Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: p+bTrMXw32QgoI4yIJs2ZXnQU+Y7iWrgY0DvlB+5u+4=
Subject key identifier: E4:3E:E9:33:0C:D1:AF:A8:55:77:F3:EC:47:97:B4:D1:E6:5C:2B:A7
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 01A17D0592ADB088786E1D3BCEB47CE65DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 0949
Signing time: Tue 27 Oct 2026 11:01:19 +0000
Manifest this update: Tue 27 Oct 2026 11:01:19 +0000
Manifest next update: Wed 28 Oct 2026 11:01:19 +0000
Files and hashes: 1: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: XBaQpPKiSxjdTNpukvVRUjAYAgpfMrglqJwM8LiKmVA=)
2: fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa (hash: glhB4Xck9+EeTURBJmeIzyghgm1Xn7IH7ZSK9Lk029k=)
3: pW6jmWf2raK3Zl4GPbsEQcPmQOA.roa (hash: c1/FLBdVoe9kgtOV+DR8t4lDO5Egn0FpEQ4VTohCcXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:92:ad:b0:88:78:6e:1d:3b:ce:b4:7c:e6:5d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Oct 27 11:01:19 2026 GMT
Not After : Oct 28 11:01:19 2026 GMT
Subject: CN=e43ee9330cd1afa85577f3ec4797b4d1e65c2ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d7:2d:bc:4d:74:6e:6d:8a:ef:ca:1a:33:01:
0b:36:b5:6b:6b:90:9d:2e:48:70:08:6f:b5:1d:48:
fe:ce:67:6b:3d:f0:f7:ee:e3:7c:18:6a:4f:fc:96:
c7:19:14:49:94:71:24:c6:88:e2:73:5b:a7:c6:c0:
ac:ce:38:c9:cb:60:4f:38:ab:8c:7d:68:b6:3a:d4:
82:60:50:6a:0c:56:e4:c8:a4:7e:14:ac:14:75:33:
de:a2:2b:57:af:f1:3b:9f:4b:84:e7:1c:19:48:ed:
e9:3f:44:ac:68:09:1d:63:3f:7d:54:0a:37:ba:af:
49:af:9c:f3:62:7a:54:e0:01:10:fb:ca:d9:2d:73:
13:a5:63:32:0b:2b:a0:21:05:4c:5c:8a:87:e1:f4:
de:60:ae:28:f4:67:a4:1a:1c:53:00:ab:2b:16:c2:
63:8d:18:43:48:39:34:fe:b8:57:88:b7:7b:38:e4:
d3:21:5e:a6:8e:7a:3c:c8:b1:6e:c0:43:10:d6:e8:
6d:99:ff:1a:88:c1:82:45:c1:ea:84:55:70:a7:8b:
2c:e4:4b:54:de:ab:a5:b9:e0:19:2c:ee:49:05:7c:
ce:0f:47:54:8f:e8:95:62:b1:48:e4:a2:01:8e:7b:
cf:7d:65:76:af:0a:48:cb:bc:26:39:ce:42:cc:ec:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3E:E9:33:0C:D1:AF:A8:55:77:F3:EC:47:97:B4:D1:E6:5C:2B:A7
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ad:7b:44:4c:c7:48:ad:e3:77:02:04:3c:b2:6b:34:58:e7:
28:fa:1d:0a:e3:91:98:45:87:4f:d0:76:42:b5:49:51:76:7b:
9b:0c:07:b0:5d:d9:85:9f:0e:4d:6c:02:09:60:bb:0f:cc:89:
cb:b4:df:f7:b4:8a:69:7c:4b:01:fe:25:2c:92:3a:94:e6:05:
56:4a:10:6c:95:cf:df:f6:9e:62:66:19:7f:ab:bc:94:6e:f6:
db:a9:ad:73:cf:66:18:6d:ba:fc:49:06:5d:7d:8d:0b:49:09:
e5:df:22:9f:7c:3c:04:61:99:c3:21:8d:06:eb:e5:30:f4:a2:
8e:c4:0b:69:20:29:f5:3e:48:e5:60:28:ff:ba:73:4b:c8:27:
6a:2e:13:32:26:ff:eb:0b:ea:0f:85:6e:a2:0b:68:49:75:d5:
47:32:eb:85:3b:81:56:d1:e7:2f:d9:94:fd:88:46:01:c9:34:
79:6c:02:e7:55:19:7c:e9:a6:7c:85:1d:ce:ea:d9:a2:a4:da:
b1:11:df:ed:ab:28:d1:d5:50:0b:31:2d:7c:9c:13:a9:3d:ed:
c2:21:e6:92:6a:04:e7:5e:95:6e:50:da:4b:aa:79:26:a7:93:
7a:7f:7e:c2:66:5d:f6:a5:b7:fd:ef:6b:0c:31:24:87:80:60:
8d:c8:08:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9BZKtsIh4bh07zrR85l3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMWNiYTU4OTkyMGJlZWJiMTliYzU3MmFlNmQ1MDFiOGNm
NmJiZjAwHhcNMjYxMDI3MTEwMTE5WhcNMjYxMDI4MTEwMTE5WjAzMTEwLwYDVQQD
EyhlNDNlZTkzMzBjZDFhZmE4NTU3N2YzZWM0Nzk3YjRkMWU2NWMyYmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptctvE10bm2K78oaMwELNrVra5Cd
LkhwCG+1HUj+zmdrPfD37uN8GGpP/JbHGRRJlHEkxojic1unxsCszjjJy2BPOKuM
fWi2OtSCYFBqDFbkyKR+FKwUdTPeoitXr/E7n0uE5xwZSO3pP0SsaAkdYz99VAo3
uq9Jr5zzYnpU4AEQ+8rZLXMTpWMyCyugIQVMXIqH4fTeYK4o9GekGhxTAKsrFsJj
jRhDSDk0/rhXiLd7OOTTIV6mjno8yLFuwEMQ1uhtmf8aiMGCRcHqhFVwp4ss5EtU
3qulueAZLO5JBXzOD0dUj+iVYrFI5KIBjnvPfWV2rwpIy7wmOc5CzOx8ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ+6TMM0a+oVXfz7EeXtNHmXCunMB8GA1UdIwQY
MBaAFEIculiZIL7rsZvFcq5tUBuM9rvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xYzQ5ZWItNGRkYS00NGVmLWJmMDQt
ZWMwMGUxYTI3Y2M4LzEvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xYzQ5ZWItNGRkYS00NGVmLWJmMDQtZWMwMGUxYTI3Y2M4
LzEvUWh5NldKa2d2dXV4bThWeXJtMVFHNHoydV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZq17REzH
SK3jdwIEPLJrNFjnKPodCuORmEWHT9B2QrVJUXZ7mwwHsF3ZhZ8OTWwCCWC7D8yJ
y7Tf97SKaXxLAf4lLJI6lOYFVkoQbJXP3/aeYmYZf6u8lG7226mtc89mGG26/EkG
XX2NC0kJ5d8in3w8BGGZwyGNBuvlMPSijsQLaSAp9T5I5WAo/7pzS8gnai4TMib/
6wvqD4VuogtoSXXVRzLrhTuBVtHnL9mU/YhGAck0eWwC51UZfOmmfIUdzurZoqTa
sRHf7aso0dVQCzEtfJwTqT3twiHmkmoE516VblDaS6p5JqeTen9+wmZd9qW3/e9r
DDEkh4BgjcgIkg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 16:34:54 2026 by rpki-client