Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
File: 02QfqO0c_D2qI6qvjDp2_oftW6s.mft (raw, json)
Hash identifier: jQj81Jpdz0yiKZhnNCcTjawGi9NC9sR+WG7OtMeN9LM=
Subject key identifier: 43:97:BD:34:A9:D2:C9:A4:AE:F2:8D:1F:5B:B3:5C:39:03:30:EE:96
Authority key identifier: D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
Certificate issuer: /CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Certificate serial: 01A0C3326907D1F52462A4E6503C352E8671
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
Manifest number: 1134
Signing time: Mon 21 Sep 2026 09:00:55 +0000
Manifest this update: Mon 21 Sep 2026 09:00:55 +0000
Manifest next update: Tue 22 Sep 2026 09:00:55 +0000
Files and hashes: 1: 02QfqO0c_D2qI6qvjDp2_oftW6s.crl (hash: V3pt8+JaJCUsAEkgUXEj5K8rH5gon6UFYemACdU3ctY=)
2: byVdI5-pp6NIJu3UrT-3MuGaeXY.roa (hash: l8DHq/5oUA3iWZHNp7UWg+LEjnOk5a1rdRkMplixMAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:32:69:07:d1:f5:24:62:a4:e6:50:3c:35:2e:86:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Validity
Not Before: Sep 21 09:00:55 2026 GMT
Not After : Sep 22 09:00:55 2026 GMT
Subject: CN=4397bd34a9d2c9a4aef28d1f5bb35c390330ee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:44:2a:c5:bd:1d:6b:21:57:15:53:12:21:d5:
60:17:a3:a2:e9:df:1c:ab:f2:10:66:95:c2:dc:95:
6e:4b:83:04:e3:6c:4d:6f:bd:35:a3:79:1b:64:1c:
7a:92:33:cd:55:40:94:1f:56:de:f7:8d:c7:b0:f6:
f5:88:82:46:fc:64:2e:db:97:25:dd:3a:1b:4b:bf:
03:bb:55:2f:38:f1:29:2e:99:0a:84:b5:05:20:b2:
c7:0c:2b:a6:6c:c0:29:c2:3e:18:cd:77:ce:a5:1c:
a8:36:c5:6e:8d:c5:08:77:c1:d6:9d:79:96:7a:4d:
47:d9:91:df:03:7a:8b:0b:a6:8e:32:cb:5b:35:8f:
a8:75:a5:e2:62:ed:81:74:28:58:46:5b:b1:46:8a:
ab:66:9d:e6:0a:f7:f6:02:2b:8a:f1:96:6c:e9:53:
8a:5a:e4:e2:cf:c2:47:44:92:e0:fb:9c:2e:03:a3:
09:c4:9f:63:dc:3b:65:a1:52:ae:ed:3b:b9:d5:a6:
a7:d3:d0:0e:df:0a:4c:98:08:b8:71:bf:e8:1c:17:
2a:00:92:ff:32:8e:e3:d5:ba:32:bc:3f:35:ce:5e:
c1:60:ab:14:52:c9:66:74:26:6d:44:4e:04:76:60:
fd:16:e0:70:10:c8:2e:e1:9f:13:6d:94:11:50:d3:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:97:BD:34:A9:D2:C9:A4:AE:F2:8D:1F:5B:B3:5C:39:03:30:EE:96
X509v3 Authority Key Identifier:
keyid:D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:7c:b3:71:00:1b:aa:34:b1:d2:0d:67:79:17:96:25:89:9a:
51:ba:37:0d:bd:1a:63:73:b0:46:72:15:c1:1d:1c:b3:18:14:
5a:f2:9c:fd:a7:10:da:ee:3c:a6:03:5e:1a:5c:5c:25:fa:a5:
33:a6:4f:54:b2:65:09:e4:bc:4c:5d:b9:4b:b8:44:d3:b6:74:
84:7d:bb:23:75:5b:1f:51:e1:bb:85:04:6e:bf:ab:19:ec:28:
04:49:d4:f0:0a:e9:0b:41:39:e6:c9:af:29:cb:ea:54:9d:f1:
75:74:d4:10:23:fd:59:f8:83:92:0d:78:81:50:72:79:1f:cc:
91:da:02:af:61:8e:d8:88:6c:84:ce:b7:83:ff:e0:fb:cf:ea:
20:d0:60:4f:3c:2f:1a:91:e4:ce:48:91:2e:48:ed:78:2e:05:
ca:11:80:d1:45:34:a4:12:79:6f:90:a4:32:03:f4:aa:e6:a4:
56:99:4d:48:b4:f9:2b:d1:5c:3e:fa:06:83:6e:7c:0c:ea:05:
20:de:ad:ce:56:bb:95:ad:e3:c5:c2:ff:6e:18:70:a3:30:df:
59:32:f0:18:36:ee:35:d2:3b:87:7a:ef:16:3c:b2:01:de:7a:
2f:6f:86:89:ff:9c:23:7e:e5:0f:17:88:28:19:5f:dc:42:7f:
80:ae:70:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDMmkH0fUkYqTmUDw1LoZxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjQxZmE4ZWQxY2ZjM2RhYTIzYWFhZjhjM2E3NmZlODdl
ZDViYWIwHhcNMjYwOTIxMDkwMDU1WhcNMjYwOTIyMDkwMDU1WjAzMTEwLwYDVQQD
Eyg0Mzk3YmQzNGE5ZDJjOWE0YWVmMjhkMWY1YmIzNWMzOTAzMzBlZTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUQqxb0dayFXFVMSIdVgF6Oi6d8c
q/IQZpXC3JVuS4ME42xNb701o3kbZBx6kjPNVUCUH1be943HsPb1iIJG/GQu25cl
3TobS78Du1UvOPEpLpkKhLUFILLHDCumbMApwj4YzXfOpRyoNsVujcUId8HWnXmW
ek1H2ZHfA3qLC6aOMstbNY+odaXiYu2BdChYRluxRoqrZp3mCvf2AiuK8ZZs6VOK
WuTiz8JHRJLg+5wuA6MJxJ9j3DtloVKu7Tu51aan09AO3wpMmAi4cb/oHBcqAJL/
Mo7j1boyvD81zl7BYKsUUslmdCZtRE4EdmD9FuBwEMgu4Z8TbZQRUNNL7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOXvTSp0smkrvKNH1uzXDkDMO6WMB8GA1UdIwQY
MBaAFNNkH6jtHPw9qiOqr4w6dv6H7VurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81OWQxMDktOGIwNi00ZGRkLWJjMjAt
OTk0MTk5MmM5YzI0LzEvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81OWQxMDktOGIwNi00ZGRkLWJjMjAtOTk0MTk5MmM5YzI0
LzEvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN3yzcQAb
qjSx0g1neReWJYmaUbo3Db0aY3OwRnIVwR0csxgUWvKc/acQ2u48pgNeGlxcJfql
M6ZPVLJlCeS8TF25S7hE07Z0hH27I3VbH1Hhu4UEbr+rGewoBEnU8ArpC0E55smv
KcvqVJ3xdXTUECP9WfiDkg14gVByeR/MkdoCr2GO2IhshM63g//g+8/qINBgTzwv
GpHkzkiRLkjteC4FyhGA0UU0pBJ5b5CkMgP0quakVplNSLT5K9FcPvoGg258DOoF
IN6tzla7la3jxcL/bhhwozDfWTLwGDbuNdI7h3rvFjyyAd56L2+Gif+cI37lDxeI
KBlf3EJ/gK5wbA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:13:10 2026 by rpki-client