Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
File: q9xALNU1_JEj6gJsYq6c8PgOlBg.mft (raw, json)
Hash identifier: LrwAxnt6xCRDkytg8PC3npc2lZjIZCwAyWtbFZUWTug=
Subject key identifier: 75:DA:F1:FF:4E:F7:6B:33:08:F7:8D:67:BC:07:7D:72:AB:D4:02:97
Authority key identifier: AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
Certificate issuer: /CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Certificate serial: 01A135237CCD3A668805E17B19A7E1B74ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
Manifest number: 1A9F
Signing time: Tue 13 Oct 2026 12:01:20 +0000
Manifest this update: Tue 13 Oct 2026 12:01:20 +0000
Manifest next update: Wed 14 Oct 2026 12:01:20 +0000
Files and hashes: 1: q9xALNU1_JEj6gJsYq6c8PgOlBg.crl (hash: LK1V3A0WXam14DFhCHvj2eKXaVneaQ8iLIwc14aJ0Wc=)
2: qpSRJ_3_1WtSbh1z8fA2N1vKkZQ.roa (hash: MLSjRFPRdEgcgE43dNf/0WIvyN16FCjyMVK68EqxfpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:7c:cd:3a:66:88:05:e1:7b:19:a7:e1:b7:4a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdc402cd535fc9123ea026c62ae9cf0f80e9418
Validity
Not Before: Oct 13 12:01:20 2026 GMT
Not After : Oct 14 12:01:20 2026 GMT
Subject: CN=75daf1ff4ef76b3308f78d67bc077d72abd40297
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:8e:c3:f8:3a:67:a1:9b:c6:e1:de:d1:c1:
b3:59:21:48:51:db:eb:7f:91:ca:3e:6e:7a:47:96:
b9:0e:30:dc:93:87:e1:16:9b:64:71:ba:60:85:cc:
8b:7b:d1:cb:1e:1f:bf:ca:86:61:99:8f:5c:f0:6c:
fe:c5:d6:db:a1:49:6d:f4:81:5c:1a:41:43:a6:16:
5f:63:b5:e7:a9:6e:96:00:ff:ff:fc:c0:d2:ac:96:
8d:8d:e0:bb:d5:64:fc:9c:62:c0:87:2a:15:b0:4e:
71:7b:3c:10:57:5e:57:54:e7:db:74:d2:78:6c:fc:
60:19:cd:e4:49:75:93:e3:c7:a0:26:43:a8:83:fb:
1d:10:e0:e4:8f:df:0a:16:f6:03:fb:bc:ba:ae:a2:
19:66:c8:7e:29:18:6c:d8:8d:7d:9b:b9:01:53:00:
c4:06:e2:c1:d6:e7:b4:8d:e3:89:9a:cd:e2:01:81:
60:15:34:8f:eb:05:c5:30:ba:b9:19:4d:8b:77:0e:
0d:7c:93:3c:64:9c:ec:e9:a1:36:1e:8f:5c:99:76:
7d:dd:e0:4c:7d:01:2a:64:10:a2:95:28:a2:8c:73:
bc:bd:30:e3:47:33:01:2d:73:49:e6:1f:0d:4c:11:
18:82:3f:5c:fc:78:4c:70:fd:50:48:7c:27:fc:ae:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:F1:FF:4E:F7:6B:33:08:F7:8D:67:BC:07:7D:72:AB:D4:02:97
X509v3 Authority Key Identifier:
keyid:AB:DC:40:2C:D5:35:FC:91:23:EA:02:6C:62:AE:9C:F0:F8:0E:94:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9xALNU1_JEj6gJsYq6c8PgOlBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7523d9-4648-435e-9961-40735b2f8481/1/q9xALNU1_JEj6gJsYq6c8PgOlBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:6b:bc:48:8d:e0:24:5b:ec:e2:74:9c:ca:d3:f6:79:9a:f6:
53:ee:e1:89:d2:d5:2f:fb:74:85:a0:32:82:8d:14:7f:eb:4b:
c3:ac:f6:9c:0a:1c:7e:6b:22:09:ad:34:22:1c:05:8d:2c:24:
03:7b:b4:6c:53:d5:90:22:0f:88:76:7b:f8:76:a7:3a:6e:a6:
d4:9a:7e:42:a9:09:30:8e:ad:15:07:8f:ee:cf:5a:f5:41:21:
9e:4f:01:44:30:7d:ab:e8:9b:e9:0e:78:90:c7:8e:26:1e:b9:
d9:15:76:bf:ba:92:b9:03:ea:7d:2b:2b:4b:13:d3:3e:68:3b:
a4:af:76:e8:81:5f:57:49:a5:8a:47:11:43:12:c7:8a:07:09:
61:09:0e:32:9d:29:00:a2:6b:d5:a0:34:b8:ea:1f:d9:55:e0:
c4:6d:08:96:d0:c6:64:79:15:ca:1d:d0:49:1f:c0:7a:e4:d7:
43:21:af:c1:21:c4:de:e0:a4:53:b6:62:3a:0a:04:12:41:cf:
11:d9:43:54:92:c0:89:48:68:42:67:11:39:37:75:82:d1:62:
90:6a:11:1e:e4:30:8e:5b:45:8b:78:8e:ff:f6:2f:03:2c:0e:
0e:7b:c4:4a:44:b4:ed:73:da:2f:42:8e:d3:69:33:dd:39:49:
e5:98:45:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE1I3zNOmaIBeF7Gafht0rPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiZGM0MDJjZDUzNWZjOTEyM2VhMDI2YzYyYWU5Y2YwZjgw
ZTk0MTgwHhcNMjYxMDEzMTIwMTIwWhcNMjYxMDE0MTIwMTIwWjAzMTEwLwYDVQQD
Eyg3NWRhZjFmZjRlZjc2YjMzMDhmNzhkNjdiYzA3N2Q3MmFiZDQwMjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumeOw/g6Z6GbxuHe0cGzWSFIUdvr
f5HKPm56R5a5DjDck4fhFptkcbpghcyLe9HLHh+/yoZhmY9c8Gz+xdbboUlt9IFc
GkFDphZfY7XnqW6WAP///MDSrJaNjeC71WT8nGLAhyoVsE5xezwQV15XVOfbdNJ4
bPxgGc3kSXWT48egJkOog/sdEODkj98KFvYD+7y6rqIZZsh+KRhs2I19m7kBUwDE
BuLB1ue0jeOJms3iAYFgFTSP6wXFMLq5GU2Ldw4NfJM8ZJzs6aE2Ho9cmXZ93eBM
fQEqZBCilSiijHO8vTDjRzMBLXNJ5h8NTBEYgj9c/HhMcP1QSHwn/K75ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXa8f9O92szCPeNZ7wHfXKr1AKXMB8GA1UdIwQY
MBaAFKvcQCzVNfyRI+oCbGKunPD4DpQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEt
NDA3MzViMmY4NDgxLzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83NTIzZDktNDY0OC00MzVlLTk5NjEtNDA3MzViMmY4NDgx
LzEvcTl4QUxOVTFfSkVqNmdKc1lxNmM4UGdPbEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWu8SI3g
JFvs4nScytP2eZr2U+7hidLVL/t0haAygo0Uf+tLw6z2nAocfmsiCa00IhwFjSwk
A3u0bFPVkCIPiHZ7+HanOm6m1Jp+QqkJMI6tFQeP7s9a9UEhnk8BRDB9q+ib6Q54
kMeOJh652RV2v7qSuQPqfSsrSxPTPmg7pK926IFfV0mlikcRQxLHigcJYQkOMp0p
AKJr1aA0uOof2VXgxG0IltDGZHkVyh3QSR/AeuTXQyGvwSHE3uCkU7ZiOgoEEkHP
EdlDVJLAiUhoQmcROTd1gtFikGoRHuQwjltFi3iO//YvAywODnvESkS07XPaL0KO
02kz3TlJ5ZhF/g==
-----END CERTIFICATE-----
Generated at Tue Oct 13 17:38:06 2026 by rpki-client