
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
File: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft (raw, json)
Hash identifier: Xf6zdQiV20+tQ9RE4CbVj2vftEEAlWyBcpkfWAnLU2I=
Subject key identifier: 1E:C8:35:C9:B6:E7:D0:D7:C0:C5:A6:99:4F:92:03:39:3C:25:A8:F3
Authority key identifier: AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
Certificate issuer: /CN=ab91d5262561a9dd713dfa39163dec849fee4636
Certificate serial: 01A0C3A0430B9D74B65E7749F05D2B1D0ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 11:00:54 +0000
Manifest this update: Mon 21 Sep 2026 11:00:54 +0000
Manifest next update: Tue 22 Sep 2026 11:00:54 +0000
Files and hashes: 1: 1-NlXpS8qOmzJQxvh3Vemv6GfalE.roa (hash: HTFIVkm2pfbCpKdVoGWwpPhxe9WRjwNhw3rsgiBHLbE=)
2: 75AwziJR5w1JmorjN6nm2vuye_U.roa (hash: P4Uobg4aZmz71V7WcJ/2A9j6g9mMLhAaqFQfuo24nE4=)
3: S4NA7oSGgXey3Rldy_KPITNHmFc.roa (hash: pctvbrfIhJmWDmoaj1TcgltdORT390IlR3CQ4CeTHxA=)
4: q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl (hash: PRk19GwG/UMU/qKDWJA85LvpV0VRuDzdO90pm1AlgcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:a0:43:0b:9d:74:b6:5e:77:49:f0:5d:2b:1d:0a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab91d5262561a9dd713dfa39163dec849fee4636
Validity
Not Before: Sep 21 11:00:54 2026 GMT
Not After : Sep 22 11:00:54 2026 GMT
Subject: CN=1ec835c9b6e7d0d7c0c5a6994f9203393c25a8f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:96:99:8e:35:67:73:fa:c7:21:0a:4b:1b:
3e:f5:2d:6b:4e:92:81:98:7d:5a:de:f3:07:be:56:
c8:16:57:43:f6:fe:86:af:50:e9:dc:b4:28:8e:a5:
18:10:09:6b:33:56:9e:a3:aa:a1:56:57:1c:2d:95:
a2:eb:bc:99:2f:84:e7:86:32:a1:50:b5:9f:74:fd:
86:eb:68:5e:ff:42:f5:dd:28:40:fb:23:cf:16:2c:
c7:79:3a:7d:62:2a:b8:34:71:f8:89:90:09:14:a5:
0c:15:8c:98:cf:36:54:c7:84:26:dd:99:1e:91:dc:
02:fc:99:4c:fe:83:ce:81:ec:42:fc:38:8c:3b:be:
ad:bb:ef:ea:0b:7d:77:d8:da:e8:14:cf:e2:e3:e1:
48:be:97:15:1e:73:5e:3c:8c:d7:c4:1f:54:1b:8d:
37:95:5f:ac:be:ed:40:09:3f:59:21:bf:38:63:39:
36:70:91:9d:61:29:96:65:ec:6c:ea:96:af:e8:11:
52:d1:3b:28:db:47:b4:39:65:51:c5:a1:10:99:ef:
95:5e:eb:82:fb:0c:79:33:64:ed:7b:bd:85:59:79:
0c:8b:08:7a:0f:19:05:85:4d:90:a4:eb:90:35:c2:
bc:41:ed:1e:22:11:23:3f:27:9c:04:47:f1:73:21:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C8:35:C9:B6:E7:D0:D7:C0:C5:A6:99:4F:92:03:39:3C:25:A8:F3
X509v3 Authority Key Identifier:
keyid:AB:91:D5:26:25:61:A9:DD:71:3D:FA:39:16:3D:EC:84:9F:EE:46:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91e882-ba8a-44c5-9b0d-275242aa6775/1/q5HVJiVhqd1xPfo5Fj3shJ_uRjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5d:23:e9:23:0f:21:59:9d:35:e0:74:73:f8:85:4c:7a:c1:
cc:7d:c7:1c:cf:1c:94:d2:e2:ac:86:85:a9:87:44:a2:bf:b6:
15:0b:db:1a:64:43:b6:05:18:8d:b5:13:7f:5d:8b:43:94:2f:
b2:93:dc:49:29:f6:f7:18:7a:92:a2:45:13:df:99:31:d1:7a:
ea:0e:43:3e:c3:e0:67:6b:6c:c2:91:96:72:7e:18:fa:79:56:
98:b3:67:1c:1e:e6:fb:fb:5a:e8:4d:41:21:1d:8a:a9:a7:6e:
7e:92:f4:87:9b:0c:9b:57:d1:08:4c:f0:47:07:de:28:75:33:
e5:02:59:89:ed:6a:fc:e4:a7:5c:81:de:50:5a:5c:c8:f4:2e:
a3:73:04:31:56:bc:fa:19:3c:59:ac:cb:e1:fc:15:e6:82:86:
f7:81:8d:d8:49:78:0a:7f:cd:eb:de:73:67:a3:26:df:49:b7:
55:bf:37:99:c6:02:0c:1c:6c:f1:3e:07:d8:14:0b:bc:90:a0:
25:03:32:6e:fa:df:f9:50:07:f9:39:36:de:89:0f:ad:66:73:
b1:b3:38:a9:fb:0f:3d:e1:4a:9a:fc:07:1f:5d:db:38:89:84:
08:f0:74:0e:fe:44:2e:53:a5:4d:36:ec:04:65:f3:a6:80:23:
62:e5:97:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDoEMLnXS2XndJ8F0rHQrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOTFkNTI2MjU2MWE5ZGQ3MTNkZmEzOTE2M2RlYzg0OWZl
ZTQ2MzYwHhcNMjYwOTIxMTEwMDU0WhcNMjYwOTIyMTEwMDU0WjAzMTEwLwYDVQQD
EygxZWM4MzVjOWI2ZTdkMGQ3YzBjNWE2OTk0ZjkyMDMzOTNjMjVhOGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufOWmY41Z3P6xyEKSxs+9S1rTpKB
mH1a3vMHvlbIFldD9v6Gr1Dp3LQojqUYEAlrM1aeo6qhVlccLZWi67yZL4TnhjKh
ULWfdP2G62he/0L13ShA+yPPFizHeTp9Yiq4NHH4iZAJFKUMFYyYzzZUx4Qm3Zke
kdwC/JlM/oPOgexC/DiMO76tu+/qC3132NroFM/i4+FIvpcVHnNePIzXxB9UG403
lV+svu1ACT9ZIb84Yzk2cJGdYSmWZexs6pav6BFS0Tso20e0OWVRxaEQme+VXuuC
+wx5M2Tte72FWXkMiwh6DxkFhU2QpOuQNcK8Qe0eIhEjPyecBEfxcyHD1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7INcm259DXwMWmmU+SAzk8JajzMB8GA1UdIwQY
MBaAFKuR1SYlYandcT36ORY97ISf7kY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQt
Mjc1MjQyYWE2Nzc1LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85MWU4ODItYmE4YS00NGM1LTliMGQtMjc1MjQyYWE2Nzc1
LzEvcTVIVkppVmhxZDF4UGZvNUZqM3NoSl91UmpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL10j6SMP
IVmdNeB0c/iFTHrBzH3HHM8clNLirIaFqYdEor+2FQvbGmRDtgUYjbUTf12LQ5Qv
spPcSSn29xh6kqJFE9+ZMdF66g5DPsPgZ2tswpGWcn4Y+nlWmLNnHB7m+/ta6E1B
IR2KqadufpL0h5sMm1fRCEzwRwfeKHUz5QJZie1q/OSnXIHeUFpcyPQuo3MEMVa8
+hk8WazL4fwV5oKG94GN2El4Cn/N695zZ6Mm30m3Vb83mcYCDBxs8T4H2BQLvJCg
JQMybvrf+VAH+Tk23okPrWZzsbM4qfsPPeFKmvwHH13bOImECPB0Dv5ELlOlTTbs
BGXzpoAjYuWXrw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:35:42 2026 by rpki-client