Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: iKKIlmDTq/9tpTbiPj8CA9HREokgXtIzu/vHl/6ASzY=
Subject key identifier: 5A:10:B7:3B:EB:F7:F7:C3:77:F0:3B:4F:8E:42:BC:A5:9D:3D:DA:67
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 01A1950D6115A9E2D0F550406B7AA30C3DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 1AD2
Signing time: Sun 01 Nov 2026 03:00:44 +0000
Manifest this update: Sun 01 Nov 2026 03:00:44 +0000
Manifest next update: Mon 02 Nov 2026 03:00:44 +0000
Files and hashes: 1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: e8ApP7Z9sC4dBhcqfEfF6GFnsU9p5T5ZqkYdIm930HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 23:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:0d:61:15:a9:e2:d0:f5:50:40:6b:7a:a3:0c:3d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Nov 1 03:00:44 2026 GMT
Not After : Nov 2 03:00:44 2026 GMT
Subject: CN=5a10b73bebf7f7c377f03b4f8e42bca59d3dda67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:ac:f4:ac:c6:c6:d8:dd:c6:a2:ba:66:1e:
54:2e:b2:47:06:49:f3:1c:a9:79:d6:f1:fd:14:9e:
46:7b:2b:2a:01:a1:0a:df:06:8c:43:23:46:45:d1:
8d:98:74:ef:38:af:a6:da:5c:c1:52:ea:02:b3:25:
f2:16:9a:91:73:19:4f:94:03:43:e8:c1:74:19:ba:
a4:35:3e:13:60:f5:04:f9:f4:82:b5:8d:fa:7c:84:
61:f9:f5:0e:ca:ab:aa:d8:83:78:1d:06:48:b1:f6:
c4:00:bf:10:1a:fc:00:a5:d4:c9:22:cf:48:9a:9b:
94:f4:b4:4e:07:1c:de:d0:09:ec:93:51:74:cd:f3:
21:5b:2b:30:61:22:eb:f7:7e:a4:48:f5:2a:5b:60:
bd:b8:b3:11:8a:bb:8d:da:3e:27:5d:d0:be:c4:47:
de:ed:25:21:65:e3:a8:a6:65:52:c7:5a:51:65:c8:
da:8f:12:5a:c0:11:b7:e6:24:2a:0b:c6:e3:47:04:
07:22:94:03:80:97:64:19:16:62:06:a7:4b:c0:26:
da:8a:14:2d:54:23:e4:53:4b:34:70:ca:13:62:a8:
f6:75:cb:12:b3:02:ad:b7:b8:0b:25:00:31:3c:1f:
f8:1c:dc:90:e8:d1:fa:3d:db:57:4a:e3:b5:45:98:
38:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:10:B7:3B:EB:F7:F7:C3:77:F0:3B:4F:8E:42:BC:A5:9D:3D:DA:67
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fd:51:b3:21:be:69:56:f4:f9:47:84:1b:8f:be:94:ce:fd:
07:b7:b7:95:5d:4c:50:b4:3a:a1:4e:07:86:84:5d:3b:b0:ec:
33:ec:09:5b:73:2a:b3:10:40:64:c2:f7:19:69:16:1f:1d:b1:
61:89:68:48:f8:d6:f4:bd:d1:cd:0d:29:0d:b2:5e:90:28:d3:
f3:1d:6c:58:90:54:f5:41:3d:ac:6e:e6:49:91:b7:0e:f8:06:
f8:c1:a3:5d:48:4b:63:2f:75:9a:71:74:72:43:0e:73:89:e1:
7a:e1:6a:5c:b5:ef:3d:e3:f1:e1:15:ed:1c:f3:fa:cc:b8:53:
40:5c:e6:68:f2:fb:a4:fb:8c:18:7c:07:4c:03:3c:28:59:70:
07:ee:19:ec:38:10:43:5f:d8:53:e4:2b:fd:a4:11:f8:3e:1a:
cf:31:bb:81:ae:e3:d6:33:1e:93:68:17:f9:eb:43:4e:d4:ad:
7f:76:98:fa:73:93:39:ce:b3:b4:0c:10:7f:8e:9d:35:d7:7e:
2c:9f:2e:2e:e2:f2:ef:be:51:87:78:c8:22:3a:1d:b7:b2:ab:
01:fa:69:8f:d5:b6:2a:09:d7:b2:aa:33:db:2c:33:c4:0f:82:
2c:ba:74:f1:81:2e:46:1b:a1:e4:a1:b3:d3:57:5a:08:01:83:
0a:7f:55:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGVDWEVqeLQ9VBAa3qjDD3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5Nzc4MjBlYTYxYjExYjViMzg1OWFiNGE0YmM3ZWMwYTdi
NzM4OGMwHhcNMjYxMTAxMDMwMDQ0WhcNMjYxMTAyMDMwMDQ0WjAzMTEwLwYDVQQD
Eyg1YTEwYjczYmViZjdmN2MzNzdmMDNiNGY4ZTQyYmNhNTlkM2RkYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kus9KzGxtjdxqK6Zh5ULrJHBknz
HKl51vH9FJ5GeysqAaEK3waMQyNGRdGNmHTvOK+m2lzBUuoCsyXyFpqRcxlPlAND
6MF0GbqkNT4TYPUE+fSCtY36fIRh+fUOyquq2IN4HQZIsfbEAL8QGvwApdTJIs9I
mpuU9LROBxze0Ansk1F0zfMhWyswYSLr936kSPUqW2C9uLMRiruN2j4nXdC+xEfe
7SUhZeOopmVSx1pRZcjajxJawBG35iQqC8bjRwQHIpQDgJdkGRZiBqdLwCbaihQt
VCPkU0s0cMoTYqj2dcsSswKtt7gLJQAxPB/4HNyQ6NH6PdtXSuO1RZg4QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoQtzvr9/fDd/A7T45CvKWdPdpnMB8GA1UdIwQY
MBaAFKl3gg6mGxG1s4WatKS8fsCntziMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUt
YjE4ZDc2YjAxMmU3LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hZjhlOWQtNmM2NS00MWZkLWE3NTUtYjE4ZDc2YjAxMmU3
LzEvcVhlQ0RxWWJFYld6aFpxMHBMeC13S2UzT0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQf1RsyG+
aVb0+UeEG4++lM79B7e3lV1MULQ6oU4HhoRdO7DsM+wJW3MqsxBAZML3GWkWHx2x
YYloSPjW9L3RzQ0pDbJekCjT8x1sWJBU9UE9rG7mSZG3DvgG+MGjXUhLYy91mnF0
ckMOc4nheuFqXLXvPePx4RXtHPP6zLhTQFzmaPL7pPuMGHwHTAM8KFlwB+4Z7DgQ
Q1/YU+Qr/aQR+D4azzG7ga7j1jMek2gX+etDTtStf3aY+nOTOc6ztAwQf46dNdd+
LJ8uLuLy775Rh3jIIjodt7KrAfppj9W2KgnXsqoz2ywzxA+CLLp08YEuRhuh5KGz
01daCAGDCn9Vhw==
-----END CERTIFICATE-----
Generated at Sun Nov 1 08:36:03 2026 by rpki-client