Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: wBNpsPRp4SOLZs1x9HAR9Ez9ItLZlIxDN8noxAVir6k=
Subject key identifier: 09:B5:32:AE:81:4F:68:E1:60:FB:28:0A:04:16:6F:CA:67:A5:80:4F
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 01A10E1543EE8830AF3CE43645F3C64A4DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1A93
Signing time: Mon 05 Oct 2026 22:00:36 +0000
Manifest this update: Mon 05 Oct 2026 22:00:36 +0000
Manifest next update: Tue 06 Oct 2026 22:00:36 +0000
Files and hashes: 1: PdSSD1pY2R8sHhODVspC8pD1XNg.roa (hash: Hdy0mlxbyoY3S5V4w6LQ+HVJLICaMsGMYmJLwRUw9C8=)
2: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: /IpWdnHwtI6komT7Fe5JlIc4fKyLQnOlcvJzklR3wD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:15:43:ee:88:30:af:3c:e4:36:45:f3:c6:4a:4d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Oct 5 22:00:36 2026 GMT
Not After : Oct 6 22:00:36 2026 GMT
Subject: CN=09b532ae814f68e160fb280a04166fca67a5804f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:14:f8:57:92:4c:b1:0d:2e:25:42:fd:0d:de:
3b:85:59:1a:1b:1f:e3:ee:a9:f6:46:42:e5:32:f5:
79:e7:65:f1:36:0d:68:70:14:a5:e6:35:eb:ba:36:
5b:23:93:b2:b8:ce:ac:29:a8:fe:be:57:36:04:4b:
12:3d:f0:eb:07:e6:86:8d:68:20:06:7e:6b:b7:5d:
52:0e:6f:77:59:68:79:e9:44:fc:e6:61:e9:c1:2c:
db:9b:36:bf:f1:32:d9:8e:6a:84:9d:62:68:cf:5b:
5e:67:d4:0b:09:f4:6f:fc:6a:df:9d:64:d4:d3:65:
db:d7:1d:1d:bc:c4:12:4f:48:ce:f0:8f:c9:77:db:
58:02:3e:3d:0f:55:e3:11:a0:39:89:c2:ea:47:4f:
4e:77:f0:ef:c0:13:7b:4a:2d:3e:dc:23:b2:eb:f0:
01:a8:e2:aa:3c:47:5d:d4:ab:ff:4b:de:b0:5c:79:
55:cc:f4:bb:b4:fa:24:6a:fc:ef:5b:ba:ae:89:51:
e5:0d:07:21:d0:e3:93:e4:2d:0c:51:13:f5:d4:7d:
ce:a3:0b:b0:ec:5a:cb:48:32:a2:49:e7:f8:14:fa:
a2:d8:66:fc:dd:9d:ab:0c:8d:4e:c7:6d:3d:a8:0e:
32:09:9f:78:b7:47:eb:a4:8f:f9:5c:f6:70:73:10:
4a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B5:32:AE:81:4F:68:E1:60:FB:28:0A:04:16:6F:CA:67:A5:80:4F
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:13:c3:58:16:1d:52:21:37:ca:25:e6:1d:2f:fc:d9:06:db:
f7:d8:ee:24:9e:0a:ca:50:bb:fd:4f:f1:f9:58:48:5f:c5:62:
38:65:cb:bd:07:c6:aa:80:9a:9a:c1:aa:11:fb:20:c7:88:e0:
2d:4a:a3:f6:e2:f5:4c:14:fb:44:9b:90:e2:34:71:0b:86:98:
31:a0:a1:07:a9:9f:79:84:73:69:36:26:a8:d9:35:d6:c3:bb:
e0:cf:1b:63:7d:3d:89:b5:e0:aa:71:83:df:fd:5c:07:26:ce:
3c:71:12:fd:3b:c2:27:d6:f3:68:96:0f:c3:fe:3a:af:e6:6a:
43:0a:3b:ee:2f:9c:04:be:50:6b:ab:7d:de:b0:4c:21:41:23:
d4:a4:94:44:3a:a1:fe:7f:83:42:ef:bc:f9:ea:92:4a:4e:6d:
e5:5a:c5:6a:ff:dd:dd:e5:51:c0:03:01:29:41:ab:41:7a:23:
b0:05:6b:5c:c3:a9:08:5e:18:9f:a8:fd:e2:b3:59:a7:e1:84:
68:cf:f8:5d:9a:61:0e:f7:bb:20:c4:12:a2:f0:1d:b2:30:4b:
e8:e9:75:ae:6d:8d:29:a5:f6:6a:36:a5:f5:4f:18:d3:29:b2:
88:de:0b:9b:81:9b:05:3e:57:4a:5b:19:4e:35:5d:df:22:ba:
09:94:60:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEOFUPuiDCvPOQ2RfPGSk3aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk
NTMyYzIwHhcNMjYxMDA1MjIwMDM2WhcNMjYxMDA2MjIwMDM2WjAzMTEwLwYDVQQD
EygwOWI1MzJhZTgxNGY2OGUxNjBmYjI4MGEwNDE2NmZjYTY3YTU4MDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBT4V5JMsQ0uJUL9Dd47hVkaGx/j
7qn2RkLlMvV552XxNg1ocBSl5jXrujZbI5OyuM6sKaj+vlc2BEsSPfDrB+aGjWgg
Bn5rt11SDm93WWh56UT85mHpwSzbmza/8TLZjmqEnWJoz1teZ9QLCfRv/GrfnWTU
02Xb1x0dvMQST0jO8I/Jd9tYAj49D1XjEaA5icLqR09Od/DvwBN7Si0+3COy6/AB
qOKqPEdd1Kv/S96wXHlVzPS7tPokavzvW7quiVHlDQch0OOT5C0MURP11H3Oowuw
7FrLSDKiSef4FPqi2Gb83Z2rDI1Ox209qA4yCZ94t0frpI/5XPZwcxBKWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAm1Mq6BT2jhYPsoCgQWb8pnpYBPMB8GA1UdIwQY
MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt
MWQwYmY1MjA4ZjkwLzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw
LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxPDWBYd
UiE3yiXmHS/82Qbb99juJJ4KylC7/U/x+VhIX8ViOGXLvQfGqoCamsGqEfsgx4jg
LUqj9uL1TBT7RJuQ4jRxC4aYMaChB6mfeYRzaTYmqNk11sO74M8bY309ibXgqnGD
3/1cBybOPHES/TvCJ9bzaJYPw/46r+ZqQwo77i+cBL5Qa6t93rBMIUEj1KSURDqh
/n+DQu+8+eqSSk5t5VrFav/d3eVRwAMBKUGrQXojsAVrXMOpCF4Yn6j94rNZp+GE
aM/4XZphDve7IMQSovAdsjBL6Ol1rm2NKaX2ajal9U8Y0ymyiN4Lm4GbBT5XSlsZ
TjVd3yK6CZRgJg==
-----END CERTIFICATE-----
Generated at Tue Oct 6 01:28:38 2026 by rpki-client