Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: m1gDl5MyxMJbUvGeMdZIx5bKUPusOvkUrT7a4UKYKpA=
Subject key identifier: 2A:6C:D2:8D:F0:76:14:63:B3:B0:ED:35:80:C4:56:98:5E:58:90:62
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 01A15D43946E7D8E85F63E5911B5AD5336DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 12D6
Signing time: Wed 21 Oct 2026 07:01:12 +0000
Manifest this update: Wed 21 Oct 2026 07:01:12 +0000
Manifest next update: Thu 22 Oct 2026 07:01:12 +0000
Files and hashes: 1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: RSZN1iEZsW1Sy0vdt7H4oC+MkEtYQBRLTftwS5t211A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:43:94:6e:7d:8e:85:f6:3e:59:11:b5:ad:53:36:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Oct 21 07:01:12 2026 GMT
Not After : Oct 22 07:01:12 2026 GMT
Subject: CN=2a6cd28df0761463b3b0ed3580c456985e589062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:8d:dd:0e:8a:12:aa:57:c6:4e:11:33:ee:
c8:8f:c4:92:50:bd:9a:2d:01:78:b1:13:d1:24:8f:
c3:5c:d3:bb:c0:96:f8:dc:3a:81:b9:8e:39:d4:b8:
86:17:40:a2:55:c0:7f:a7:0c:fe:1f:13:09:b1:dc:
1f:8a:63:08:2c:82:fd:85:a2:50:db:f3:04:39:48:
a0:13:74:35:71:c8:37:7a:03:36:4f:30:0a:02:2d:
e2:80:55:42:e7:fc:36:d0:00:d2:c7:65:cb:d3:c1:
4e:13:c3:75:b1:25:41:94:24:7e:f2:b1:c1:da:eb:
5e:fa:d7:d5:54:cc:a0:6b:ee:a8:13:88:db:a5:d9:
a8:3c:1d:13:af:87:fe:15:a0:47:ae:ed:2f:2c:23:
18:06:95:a1:3d:97:78:f4:69:11:1b:60:f7:b8:d2:
d2:80:63:a2:97:96:8e:88:d7:61:fd:0c:d2:1f:bc:
27:88:eb:23:4b:1a:93:1a:3b:11:3c:f4:39:6e:14:
f7:20:7f:79:ab:dc:10:87:7d:e8:3d:1a:77:9b:83:
b9:9b:aa:b8:59:f0:04:38:d4:dd:20:6d:cf:30:65:
2f:c9:06:40:5f:67:31:dc:b8:17:f6:01:7f:cb:a7:
93:15:9b:10:44:8e:90:e5:74:78:b3:60:fc:09:d7:
ee:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6C:D2:8D:F0:76:14:63:B3:B0:ED:35:80:C4:56:98:5E:58:90:62
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:03:28:a8:f3:01:74:83:ec:52:7f:2d:61:ab:86:ad:7d:f0:
94:70:44:02:b2:d9:9a:ed:0b:98:4b:6e:1d:15:d8:9d:5d:91:
37:08:b9:5c:1d:be:5e:40:51:72:cf:7a:18:6a:23:ae:18:a4:
cb:a5:55:42:6c:c1:27:ce:dd:ff:87:19:df:fc:cc:18:5c:e9:
e2:e0:56:b9:50:1f:90:2e:1e:a7:49:03:0b:95:44:4b:fc:f7:
2b:e3:c2:c6:13:1f:10:65:b5:18:80:f0:32:12:82:35:f5:3b:
88:a3:a7:ae:a5:c3:df:78:1c:12:96:d8:43:f7:8f:b0:62:3f:
33:a0:c4:9b:26:3b:cf:12:f2:6c:50:10:8f:49:3f:de:00:f2:
68:c5:bc:02:83:fc:7c:57:e4:00:38:16:c8:7a:de:0a:40:64:
a2:60:35:bb:3c:4d:fd:be:f5:30:18:e2:ed:27:07:d2:87:87:
2c:d9:94:e4:12:5b:83:d6:d5:9b:de:e5:b9:5e:8e:0a:5a:96:
c3:22:de:fb:39:3e:01:28:72:7d:4a:9f:2b:bc:9f:c4:3c:bb:
db:f7:75:0e:8f:3b:71:51:3b:af:bd:27:52:fb:91:1f:48:87:
bf:46:b3:4c:a4:a2:1b:14:09:db:a7:63:44:d9:2d:b6:15:dc:
c0:6a:e4:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFdQ5RufY6F9j5ZEbWtUzbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MTdjNzQ1M2YzNzdlOWNiNmZhZTVjODkzYzA2N2EzZTFk
MzUxNDUwHhcNMjYxMDIxMDcwMTEyWhcNMjYxMDIyMDcwMTEyWjAzMTEwLwYDVQQD
EygyYTZjZDI4ZGYwNzYxNDYzYjNiMGVkMzU4MGM0NTY5ODVlNTg5MDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviqN3Q6KEqpXxk4RM+7Ij8SSUL2a
LQF4sRPRJI/DXNO7wJb43DqBuY451LiGF0CiVcB/pwz+HxMJsdwfimMILIL9haJQ
2/MEOUigE3Q1ccg3egM2TzAKAi3igFVC5/w20ADSx2XL08FOE8N1sSVBlCR+8rHB
2ute+tfVVMyga+6oE4jbpdmoPB0Tr4f+FaBHru0vLCMYBpWhPZd49GkRG2D3uNLS
gGOil5aOiNdh/QzSH7wniOsjSxqTGjsRPPQ5bhT3IH95q9wQh33oPRp3m4O5m6q4
WfAEONTdIG3PMGUvyQZAX2cx3LgX9gF/y6eTFZsQRI6Q5XR4s2D8CdfurQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCps0o3wdhRjs7DtNYDEVpheWJBiMB8GA1UdIwQY
MBaAFKgXx0U/N36ctvrlyJPAZ6Ph01FFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjct
ZGVjNjgwODNmOGY2LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS85NWFhMjQtZTg0Zi00MjQ1LTkyMjctZGVjNjgwODNmOGY2
LzEvcUJmSFJUODNmcHkyLXVYSWs4Qm5vLUhUVVVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxQMoqPMB
dIPsUn8tYauGrX3wlHBEArLZmu0LmEtuHRXYnV2RNwi5XB2+XkBRcs96GGojrhik
y6VVQmzBJ87d/4cZ3/zMGFzp4uBWuVAfkC4ep0kDC5VES/z3K+PCxhMfEGW1GIDw
MhKCNfU7iKOnrqXD33gcEpbYQ/ePsGI/M6DEmyY7zxLybFAQj0k/3gDyaMW8AoP8
fFfkADgWyHreCkBkomA1uzxN/b71MBji7ScH0oeHLNmU5BJbg9bVm97luV6OClqW
wyLe+zk+AShyfUqfK7yfxDy72/d1Do87cVE7r70nUvuRH0iHv0azTKSiGxQJ26dj
RNktthXcwGrkIQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 17:12:29 2026 by rpki-client