/VFPV9h+t9S4R92bJ7JaYGfq
bSdkmUCcsPXWGnGvhzHyLoqwkqBKumQy4ObeBYTAs39mwV5tZBP93x9caQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYUr55EF11s6ZztjrtusrGAf0poMB8GA1UdIwQY
MBaAFKnb1MFrrNYtJjKqHhey6M0BANaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMt
YjZjMjgzNTExZDA4LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9jZDQ2ZDYtNDU3YS00MTIyLThhNzMtYjZjMjgzNTExZDA4
LzEvcWR2VXdXdXMxaTBtTXFvZUY3TG96UUVBMW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK8bJc6pl
K/lLQi67AwEiiZQyor//mOgKqKtJn50ZkbwIStz8S/jUL4QL09rmaCOnz7ylRa08
JKOnHFLTTDuhTgyXoHo1vfHI3DAzb9p3IrTR9+f8znolTHxjFGWqrfadloXYFjUK
0ShcCp0jWvATWKt70CZTCNIBTtB9XpaIzDYLGTfZ9NeSg1DTD2FVY2tFIsOG1axy
66c6iQCyihi4LB8GxGAodHTORC/ZjA2PWkoZWcOa1WRX7TBdVYxPwOL/QF9EGi6t
E13nwfakjfLny30vNPlVhlRVd7jgIBK8iCTIe8uswsl9ivILtpswwIVTO4jLDZx3
VEBnK64Vkr9emw==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:17:27 2026 by rpki-client