Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: dnZGuQjUWY4n+6aNy8y/3EHoL5uIVj+wok4W0IYRoPo=
Subject key identifier: 8C:2A:DE:C3:E1:13:3E:9D:88:CB:F3:EC:7B:13:DB:0B:F8:50:07:08
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 01A11A505C10DE12C7B48C3EBAEBD88A22F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 10E4
Signing time: Thu 08 Oct 2026 07:00:36 +0000
Manifest this update: Thu 08 Oct 2026 07:00:36 +0000
Manifest next update: Fri 09 Oct 2026 07:00:36 +0000
Files and hashes: 1: RGHMhabHZkPW5wXprVh6WUeUNEU.roa (hash: aWxpktwD4HwK4DqUq/i3jSDZlGsjYGbb6rrk+6zxpz0=)
2: hW9pmZmoOAPv4EQxUHQXTXDJr6s.roa (hash: mjwhxdNEgH8aH/IfZWkqyz4fW356i+YVNu/YE2e6m8A=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: qzzmAaARYrhAIvJkATLUA2kxKf+XJdxylt43s9UGUkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:5c:10:de:12:c7:b4:8c:3e:ba:eb:d8:8a:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Oct 8 07:00:36 2026 GMT
Not After : Oct 9 07:00:36 2026 GMT
Subject: CN=8c2adec3e1133e9d88cbf3ec7b13db0bf8500708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:24:a9:73:92:bb:83:bd:46:0c:e3:33:ea:c6:
7b:4d:9f:2b:34:f1:29:b7:e0:44:ad:ab:bc:7b:c2:
f4:56:82:75:f1:60:9b:9a:74:68:0b:08:c1:14:b6:
de:32:e2:47:24:9c:4e:c7:5b:fd:6f:8c:d0:9c:21:
b7:f1:80:de:31:4f:6e:34:23:19:cb:89:2e:ea:2c:
3f:98:c0:80:7c:04:73:b2:1e:e1:aa:3c:ae:bf:1f:
70:86:78:dd:f3:63:bb:5a:70:5c:9e:3d:a4:1d:76:
bf:7d:f9:1d:4c:88:c5:f0:00:27:56:b0:46:10:a4:
69:03:1a:df:78:04:56:10:56:0b:5a:2c:fd:4c:13:
bf:b5:1b:ac:82:cf:04:0b:d1:6b:87:14:a0:27:fc:
26:9f:f0:13:ca:37:69:c5:46:ff:24:e2:a7:5e:d3:
39:31:ef:ed:ce:4c:26:44:0a:2e:db:04:ba:ab:f6:
3d:57:4a:97:ff:36:1e:79:14:74:a1:8a:f0:a9:b9:
fe:7c:e5:ce:74:f0:06:78:57:0c:f1:8d:26:52:7f:
a6:89:dd:52:44:da:cc:11:c5:1e:b4:df:7e:41:ad:
b5:4d:b9:66:61:f0:c0:f2:4a:98:2e:83:38:92:ac:
4b:5e:83:0e:ca:5d:da:91:12:8f:b6:37:dc:79:9c:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2A:DE:C3:E1:13:3E:9D:88:CB:F3:EC:7B:13:DB:0B:F8:50:07:08
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:67:3a:a7:f2:8c:3e:06:fb:1e:32:34:39:f6:e7:6c:8c:4d:
d8:40:9f:65:33:75:15:06:c1:1e:c1:77:92:5e:c0:bb:34:e4:
86:1c:11:c1:a7:9a:b7:3b:df:5d:3b:cc:c4:f4:50:68:84:4c:
28:6d:b1:82:72:6a:4e:16:29:32:7f:85:d3:4e:7a:38:f4:ad:
45:0b:78:d8:d2:6f:c7:00:51:95:79:90:84:dc:fb:16:c6:65:
a2:1a:97:60:c7:00:4f:74:bd:e9:3b:40:f9:2e:f3:21:b5:bc:
1e:f9:4c:1c:4a:e9:00:a5:4b:de:da:d6:5c:05:ef:85:4b:9e:
be:0d:cb:a4:e8:ba:90:0d:bb:99:6c:ae:ca:19:4f:7a:ed:e2:
af:d4:8a:d3:2b:1f:7f:4b:1c:79:20:8f:31:d8:f0:73:d6:34:
31:2e:68:08:77:de:70:49:dc:c0:d8:1f:86:69:d6:47:3b:6f:
a3:96:f1:a6:0e:0a:31:da:37:9a:68:56:bd:da:34:b2:db:21:
dd:52:da:64:15:dc:85:af:3b:53:e9:64:7a:cd:a3:51:bd:05:
e6:25:9c:01:1c:63:75:66:18:f7:33:d3:dc:3a:b2:6f:b2:ed:
e7:ed:ac:f9:65:9d:22:be:d8:93:dc:99:1c:59:2e:01:f6:bf:
4a:51:5b:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEaUFwQ3hLHtIw+uuvYiiLzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNWI0NzFkMGJhMDg5ZDllOWY0NmMyOTEzMTk2NzRmYWM4
MTI4ZDAwHhcNMjYxMDA4MDcwMDM2WhcNMjYxMDA5MDcwMDM2WjAzMTEwLwYDVQQD
Eyg4YzJhZGVjM2UxMTMzZTlkODhjYmYzZWM3YjEzZGIwYmY4NTAwNzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iSpc5K7g71GDOMz6sZ7TZ8rNPEp
t+BErau8e8L0VoJ18WCbmnRoCwjBFLbeMuJHJJxOx1v9b4zQnCG38YDeMU9uNCMZ
y4ku6iw/mMCAfARzsh7hqjyuvx9whnjd82O7WnBcnj2kHXa/ffkdTIjF8AAnVrBG
EKRpAxrfeARWEFYLWiz9TBO/tRusgs8EC9FrhxSgJ/wmn/ATyjdpxUb/JOKnXtM5
Me/tzkwmRAou2wS6q/Y9V0qX/zYeeRR0oYrwqbn+fOXOdPAGeFcM8Y0mUn+mid1S
RNrMEcUetN9+Qa21TblmYfDA8kqYLoM4kqxLXoMOyl3akRKPtjfceZxJnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwq3sPhEz6diMvz7HsT2wv4UAcIMB8GA1UdIwQY
MBaAFKpbRx0LoInZ6fRsKRMZZ0+sgSjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWx0SEhRdWdpZG5wOUd3cEV4bG5UNnlCS05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS80YmUwMjctODhlOS00N2UzLWJiODgt
NmYyZTI1MjliZTgyLzEvcWx0SEhRdWdpZG5wOUd3cEV4bG5UNnlCS05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS80YmUwMjctODhlOS00N2UzLWJiODgtNmYyZTI1MjliZTgy
LzEvcWx0SEhRdWdpZG5wOUd3cEV4bG5UNnlCS05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGc6p/KM
Pgb7HjI0OfbnbIxN2ECfZTN1FQbBHsF3kl7AuzTkhhwRwaeatzvfXTvMxPRQaIRM
KG2xgnJqThYpMn+F0056OPStRQt42NJvxwBRlXmQhNz7FsZlohqXYMcAT3S96TtA
+S7zIbW8HvlMHErpAKVL3trWXAXvhUuevg3LpOi6kA27mWyuyhlPeu3ir9SK0ysf
f0sceSCPMdjwc9Y0MS5oCHfecEncwNgfhmnWRztvo5bxpg4KMdo3mmhWvdo0stsh
3VLaZBXcha87U+lkes2jUb0F5iWcARxjdWYY9zPT3Dqyb7Lt5+2s+WWdIr7Yk9yZ
HFkuAfa/SlFb4Q==
-----END CERTIFICATE-----
Generated at Thu Oct 8 12:58:22 2026 by rpki-client