Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier: 9M0FMmfnziXIds9tF6UigcD1X2qYZwFUrjsuLNFP/AY=
Subject key identifier: 01:A8:1D:47:5A:B7:E5:12:9B:95:26:7B:07:E4:19:AD:12:20:E3:B7
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 01A0C3D6CF77E83C791583F0A6F0734CD7C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number: 0FCF
Signing time: Mon 21 Sep 2026 12:00:29 +0000
Manifest this update: Mon 21 Sep 2026 12:00:29 +0000
Manifest next update: Tue 22 Sep 2026 12:00:29 +0000
Files and hashes: 1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
3: Vm1c1WtjyqpCDDaFqRgWBPRuzTE.roa (hash: PhCalGp+MfsuVT1o+EaqpG+ubg4eyRCw+3C+dRQltm0=)
4: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: voGUwDpGbcxH1x6M+tei/pvuZvR4SlCcjLi1isHbZc4=)
7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:cf:77:e8:3c:79:15:83:f0:a6:f0:73:4c:d7:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Sep 21 12:00:29 2026 GMT
Not After : Sep 22 12:00:29 2026 GMT
Subject: CN=01a81d475ab7e5129b95267b07e419ad1220e3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e8:90:8a:88:03:6f:5d:fd:91:f6:7b:61:8f:
b2:84:6a:98:b2:66:85:5e:03:14:87:7c:d6:31:35:
f6:51:1f:48:c7:c6:a9:34:0c:d2:2a:59:82:33:21:
96:bd:cb:18:19:c2:bc:9e:0a:c0:36:8e:34:22:45:
69:d2:46:7a:0c:3d:a6:f8:3c:c7:8e:59:f9:c6:3c:
ac:b9:0e:2b:6c:63:85:ab:86:4c:fa:36:f2:93:f5:
93:ef:dd:99:56:87:df:7f:5f:71:50:dd:14:08:68:
0b:12:21:a5:e3:cb:76:e2:dc:d8:54:e0:a1:c2:e1:
91:f7:25:4f:2d:33:aa:92:a7:88:ec:2f:18:84:da:
68:9d:6c:77:1f:a7:83:59:c6:6e:13:1a:1d:51:b9:
55:47:2c:f4:fc:41:b4:68:1c:c6:e6:17:35:ef:f2:
f4:94:22:b5:9a:00:05:e6:78:89:e2:f0:9a:4b:42:
f1:c2:f7:e5:51:a6:69:3b:fb:99:b6:63:de:fc:ed:
d1:87:52:89:fc:d8:21:ac:86:c5:af:2d:a3:04:a8:
63:24:53:6f:9c:97:6e:d1:ff:a4:0a:eb:c6:1a:63:
b2:8e:b4:3b:ff:cd:22:78:2b:dd:6f:da:00:a8:c8:
f1:ae:44:0d:0b:da:06:7e:f4:a1:e3:36:1c:50:4e:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A8:1D:47:5A:B7:E5:12:9B:95:26:7B:07:E4:19:AD:12:20:E3:B7
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:af:fe:0a:0a:b9:99:98:9b:5c:3b:be:fc:75:e2:27:cc:b8:
51:38:b6:b5:d7:47:ba:a5:83:69:32:54:60:b8:d1:7f:02:17:
8f:7a:25:5b:d1:24:f1:49:23:3f:36:78:ef:b7:b3:5e:0b:d6:
28:ee:5d:e7:cf:bc:c8:85:bb:8b:df:19:ae:d5:31:f8:af:5f:
cd:f2:36:0a:e2:f3:98:c4:89:91:3b:be:49:d3:1b:b2:e5:67:
79:24:ec:95:b3:3d:d2:4c:22:68:14:6f:e2:6d:65:ee:b4:ae:
08:92:fa:a6:37:5e:3d:bd:9f:ed:d8:1d:14:ee:4a:47:aa:5a:
9a:3c:f0:6d:81:f2:37:e2:fc:70:a4:90:bf:22:21:c8:c0:41:
13:43:da:91:76:ab:20:dc:ee:ea:7d:df:ba:d5:b1:ff:be:f8:
49:33:3d:5b:d3:ee:a4:b9:10:85:ab:a1:58:9a:d6:f6:62:e2:
4c:1d:9c:2c:c9:3c:a2:20:8e:46:19:03:9a:fa:04:2b:5c:85:
8b:e6:ee:1c:a8:3f:fe:9c:15:6c:20:bd:96:a9:60:23:be:81:
6c:ae:a1:1c:e5:db:00:cb:01:d8:95:b4:16:8e:66:41:0c:c8:
b8:8d:1a:22:8f:35:2e:72:26:76:1f:b6:95:51:a1:a9:68:0a:
14:59:f7:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDD1s936Dx5FYPwpvBzTNfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz
ZDUxZDcwHhcNMjYwOTIxMTIwMDI5WhcNMjYwOTIyMTIwMDI5WjAzMTEwLwYDVQQD
EygwMWE4MWQ0NzVhYjdlNTEyOWI5NTI2N2IwN2U0MTlhZDEyMjBlM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eiQiogDb139kfZ7YY+yhGqYsmaF
XgMUh3zWMTX2UR9Ix8apNAzSKlmCMyGWvcsYGcK8ngrANo40IkVp0kZ6DD2m+DzH
jln5xjysuQ4rbGOFq4ZM+jbyk/WT792ZVofff19xUN0UCGgLEiGl48t24tzYVOCh
wuGR9yVPLTOqkqeI7C8YhNponWx3H6eDWcZuExodUblVRyz0/EG0aBzG5hc17/L0
lCK1mgAF5niJ4vCaS0LxwvflUaZpO/uZtmPe/O3Rh1KJ/NghrIbFry2jBKhjJFNv
nJdu0f+kCuvGGmOyjrQ7/80ieCvdb9oAqMjxrkQNC9oGfvSh4zYcUE5lSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGoHUdat+USm5UmewfkGa0SIOO3MB8GA1UdIwQY
MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt
MmY1Yzc0YzY5YWUxLzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx
LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6/+Cgq5
mZibXDu+/HXiJ8y4UTi2tddHuqWDaTJUYLjRfwIXj3olW9Ek8UkjPzZ477ezXgvW
KO5d58+8yIW7i98ZrtUx+K9fzfI2CuLzmMSJkTu+SdMbsuVneSTslbM90kwiaBRv
4m1l7rSuCJL6pjdePb2f7dgdFO5KR6pamjzwbYHyN+L8cKSQvyIhyMBBE0PakXar
INzu6n3futWx/774STM9W9PupLkQhauhWJrW9mLiTB2cLMk8oiCORhkDmvoEK1yF
i+buHKg//pwVbCC9lqlgI76BbK6hHOXbAMsB2JW0Fo5mQQzIuI0aIo81LnImdh+2
lVGhqWgKFFn3Vg==
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:08:58 2026 by rpki-client