Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
File: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft (raw, json)
Hash identifier: pPZekR8fl/I1z+3jaMn9x6HCq1HlTX+e4BMbhKVpLuo=
Subject key identifier: 65:69:4B:A9:2B:EC:C1:44:7F:B4:78:9F:BD:38:C3:0B:79:1F:B2:E4
Authority key identifier: A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
Certificate issuer: /CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Certificate serial: 01A0EBC0DBD2861EB30373877E4F0BC712CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
Manifest number: 0C4D
Signing time: Tue 29 Sep 2026 06:01:19 +0000
Manifest this update: Tue 29 Sep 2026 06:01:19 +0000
Manifest next update: Wed 30 Sep 2026 06:01:19 +0000
Files and hashes: 1: KkyFxTRdXEokTgrrlmxAqjiu7ZQ.roa (hash: xjVxn6VE0DsxVNBeCrJPg5ZSsJvDyeaJISylTts3lDo=)
2: qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl (hash: Gj7T6E3EFURHcLTJK0/qCk/94VtY3q33p/7oynF2lbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:db:d2:86:1e:b3:03:73:87:7e:4f:0b:c7:12:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96e2341d783e5934f87d05c473fc6d2b30d9d45
Validity
Not Before: Sep 29 06:01:19 2026 GMT
Not After : Sep 30 06:01:19 2026 GMT
Subject: CN=65694ba92becc1447fb4789fbd38c30b791fb2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ed:09:de:92:07:56:92:f3:64:f9:54:79:b1:
fe:3f:e9:01:e1:75:da:84:2e:22:b2:20:c6:26:e2:
4b:6a:96:0c:90:c6:8b:34:fc:0d:83:68:2a:db:89:
f3:a8:3f:76:2e:cd:d0:b5:a9:19:b4:b6:fc:bd:ee:
fa:97:18:b7:ed:56:fd:e7:3e:09:c7:61:47:53:36:
ca:7a:a5:d8:39:1e:a8:11:61:1d:d5:92:03:d6:b2:
a7:27:7e:27:35:9a:be:13:06:3f:4b:23:26:cc:1a:
84:d0:1b:7e:de:e7:cb:06:c3:ea:8d:67:f6:e0:35:
2a:f3:ab:8b:c7:f1:1b:91:20:17:87:4f:50:ae:7d:
e5:09:b0:db:c0:54:39:fd:3e:75:b8:0a:03:66:d1:
8c:88:72:f4:39:86:da:ec:1e:e2:f4:a1:47:3c:05:
a5:14:88:28:a1:10:57:bc:cf:9c:54:60:2a:11:59:
19:e7:ed:84:08:2c:d7:4c:4a:f0:15:27:d2:29:4a:
19:b9:3c:dc:ae:d7:7c:18:05:ba:21:07:7b:30:83:
51:3f:c3:40:f1:64:82:58:90:53:08:d2:bf:03:6e:
3a:db:5d:6f:2e:27:b7:ce:12:99:02:d0:5d:c1:6f:
ee:a5:59:9e:c9:a7:12:ca:3b:06:e2:ee:b3:15:b0:
ca:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:69:4B:A9:2B:EC:C1:44:7F:B4:78:9F:BD:38:C3:0B:79:1F:B2:E4
X509v3 Authority Key Identifier:
keyid:A9:6E:23:41:D7:83:E5:93:4F:87:D0:5C:47:3F:C6:D2:B3:0D:9D:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/257932-c18f-411d-9b6f-6d42257c8f6b/1/qW4jQdeD5ZNPh9BcRz_G0rMNnUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:1e:9d:6f:e2:39:04:c4:49:0d:26:0c:ef:59:b2:7e:7a:56:
65:35:67:9b:f5:85:f2:11:f3:85:6f:8d:dc:cf:67:e7:da:a4:
d6:5a:7e:d7:1d:ef:25:c1:21:ac:40:b1:65:44:e9:b5:7f:1f:
59:c2:51:d3:0a:50:44:52:fb:37:8a:ff:51:53:ab:74:81:fe:
fd:bb:07:8d:ae:43:32:ad:ff:bb:6f:b9:fb:5d:ce:2e:cf:69:
c7:38:00:e4:fd:9e:c0:34:c4:b3:76:45:9d:a4:02:cd:77:b9:
e0:14:22:0b:b6:36:e3:8a:d6:f4:06:37:fd:69:4d:26:40:9b:
48:27:14:5b:e3:6a:17:ba:0c:8a:9a:12:a2:16:c9:38:ab:d8:
51:74:e9:c9:c1:82:aa:7b:4c:3b:03:88:4d:8d:fa:2c:a4:b7:
38:4a:a6:ec:8a:9c:84:6d:24:bc:76:36:e6:d4:5e:20:65:d1:
b1:bb:4e:25:c9:74:87:f2:9f:93:d8:68:9a:60:0c:44:fb:2e:
7e:81:8d:1a:9f:af:3f:aa:10:69:95:ee:e2:50:ec:d3:ec:d3:
46:c0:db:49:4d:ca:09:6b:d8:e5:26:28:e7:7b:92:47:6c:47:
83:c8:6b:ec:4a:db:ca:ee:ec:f7:27:93:e3:79:ba:2f:cf:02:
d7:e7:d0:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrwNvShh6zA3OHfk8LxxLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NmUyMzQxZDc4M2U1OTM0Zjg3ZDA1YzQ3M2ZjNmQyYjMw
ZDlkNDUwHhcNMjYwOTI5MDYwMTE5WhcNMjYwOTMwMDYwMTE5WjAzMTEwLwYDVQQD
Eyg2NTY5NGJhOTJiZWNjMTQ0N2ZiNDc4OWZiZDM4YzMwYjc5MWZiMmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6O0J3pIHVpLzZPlUebH+P+kB4XXa
hC4isiDGJuJLapYMkMaLNPwNg2gq24nzqD92Ls3QtakZtLb8ve76lxi37Vb95z4J
x2FHUzbKeqXYOR6oEWEd1ZID1rKnJ34nNZq+EwY/SyMmzBqE0Bt+3ufLBsPqjWf2
4DUq86uLx/EbkSAXh09Qrn3lCbDbwFQ5/T51uAoDZtGMiHL0OYba7B7i9KFHPAWl
FIgooRBXvM+cVGAqEVkZ5+2ECCzXTErwFSfSKUoZuTzcrtd8GAW6IQd7MINRP8NA
8WSCWJBTCNK/A246211vLie3zhKZAtBdwW/upVmeyacSyjsG4u6zFbDKYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVpS6kr7MFEf7R4n704wwt5H7LkMB8GA1UdIwQY
MBaAFKluI0HXg+WTT4fQXEc/xtKzDZ1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYt
NmQ0MjI1N2M4ZjZiLzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yNTc5MzItYzE4Zi00MTFkLTliNmYtNmQ0MjI1N2M4ZjZi
LzEvcVc0alFkZUQ1Wk5QaDlCY1J6X0cwck1OblVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYh6db+I5
BMRJDSYM71myfnpWZTVnm/WF8hHzhW+N3M9n59qk1lp+1x3vJcEhrECxZUTptX8f
WcJR0wpQRFL7N4r/UVOrdIH+/bsHja5DMq3/u2+5+13OLs9pxzgA5P2ewDTEs3ZF
naQCzXe54BQiC7Y244rW9AY3/WlNJkCbSCcUW+NqF7oMipoSohbJOKvYUXTpycGC
qntMOwOITY36LKS3OEqm7IqchG0kvHY25tReIGXRsbtOJcl0h/Kfk9hommAMRPsu
foGNGp+vP6oQaZXu4lDs0+zTRsDbSU3KCWvY5SYo53uSR2xHg8hr7Erbyu7s9yeT
43m6L88C1+fQDg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 14:56:59 2026 by rpki-client