Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
File: RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft (raw, json)
Hash identifier: EM3Qe1YHZeLgIO6UJ//YNcz8ACrSkOVXwIIEUZKwFtg=
Subject key identifier: CA:F0:A3:E0:E9:F4:35:C3:73:A6:D2:80:62:68:99:F9:D1:9C:AB:14
Authority key identifier: 45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
Certificate issuer: /CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Certificate serial: 01A0E5BECAC8158FE71AD4B10193A173F9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
Manifest number: 01BE
Signing time: Mon 28 Sep 2026 02:01:21 +0000
Manifest this update: Mon 28 Sep 2026 02:01:21 +0000
Manifest next update: Tue 29 Sep 2026 02:01:21 +0000
Files and hashes: 1: 9YAXEYjhmhkxq2c5qhBIIlTvS2E.roa (hash: 55R+jdR0UJQmE1oLQNFzIpJd7w8rR1Qa8V5eWHVN66M=)
2: ELEtRZ5loRIGKf7-scqLr4hB53s.roa (hash: +gEhdH/1tkJ13QzR+izIQZXALlED/+ktkwEfPUTaTI8=)
3: Kl8Av8HTSqqtsIKPFJ9eAM1tcW8.asa (hash: 6I/UFrfGHL7pXTEoCzAXCGu9B83vEUFGM5JCdXCnrA0=)
4: RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl (hash: 7siZCXnRbsjKRBBgvoW7mEMN+XdSS9xFNFTfpa1Zo3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:be:ca:c8:15:8f:e7:1a:d4:b1:01:93:a1:73:f9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Validity
Not Before: Sep 28 02:01:21 2026 GMT
Not After : Sep 29 02:01:21 2026 GMT
Subject: CN=caf0a3e0e9f435c373a6d280626899f9d19cab14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cf:28:80:67:bc:6e:64:52:ac:9d:19:03:d0:
37:c8:31:bc:c7:04:8b:d3:eb:37:35:6e:8f:84:77:
7f:74:f6:a0:ff:59:dd:92:a1:11:7c:8f:5b:8e:5f:
2d:83:a4:34:90:e3:e8:49:bd:e9:20:b6:a8:11:e1:
66:3a:e4:0b:68:2d:aa:9d:9f:79:02:d2:a6:5b:51:
a3:f0:e2:5e:80:59:fc:a3:10:f4:c3:30:f4:26:01:
41:3f:11:9c:5d:f6:21:e8:68:e7:19:d8:04:1d:85:
4e:f3:de:48:5a:3a:13:78:22:0a:01:ec:23:d1:d1:
58:a2:c8:a8:af:21:da:11:99:93:70:2c:86:01:61:
8c:40:d5:85:ea:d6:90:7f:33:42:50:82:1c:50:87:
6c:0c:29:44:2b:2e:d4:7a:5e:50:e5:01:bd:69:4d:
c0:6d:f4:4a:d3:48:a4:5c:20:39:e5:43:d9:aa:9f:
e4:b8:bc:2c:45:d0:56:14:cf:b5:06:56:ac:9f:66:
6e:72:03:54:59:39:f5:74:be:c1:18:2e:be:33:bf:
e4:18:f5:41:5f:21:3b:bc:36:01:3d:79:2a:66:af:
4d:e1:41:02:80:9d:df:27:95:67:f1:f5:56:2a:04:
a4:50:44:f4:dc:98:82:2d:19:bd:34:84:54:2b:b8:
4e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F0:A3:E0:E9:F4:35:C3:73:A6:D2:80:62:68:99:F9:D1:9C:AB:14
X509v3 Authority Key Identifier:
keyid:45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9d:ff:09:e2:ca:11:34:ad:4b:53:83:89:57:bd:62:fd:32:
fa:b7:db:1d:33:8e:ad:a1:cb:7c:52:b7:ea:d8:c4:e1:cd:54:
07:08:d2:3d:36:7d:38:d3:20:e5:33:30:7f:da:a0:83:e4:9b:
3b:4c:44:b7:a6:ac:c9:f7:de:f2:3b:e2:bf:69:00:e7:a5:65:
51:66:86:6e:e5:81:b6:90:9c:7b:7d:9e:84:0c:80:7d:e7:68:
d0:38:03:9d:90:d4:10:61:53:f2:d1:36:e6:7f:a6:0d:a5:c9:
4c:78:df:a7:b6:26:60:96:9f:04:9a:ba:8d:bf:bd:ea:09:5b:
55:7f:55:cc:c6:91:86:13:48:16:4f:95:12:6a:e7:ee:dc:c8:
30:5e:aa:bb:ff:b8:07:ef:69:7c:32:ef:2f:4a:8b:02:24:df:
14:c8:6c:97:ce:ff:14:2f:ff:12:3b:a8:11:85:ba:72:0d:b8:
24:c4:9f:32:0f:52:63:0d:ab:9e:8e:8c:05:7a:85:f7:89:c0:
3f:ac:5e:3f:8d:a2:f0:2a:22:33:9c:cd:0f:72:c7:1d:82:bc:
e9:84:46:cf:a7:0e:48:8b:84:8a:bb:4b:a7:23:15:bf:fd:02:
72:56:9c:cc:aa:81:c8:7d:04:a6:a3:ed:98:b4:27:c2:1b:5b:
fe:6e:40:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDlvsrIFY/nGtSxAZOhc/nXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGNmMWNjNzM4MjYxMTFmZjk3NTY2NWIwM2EyNjQ4YmI4
YzhkMTAwHhcNMjYwOTI4MDIwMTIxWhcNMjYwOTI5MDIwMTIxWjAzMTEwLwYDVQQD
EyhjYWYwYTNlMGU5ZjQzNWMzNzNhNmQyODA2MjY4OTlmOWQxOWNhYjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM8ogGe8bmRSrJ0ZA9A3yDG8xwSL
0+s3NW6PhHd/dPag/1ndkqERfI9bjl8tg6Q0kOPoSb3pILaoEeFmOuQLaC2qnZ95
AtKmW1Gj8OJegFn8oxD0wzD0JgFBPxGcXfYh6GjnGdgEHYVO895IWjoTeCIKAewj
0dFYosioryHaEZmTcCyGAWGMQNWF6taQfzNCUIIcUIdsDClEKy7Uel5Q5QG9aU3A
bfRK00ikXCA55UPZqp/kuLwsRdBWFM+1Blasn2ZucgNUWTn1dL7BGC6+M7/kGPVB
XyE7vDYBPXkqZq9N4UECgJ3fJ5Vn8fVWKgSkUET03JiCLRm9NIRUK7hOnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrwo+Dp9DXDc6bSgGJomfnRnKsUMB8GA1UdIwQY
MBaAFEUM8cxzgmER/5dWZbA6Jki7jI0QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF6eHpIT0NZUkhfbDFabHNEb21TTHVNalJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wMGRkZDctMGFmYS00MWRhLWEzMzkt
YjU1Nzg2MmU1MTg4LzEvUlF6eHpIT0NZUkhfbDFabHNEb21TTHVNalJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8wMGRkZDctMGFmYS00MWRhLWEzMzktYjU1Nzg2MmU1MTg4
LzEvUlF6eHpIT0NZUkhfbDFabHNEb21TTHVNalJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJ3/CeLK
ETStS1ODiVe9Yv0y+rfbHTOOraHLfFK36tjE4c1UBwjSPTZ9ONMg5TMwf9qgg+Sb
O0xEt6asyffe8jviv2kA56VlUWaGbuWBtpCce32ehAyAfedo0DgDnZDUEGFT8tE2
5n+mDaXJTHjfp7YmYJafBJq6jb+96glbVX9VzMaRhhNIFk+VEmrn7tzIMF6qu/+4
B+9pfDLvL0qLAiTfFMhsl87/FC//EjuoEYW6cg24JMSfMg9SYw2rno6MBXqF94nA
P6xeP42i8CoiM5zND3LHHYK86YRGz6cOSIuEirtLpyMVv/0CclaczKqByH0EpqPt
mLQnwhtb/m5Arg==
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:08:43 2026 by rpki-client