Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: TiVacMADGsk4i5KqROa5cWjLvFFkJdnmv3mPb0muWEY=
Subject key identifier: 81:F9:9D:4C:C2:59:58:DB:02:51:60:66:0C:D8:30:AD:4A:2A:43:B2
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 01A149F378317D0BC8872DFF4BFD1CCB84F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 1AAA
Signing time: Sat 17 Oct 2026 13:00:55 +0000
Manifest this update: Sat 17 Oct 2026 13:00:55 +0000
Manifest next update: Sun 18 Oct 2026 13:00:55 +0000
Files and hashes: 1: 1gpC6ZZOyt2mOkXIYbt5K_lzXps.asa (hash: JDIIwJMIws7Yan/EHkT9Ljq/fUXQU7hpu1yjAvkm5mo=)
2: SATda0Q9JgLf7FNzUfrTDL5vnEQ.roa (hash: XGliMsZWtirHhZX2xfYpxBaxkmF1dTUTYWoC+BYAPKw=)
3: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: tA8KvJvl2o3newyjowaojosAFMfE2qOy0apFNKpiQqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:f3:78:31:7d:0b:c8:87:2d:ff:4b:fd:1c:cb:84:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Oct 17 13:00:55 2026 GMT
Not After : Oct 18 13:00:55 2026 GMT
Subject: CN=81f99d4cc25958db025160660cd830ad4a2a43b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:fb:a5:3e:a9:ff:1f:fd:ee:ea:66:a3:9d:
78:c2:eb:03:f3:58:1d:9c:3a:75:67:fd:d7:70:1e:
fa:15:10:88:ca:91:6a:07:36:78:54:11:7f:61:62:
a0:e6:a2:31:47:ef:d3:44:7b:e4:f5:58:d6:47:1c:
7b:76:c7:02:24:41:9d:9d:e9:21:b9:71:11:a0:5a:
8d:b0:13:d2:dd:3f:91:8d:2f:74:33:ab:be:2f:e7:
2b:2b:7a:05:68:93:6c:2c:49:5e:73:34:23:f3:66:
3b:95:c1:1b:6a:2a:37:47:cb:82:3d:97:0e:b0:41:
39:7a:4a:20:0a:35:1a:a4:f4:08:ec:33:8d:03:1a:
ef:6f:23:ee:e8:ba:2a:21:56:d3:02:1a:d4:28:be:
fa:a2:21:c0:11:0d:43:62:68:1f:96:ce:a1:95:02:
a8:4c:25:d0:ba:42:48:ca:d6:46:63:6e:33:d2:17:
15:a7:1c:42:34:23:ef:32:5d:5d:06:67:8d:ec:50:
d5:44:9c:d3:fb:cd:02:f2:ff:41:3f:99:b3:f0:ee:
fb:30:b0:5f:b0:fb:1a:f5:0c:8b:36:3f:91:87:01:
a3:5b:46:63:72:b6:e2:7f:c0:bf:2a:39:36:f4:0a:
f5:94:66:fc:a6:f7:10:fe:92:02:67:64:c5:44:f2:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F9:9D:4C:C2:59:58:DB:02:51:60:66:0C:D8:30:AD:4A:2A:43:B2
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f2:7e:f2:97:78:b6:38:68:08:ab:c1:32:9b:34:ca:48:55:
80:8a:ad:d3:b2:b3:37:7e:81:92:4e:75:d0:08:59:83:17:d6:
c7:d2:1e:46:b6:f1:b6:97:ef:81:4f:13:6a:60:f3:a8:57:e9:
68:47:62:bd:d3:fe:41:04:e7:6e:18:82:35:6e:84:93:5c:5a:
b6:c6:5f:05:3a:42:08:26:ff:b2:90:eb:03:f2:f5:85:09:9b:
7b:cb:9f:e5:1d:2d:40:ea:e3:0f:72:b7:7b:ff:71:c0:6b:c9:
41:07:84:a9:b8:dd:19:ef:fb:09:08:53:e9:4b:20:17:6a:f8:
be:50:23:3a:52:b5:c4:2b:c8:25:f4:01:1b:a5:de:57:1e:8b:
fa:4e:ac:94:43:08:d8:d5:d1:6f:24:53:e7:93:48:75:7c:3a:
d9:83:58:d3:26:a4:30:cc:a2:9d:42:2a:e3:3b:c8:62:8f:d1:
18:59:c0:31:8b:1f:23:cf:3f:14:65:0d:1d:dd:d3:f4:a9:bb:
4c:87:fa:43:8d:19:ae:71:bc:46:72:8e:bf:15:0e:a5:11:6c:
98:18:75:bd:7c:8f:9f:8c:86:9a:9b:35:7c:29:e9:32:db:d5:
ce:67:77:74:f3:75:f1:46:41:94:dd:8a:fa:18:d6:cb:c6:27:
be:a5:eb:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJ83gxfQvIhy3/S/0cy4TyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmNjZjUxMGUxYTk2NTMwYWQ4Y2YxNDIzZmQyNTk4Yjgy
ZmUzYTYwHhcNMjYxMDE3MTMwMDU1WhcNMjYxMDE4MTMwMDU1WjAzMTEwLwYDVQQD
Eyg4MWY5OWQ0Y2MyNTk1OGRiMDI1MTYwNjYwY2Q4MzBhZDRhMmE0M2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4N37pT6p/x/97upmo514wusD81gd
nDp1Z/3XcB76FRCIypFqBzZ4VBF/YWKg5qIxR+/TRHvk9VjWRxx7dscCJEGdnekh
uXERoFqNsBPS3T+RjS90M6u+L+crK3oFaJNsLEleczQj82Y7lcEbaio3R8uCPZcO
sEE5ekogCjUapPQI7DONAxrvbyPu6LoqIVbTAhrUKL76oiHAEQ1DYmgfls6hlQKo
TCXQukJIytZGY24z0hcVpxxCNCPvMl1dBmeN7FDVRJzT+80C8v9BP5mz8O77MLBf
sPsa9QyLNj+RhwGjW0Zjcrbif8C/Kjk29Ar1lGb8pvcQ/pICZ2TFRPIxvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH5nUzCWVjbAlFgZgzYMK1KKkOyMB8GA1UdIwQY
MBaAFKu8z1EOGpZTCtjPFCP9JZi4L+OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDIt
M2NmZmNlOTg5NDQyLzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDItM2NmZmNlOTg5NDQy
LzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/J+8pd4
tjhoCKvBMps0ykhVgIqt07KzN36Bkk510AhZgxfWx9IeRrbxtpfvgU8TamDzqFfp
aEdivdP+QQTnbhiCNW6Ek1xatsZfBTpCCCb/spDrA/L1hQmbe8uf5R0tQOrjD3K3
e/9xwGvJQQeEqbjdGe/7CQhT6UsgF2r4vlAjOlK1xCvIJfQBG6XeVx6L+k6slEMI
2NXRbyRT55NIdXw62YNY0yakMMyinUIq4zvIYo/RGFnAMYsfI88/FGUNHd3T9Km7
TIf6Q40ZrnG8RnKOvxUOpRFsmBh1vXyPn4yGmps1fCnpMtvVzmd3dPN18UZBlN2K
+hjWy8YnvqXrEw==
-----END CERTIFICATE-----
Generated at Sat Oct 17 20:10:07 2026 by rpki-client