Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
File: qx0OfoGLr5p6-5hmEkKSphqvuMo.mft (raw, json)
Hash identifier: Du9gET/URAdw+OKe4+l6P8yPCgjTGMGRcg7WzMEKZbE=
Subject key identifier: C1:B2:28:27:75:F4:E6:05:A4:D6:7C:C5:EE:EE:7A:19:4C:49:9B:C6
Authority key identifier: AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
Certificate issuer: /CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Certificate serial: 01A0C8213B0430E49AF9D2AD2243D2FFD0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
Manifest number: 1A70
Signing time: Tue 22 Sep 2026 08:00:15 +0000
Manifest this update: Tue 22 Sep 2026 08:00:15 +0000
Manifest next update: Wed 23 Sep 2026 08:00:15 +0000
Files and hashes: 1: E_pvlXfH-_8Fl9xtt4-r8I-I2Wk.roa (hash: CAT6hhcy6gNQOJHA0DTluxIpTJS1s6DqnJJcDnZ2tTQ=)
2: HrIDUx_18W3aDcgzp0a-tZsGpP8.roa (hash: cPyVftTbNGSIIN5cX0+FBbwXCXBqNj2p4PsBxHd4Gn0=)
3: qx0OfoGLr5p6-5hmEkKSphqvuMo.crl (hash: 0Jfu53gKSyFsDtntQn7m35ldpTZohG0nwtzLAJvB51s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:3b:04:30:e4:9a:f9:d2:ad:22:43:d2:ff:d0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab1d0e7e818baf9a7afb9866124292a61aafb8ca
Validity
Not Before: Sep 22 08:00:15 2026 GMT
Not After : Sep 23 08:00:15 2026 GMT
Subject: CN=c1b2282775f4e605a4d67cc5eeee7a194c499bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:95:fe:ca:91:4d:00:63:88:36:5b:12:5c:
7d:31:6e:8d:5f:71:98:87:1d:27:a9:00:a2:71:96:
da:6e:ba:42:c3:4a:76:8d:55:91:06:3f:73:14:29:
eb:f9:21:90:23:84:66:99:27:86:0c:76:7a:71:32:
ef:83:0f:7f:ac:dd:5b:88:b0:92:78:f3:06:e1:b5:
2d:39:70:b7:16:5e:19:4f:16:d1:43:63:20:9c:64:
12:67:31:9f:0b:07:6b:83:68:f6:76:98:92:79:6d:
69:cd:c1:5d:af:91:67:29:24:e9:90:54:5d:4f:5f:
f0:8c:fb:e8:cb:d5:a8:00:4b:07:78:6a:8d:59:8c:
30:6f:d1:fe:f0:ed:dc:45:18:0c:6c:56:8a:47:a4:
06:ae:52:aa:10:b2:38:f7:eb:e6:d5:ce:e5:c5:ee:
be:26:16:15:e2:dd:e4:5c:2f:9b:ca:b6:33:aa:0c:
19:7b:11:b0:bc:08:6a:3e:94:b5:9a:43:cd:00:7f:
4f:c3:54:dc:13:d0:d7:ba:60:e2:7c:95:2a:d3:e0:
fd:f3:ae:43:4e:b9:e6:63:a0:90:07:9b:dd:54:e8:
c4:0a:5a:3f:20:01:0f:10:66:39:45:e2:ef:4e:13:
a6:c2:71:7f:aa:5f:9b:47:c8:d6:20:9e:3b:dc:c2:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B2:28:27:75:F4:E6:05:A4:D6:7C:C5:EE:EE:7A:19:4C:49:9B:C6
X509v3 Authority Key Identifier:
keyid:AB:1D:0E:7E:81:8B:AF:9A:7A:FB:98:66:12:42:92:A6:1A:AF:B8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qx0OfoGLr5p6-5hmEkKSphqvuMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/124c35-9523-43b7-b7eb-ea59264f9083/1/qx0OfoGLr5p6-5hmEkKSphqvuMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:fe:f0:65:cd:15:20:f9:70:4c:a5:40:b3:c3:96:d6:c6:b0:
f4:81:9d:83:cb:5c:2f:50:32:36:ec:1c:8b:5b:7f:62:73:84:
95:2b:1e:04:9b:67:13:0d:d4:39:7a:45:96:5c:67:8e:e3:34:
7a:ca:bf:02:5e:ee:97:63:9e:0a:d8:48:4c:93:70:d4:a9:32:
4b:fc:c0:6b:7a:2e:ab:33:8a:ef:4e:2f:0a:99:ad:0d:14:06:
29:85:05:e1:b7:4d:0a:e1:35:f9:e3:49:56:01:4b:c1:32:62:
91:2e:6f:e7:6b:6f:28:05:65:97:ad:a9:4d:1b:b1:2a:dc:7c:
32:16:1f:86:e4:d8:36:f8:63:31:f3:05:26:b6:c8:be:d2:f1:
cb:24:14:1b:f0:54:81:76:a7:16:2f:3a:07:4a:01:31:90:1c:
ee:47:30:bd:5f:88:0e:ba:9d:9c:b6:af:62:ef:4c:97:d1:d8:
e5:0f:3e:be:50:c7:02:44:31:5c:b7:d3:2d:d0:54:4e:b3:7b:
76:32:fc:fd:96:6c:01:cd:5d:a1:ab:e4:26:18:59:63:d3:fb:
72:1d:d9:96:4e:42:4b:4c:58:fd:10:e7:88:f1:64:ee:1a:bf:
f6:20:57:7a:ff:fd:34:77:7f:3f:b7:d4:99:a8:7d:f5:85:ab:
34:f1:95:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIITsEMOSa+dKtIkPS/9C8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMWQwZTdlODE4YmFmOWE3YWZiOTg2NjEyNDI5MmE2MWFh
ZmI4Y2EwHhcNMjYwOTIyMDgwMDE1WhcNMjYwOTIzMDgwMDE1WjAzMTEwLwYDVQQD
EyhjMWIyMjgyNzc1ZjRlNjA1YTRkNjdjYzVlZWVlN2ExOTRjNDk5YmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY2V/sqRTQBjiDZbElx9MW6NX3GY
hx0nqQCicZbabrpCw0p2jVWRBj9zFCnr+SGQI4RmmSeGDHZ6cTLvgw9/rN1biLCS
ePMG4bUtOXC3Fl4ZTxbRQ2MgnGQSZzGfCwdrg2j2dpiSeW1pzcFdr5FnKSTpkFRd
T1/wjPvoy9WoAEsHeGqNWYwwb9H+8O3cRRgMbFaKR6QGrlKqELI49+vm1c7lxe6+
JhYV4t3kXC+byrYzqgwZexGwvAhqPpS1mkPNAH9Pw1TcE9DXumDifJUq0+D9865D
TrnmY6CQB5vdVOjEClo/IAEPEGY5ReLvThOmwnF/ql+bR8jWIJ473MLx9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGyKCd19OYFpNZ8xe7uehlMSZvGMB8GA1UdIwQY
MBaAFKsdDn6Bi6+aevuYZhJCkqYar7jKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWIt
ZWE1OTI2NGY5MDgzLzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMjRjMzUtOTUyMy00M2I3LWI3ZWItZWE1OTI2NGY5MDgz
LzEvcXgwT2ZvR0xyNXA2LTVobUVrS1NwaHF2dU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbv7wZc0V
IPlwTKVAs8OW1saw9IGdg8tcL1AyNuwci1t/YnOElSseBJtnEw3UOXpFllxnjuM0
esq/Al7ul2OeCthITJNw1KkyS/zAa3ouqzOK704vCpmtDRQGKYUF4bdNCuE1+eNJ
VgFLwTJikS5v52tvKAVll62pTRuxKtx8MhYfhuTYNvhjMfMFJrbIvtLxyyQUG/BU
gXanFi86B0oBMZAc7kcwvV+IDrqdnLavYu9Ml9HY5Q8+vlDHAkQxXLfTLdBUTrN7
djL8/ZZsAc1doavkJhhZY9P7ch3Zlk5CS0xY/RDniPFk7hq/9iBXev/9NHd/P7fU
mah99YWrNPGVSA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:02:44 2026 by rpki-client