Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: SF/9zjMBxWYRTvhsqUznTGtqIuyIjHpqsrE/9k4Yq6I=
Subject key identifier: 01:81:28:7E:A2:D3:27:1D:FB:F4:33:25:39:E8:80:73:99:2B:86:51
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 01A185D1663D7B9B6829942F1ED5EF98DDCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 1ACC
Signing time: Thu 29 Oct 2026 04:00:55 +0000
Manifest this update: Thu 29 Oct 2026 04:00:55 +0000
Manifest next update: Fri 30 Oct 2026 04:00:55 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: 0icqTQ9fadTC6OBO2PalZmGvXfNr8NEWuaI1TDMFIPE=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:d1:66:3d:7b:9b:68:29:94:2f:1e:d5:ef:98:dd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Oct 29 04:00:55 2026 GMT
Not After : Oct 30 04:00:55 2026 GMT
Subject: CN=0181287ea2d3271dfbf4332539e88073992b8651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ec:02:db:fc:ba:8c:1e:16:42:d6:4d:fa:08:
cc:07:f8:c1:3b:69:2e:fb:08:99:16:b8:83:7c:c2:
f2:f3:8e:45:53:58:a6:36:b6:f8:65:c2:5d:37:09:
4e:c7:09:b3:f7:04:26:41:07:10:64:3e:1f:20:d4:
16:75:ec:d1:34:89:8a:0f:3b:ac:d6:ca:b2:a4:56:
bc:02:3a:10:bf:81:48:8c:53:fe:0b:2d:13:c6:03:
ad:e3:fe:74:7a:8b:45:fc:ac:68:61:60:51:e1:19:
85:f1:02:49:d8:1e:f8:93:74:89:ee:b3:87:f2:ec:
42:f9:e6:dd:6b:ab:fa:9a:6e:d3:9a:6f:c7:b7:95:
bd:a5:1b:b5:46:4a:37:b9:82:ee:7a:32:8d:27:26:
3c:97:ef:9c:73:03:57:cd:8d:bf:f6:c5:60:4c:2c:
4c:03:2e:64:92:88:9a:4f:e4:7c:82:d5:69:3c:90:
96:fb:40:56:27:82:dc:4b:72:ab:56:00:dc:fd:9d:
3a:8a:30:95:cf:b7:c4:e7:57:09:b3:81:a7:d4:15:
fa:05:9a:dd:dd:6a:a7:71:c5:41:11:7b:89:4a:7d:
48:1c:6b:37:54:56:ae:87:7b:1f:8a:cd:14:79:ee:
b4:8c:53:f2:ab:c2:cb:d0:15:90:1c:37:fb:81:42:
2b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:81:28:7E:A2:D3:27:1D:FB:F4:33:25:39:E8:80:73:99:2B:86:51
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a8:eb:0c:cf:37:f8:0f:8c:2c:69:0a:a8:81:f7:72:59:41:
1f:37:1b:85:fa:47:4c:d5:b5:a4:57:31:49:4a:78:ef:70:77:
0d:52:e3:0c:04:a7:5d:58:3d:79:96:05:d5:40:7b:ca:3e:8c:
bb:31:30:e4:bc:e0:e4:1b:72:49:48:62:a1:18:04:85:e9:6c:
a7:e3:98:ef:ee:cb:7e:e2:36:4a:46:6f:95:a2:b6:4b:01:5a:
9c:2a:9c:78:9c:fa:ff:41:ac:16:df:c5:64:9b:7a:30:19:d1:
12:d8:8c:f7:50:4d:d8:89:11:96:e3:ce:3a:d6:f6:8d:2f:f8:
99:a6:6d:10:7b:57:b5:77:ea:c6:4a:29:3e:cf:09:ca:de:f4:
c2:64:1c:85:c0:14:21:3c:00:a9:eb:48:26:91:c6:45:cc:ee:
fb:70:d4:a7:64:1e:a5:c2:b9:1a:b6:39:d9:26:e4:d6:b9:7a:
f4:f4:93:94:9b:8a:dc:62:7c:42:b2:d5:37:ed:bc:10:a1:b8:
4d:b5:50:f2:d3:ad:79:86:97:38:a4:54:76:ae:83:17:bc:e8:
58:9d:2d:22:98:82:48:eb:6c:52:c4:1b:28:27:00:d2:b5:81:
e0:75:cf:4d:5b:35:f1:11:c0:c2:20:72:8a:f7:49:d0:5c:4c:
ba:f3:0d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGF0WY9e5toKZQvHtXvmN3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTQzODgxMzc1MDEzM2U1NTAwMWJmODk2NzBhMGRiM2Fl
NWJlMWYwHhcNMjYxMDI5MDQwMDU1WhcNMjYxMDMwMDQwMDU1WjAzMTEwLwYDVQQD
EygwMTgxMjg3ZWEyZDMyNzFkZmJmNDMzMjUzOWU4ODA3Mzk5MmI4NjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuwC2/y6jB4WQtZN+gjMB/jBO2ku
+wiZFriDfMLy845FU1imNrb4ZcJdNwlOxwmz9wQmQQcQZD4fINQWdezRNImKDzus
1sqypFa8AjoQv4FIjFP+Cy0TxgOt4/50eotF/KxoYWBR4RmF8QJJ2B74k3SJ7rOH
8uxC+ebda6v6mm7Tmm/Ht5W9pRu1Rko3uYLuejKNJyY8l++ccwNXzY2/9sVgTCxM
Ay5kkoiaT+R8gtVpPJCW+0BWJ4LcS3KrVgDc/Z06ijCVz7fE51cJs4Gn1BX6BZrd
3WqnccVBEXuJSn1IHGs3VFauh3sfis0Uee60jFPyq8LL0BWQHDf7gUIr3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGBKH6i0ycd+/QzJTnogHOZK4ZRMB8GA1UdIwQY
MBaAFEOkOIE3UBM+VQAb+JZwoNs65b4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMt
YTBkNmYwZWViNWMyLzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81Y2I0NzMtMzVhMS00NzI3LTg3NzMtYTBkNmYwZWViNWMy
LzEvUTZRNGdUZFFFejVWQUJ2NGxuQ2cyenJsdmg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMqjrDM83
+A+MLGkKqIH3cllBHzcbhfpHTNW1pFcxSUp473B3DVLjDASnXVg9eZYF1UB7yj6M
uzEw5Lzg5BtySUhioRgEhelsp+OY7+7LfuI2SkZvlaK2SwFanCqceJz6/0GsFt/F
ZJt6MBnREtiM91BN2IkRluPOOtb2jS/4maZtEHtXtXfqxkopPs8Jyt70wmQchcAU
ITwAqetIJpHGRczu+3DUp2QepcK5GrY52Sbk1rl69PSTlJuK3GJ8QrLVN+28EKG4
TbVQ8tOteYaXOKRUdq6DF7zoWJ0tIpiCSOtsUsQbKCcA0rWB4HXPTVs18RHAwiBy
ivdJ0FxMuvMNsg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 10:59:52 2026 by rpki-client