Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
File: qyftHOpDIcScPKEPOv-v29rVMsI.mft (raw, json)
Hash identifier: OV3eunB7RCkK+1AuvPf4DQjBV7O384oAz2SInDyvjHo=
Subject key identifier: D5:85:3B:A4:E4:E2:FD:8E:53:4D:D3:93:51:11:A7:DA:F0:06:DA:5C
Authority key identifier: AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
Certificate issuer: /CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Certificate serial: 01A00394ED77E22C98FDB3FE1431A4D801CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
Manifest number: 1A09
Signing time: Sat 15 Aug 2026 04:01:26 +0000
Manifest this update: Sat 15 Aug 2026 04:01:26 +0000
Manifest next update: Sun 16 Aug 2026 04:01:26 +0000
Files and hashes: 1: PdSSD1pY2R8sHhODVspC8pD1XNg.roa (hash: Hdy0mlxbyoY3S5V4w6LQ+HVJLICaMsGMYmJLwRUw9C8=)
2: gQS_1Ytr-O-IsbRGOtGTDvNNYeY.roa (hash: s9JwwcRfagDOyb+VnD4SIPFLvOjPpaDEvmlIEjUU6Jk=)
3: qyftHOpDIcScPKEPOv-v29rVMsI.crl (hash: nMZulynhyPfPd8/11wFAtoRI3nCj3dJ7Ti69x/mE4Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:ed:77:e2:2c:98:fd:b3:fe:14:31:a4:d8:01:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab27ed1cea4321c49c3ca10f3affafdbdad532c2
Validity
Not Before: Aug 15 04:01:26 2026 GMT
Not After : Aug 16 04:01:26 2026 GMT
Subject: CN=d5853ba4e4e2fd8e534dd3935111a7daf006da5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e0:22:20:84:d8:ae:4c:d2:3d:63:1c:de:a2:
38:b3:58:e2:7f:14:23:13:10:9c:87:16:3a:57:cb:
b3:52:9d:b4:e1:28:b6:20:38:9b:e0:3e:28:88:22:
44:90:02:76:9f:95:53:cc:b0:37:94:d5:46:fb:6a:
eb:f4:b5:1b:dd:c5:d5:ae:5a:74:1f:d5:7a:41:2c:
48:2e:ce:76:9d:23:45:a2:53:73:00:9e:4a:4d:51:
72:1c:8f:91:b3:22:4c:a2:c5:16:02:9b:5c:bc:5e:
38:97:e8:23:5c:4c:5c:cb:08:12:77:f5:50:c5:e5:
ed:da:ff:fd:4e:51:36:23:04:84:a6:8d:cc:05:51:
76:a4:09:3b:d6:b3:a7:53:69:42:37:eb:69:7a:dd:
8b:66:51:67:4a:f9:d4:f6:59:34:d6:f9:d6:ad:0c:
11:b1:43:33:83:e9:6c:cc:53:7c:2e:96:4d:92:12:
ea:d9:91:3c:fa:b4:d4:56:74:04:4a:47:65:d0:2b:
12:39:68:48:ce:74:18:80:58:4e:e0:6a:dc:95:37:
84:ac:48:23:c5:36:82:6f:56:49:4b:38:bc:45:a1:
b7:94:f6:d1:22:2d:80:54:89:db:45:80:80:54:56:
19:54:27:50:ef:f2:36:19:1b:58:db:b4:54:88:8c:
d8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:85:3B:A4:E4:E2:FD:8E:53:4D:D3:93:51:11:A7:DA:F0:06:DA:5C
X509v3 Authority Key Identifier:
keyid:AB:27:ED:1C:EA:43:21:C4:9C:3C:A1:0F:3A:FF:AF:DB:DA:D5:32:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyftHOpDIcScPKEPOv-v29rVMsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/865490-78e7-43b4-b2fd-1d0bf5208f90/1/qyftHOpDIcScPKEPOv-v29rVMsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6a:a4:a9:cd:6b:e6:0c:58:6d:c6:57:c3:e4:a5:06:06:24:
ef:52:3c:4c:fa:bd:e4:77:74:ef:d4:5c:fa:2a:1b:8f:b8:95:
e1:ba:e6:6a:82:c2:b1:85:8e:00:5d:84:c7:ba:db:f7:ec:8d:
99:87:a5:a0:7e:55:32:e5:a9:47:aa:73:83:4f:d7:60:ab:ef:
52:47:65:4c:fc:0d:bf:88:46:81:c1:11:60:61:58:e8:4d:26:
31:d1:e7:cb:b8:66:dd:45:de:55:7e:5e:2a:93:6c:2e:c8:1a:
f2:0e:2c:a8:76:c6:b5:e5:8e:bd:f5:2b:4c:bf:48:64:a0:22:
27:6d:d2:47:1e:70:45:97:83:ce:00:f9:51:ce:87:66:d1:9f:
f3:b8:bd:01:6c:01:5b:b9:56:34:9b:f0:74:a5:f6:f7:e0:73:
41:64:5d:30:e0:cf:41:7a:16:b2:7e:30:25:3e:5c:85:be:0f:
92:d5:59:9c:31:a4:18:bc:9f:57:68:5e:97:9d:73:09:14:ed:
ae:24:31:48:c5:81:50:28:62:8a:60:ee:92:af:45:e4:a9:15:
0d:6c:a3:24:fb:24:a2:4c:dd:d4:ca:eb:43:a4:db:8d:fc:34:
6b:ad:88:21:98:86:35:6c:f3:50:78:27:3e:b7:38:0d:6c:77:
9a:e8:00:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADlO134iyY/bP+FDGk2AHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMjdlZDFjZWE0MzIxYzQ5YzNjYTEwZjNhZmZhZmRiZGFk
NTMyYzIwHhcNMjYwODE1MDQwMTI2WhcNMjYwODE2MDQwMTI2WjAzMTEwLwYDVQQD
EyhkNTg1M2JhNGU0ZTJmZDhlNTM0ZGQzOTM1MTExYTdkYWYwMDZkYTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuAiIITYrkzSPWMc3qI4s1jifxQj
ExCchxY6V8uzUp204Si2IDib4D4oiCJEkAJ2n5VTzLA3lNVG+2rr9LUb3cXVrlp0
H9V6QSxILs52nSNFolNzAJ5KTVFyHI+RsyJMosUWAptcvF44l+gjXExcywgSd/VQ
xeXt2v/9TlE2IwSEpo3MBVF2pAk71rOnU2lCN+tpet2LZlFnSvnU9lk01vnWrQwR
sUMzg+lszFN8LpZNkhLq2ZE8+rTUVnQESkdl0CsSOWhIznQYgFhO4GrclTeErEgj
xTaCb1ZJSzi8RaG3lPbRIi2AVInbRYCAVFYZVCdQ7/I2GRtY27RUiIzYJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWFO6Tk4v2OU03Tk1ERp9rwBtpcMB8GA1UdIwQY
MBaAFKsn7RzqQyHEnDyhDzr/r9va1TLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQt
MWQwYmY1MjA4ZjkwLzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi84NjU0OTAtNzhlNy00M2I0LWIyZmQtMWQwYmY1MjA4Zjkw
LzEvcXlmdEhPcERJY1NjUEtFUE92LXYyOXJWTXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ2qkqc1r
5gxYbcZXw+SlBgYk71I8TPq95Hd079Rc+iobj7iV4brmaoLCsYWOAF2Ex7rb9+yN
mYeloH5VMuWpR6pzg0/XYKvvUkdlTPwNv4hGgcERYGFY6E0mMdHny7hm3UXeVX5e
KpNsLsga8g4sqHbGteWOvfUrTL9IZKAiJ23SRx5wRZeDzgD5Uc6HZtGf87i9AWwB
W7lWNJvwdKX29+BzQWRdMODPQXoWsn4wJT5chb4PktVZnDGkGLyfV2hel51zCRTt
riQxSMWBUChiimDukq9F5KkVDWyjJPskokzd1MrrQ6Tbjfw0a62IIZiGNWzzUHgn
Prc4DWx3mugABQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:26:12 2026 by rpki-client