Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
File: qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft (raw, json)
Hash identifier: cKShgr1lOHm5xKbTrmdlZ+jm6WuA6YnTb44Cj152WsI=
Subject key identifier: 6F:8E:FA:0D:AA:76:EC:86:AB:99:E9:30:13:2B:6B:5E:59:85:AF:FE
Authority key identifier: A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
Certificate issuer: /CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Certificate serial: 01A17C28BFFD373485EE492A8E49ECF1B3D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
Manifest number: 0BCF
Signing time: Tue 27 Oct 2026 07:00:07 +0000
Manifest this update: Tue 27 Oct 2026 07:00:07 +0000
Manifest next update: Wed 28 Oct 2026 07:00:07 +0000
Files and hashes: 1: J_Or8KZX1wZ3vXfvww5iG8YKGng.roa (hash: d0jCHNsxIqtKvODKfik7z9iL8EdgI8lCwjcpoaXOc1E=)
2: qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl (hash: KYe5Feji3Dfa1m/iR8df+6ZOXU34axy/B0svNXB8YhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:bf:fd:37:34:85:ee:49:2a:8e:49:ec:f1:b3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d6b171233f20b37e61a3a1ff59ea553bcf21d3
Validity
Not Before: Oct 27 07:00:07 2026 GMT
Not After : Oct 28 07:00:07 2026 GMT
Subject: CN=6f8efa0daa76ec86ab99e930132b6b5e5985affe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:31:f1:fe:94:1a:54:7a:53:00:24:86:a7:
6f:1c:9b:3a:7b:23:de:0f:b3:48:0e:fb:22:03:d5:
1d:66:f1:2c:dc:28:62:7a:a5:ce:20:aa:04:80:1a:
1f:23:4d:41:21:8d:34:4f:91:81:a9:46:e9:cd:77:
ac:d8:47:d1:ec:3e:1f:dc:68:04:6d:37:ed:e5:f6:
25:87:05:ee:6f:6a:c7:a7:3e:f9:b9:31:38:a9:9d:
30:3d:27:18:3a:53:21:4f:2c:c1:e0:79:1b:66:4f:
2d:9d:83:2a:ad:f5:c6:02:f5:b6:16:b7:bd:3d:ce:
da:ed:7b:c9:cd:04:8d:ab:bb:8c:d4:3e:ca:21:54:
26:fe:ff:01:73:fc:6e:15:03:1f:3b:48:75:5a:e3:
5d:be:3e:20:73:9b:6d:7f:af:86:6b:45:ec:f2:42:
54:ff:25:60:03:ff:69:33:88:1d:bb:95:f8:58:41:
da:c3:65:62:9e:73:d2:29:89:7b:d9:f6:93:ee:a1:
04:c1:02:d7:c6:ab:f3:7e:c9:7c:8f:e7:5c:58:e4:
34:f4:82:f3:20:30:58:d0:20:72:7f:5a:97:ca:e2:
0a:12:47:b4:43:f0:f7:92:78:cf:82:3e:19:c8:29:
c5:66:78:43:87:ea:c1:06:98:f6:e4:ee:b4:a4:5d:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8E:FA:0D:AA:76:EC:86:AB:99:E9:30:13:2B:6B:5E:59:85:AF:FE
X509v3 Authority Key Identifier:
keyid:A9:D6:B1:71:23:3F:20:B3:7E:61:A3:A1:FF:59:EA:55:3B:CF:21:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdaxcSM_ILN-YaOh_1nqVTvPIdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/896914-41b1-4b67-9db4-095dce0e019e/1/qdaxcSM_ILN-YaOh_1nqVTvPIdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:25:7a:6c:25:57:56:85:ce:4d:7f:94:6e:86:d6:1b:95:45:
c3:30:90:7d:44:c3:f0:97:46:6a:00:9f:f5:fd:23:6d:04:87:
68:da:18:c8:26:a3:46:00:7d:80:b3:74:39:99:d6:06:f5:7c:
4b:49:59:d7:1e:13:26:98:b6:54:36:ed:d8:b8:92:4e:30:da:
31:d6:65:8b:6c:85:46:67:44:99:0d:06:36:8f:3b:cb:4e:af:
26:0e:12:23:5c:45:b6:fe:95:96:55:de:67:3f:9e:f6:61:91:
de:4e:b3:87:30:e0:4e:3d:e1:13:19:fd:79:2c:ce:84:af:19:
7e:7a:15:0d:0c:72:83:2a:12:47:8b:59:86:7f:77:6f:ae:21:
14:93:f6:01:61:64:00:06:44:be:fa:cf:32:63:be:e9:c1:b3:
42:e6:e1:88:6c:ea:cf:78:a5:15:61:8b:25:00:9a:49:e9:5f:
0c:f5:a2:01:d9:bb:d7:a3:df:17:db:72:c9:46:a8:50:43:af:
7e:62:b0:10:89:d2:db:66:16:a1:af:9f:b4:2e:0d:61:27:8c:
c7:05:54:60:5a:46:e6:19:cf:db:d5:ea:c7:b1:b5:c5:45:8a:
8b:c5:b9:90:bf:51:7c:64:ef:78:7d:ec:5f:68:04:d7:37:7d:
8a:85:1c:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8KL/9NzSF7kkqjkns8bPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZDZiMTcxMjMzZjIwYjM3ZTYxYTNhMWZmNTllYTU1M2Jj
ZjIxZDMwHhcNMjYxMDI3MDcwMDA3WhcNMjYxMDI4MDcwMDA3WjAzMTEwLwYDVQQD
Eyg2ZjhlZmEwZGFhNzZlYzg2YWI5OWU5MzAxMzJiNmI1ZTU5ODVhZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX0x8f6UGlR6UwAkhqdvHJs6eyPe
D7NIDvsiA9UdZvEs3ChieqXOIKoEgBofI01BIY00T5GBqUbpzXes2EfR7D4f3GgE
bTft5fYlhwXub2rHpz75uTE4qZ0wPScYOlMhTyzB4HkbZk8tnYMqrfXGAvW2Fre9
Pc7a7XvJzQSNq7uM1D7KIVQm/v8Bc/xuFQMfO0h1WuNdvj4gc5ttf6+Ga0Xs8kJU
/yVgA/9pM4gdu5X4WEHaw2VinnPSKYl72faT7qEEwQLXxqvzfsl8j+dcWOQ09ILz
IDBY0CByf1qXyuIKEke0Q/D3knjPgj4ZyCnFZnhDh+rBBpj25O60pF0UGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+O+g2qduyGq5npMBMra15Zha/+MB8GA1UdIwQY
MBaAFKnWsXEjPyCzfmGjof9Z6lU7zyHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQt
MDk1ZGNlMGUwMTllLzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84OTY5MTQtNDFiMS00YjY3LTlkYjQtMDk1ZGNlMGUwMTll
LzEvcWRheGNTTV9JTE4tWWFPaF8xbnFWVHZQSWRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQCV6bCVX
VoXOTX+UbobWG5VFwzCQfUTD8JdGagCf9f0jbQSHaNoYyCajRgB9gLN0OZnWBvV8
S0lZ1x4TJpi2VDbt2LiSTjDaMdZli2yFRmdEmQ0GNo87y06vJg4SI1xFtv6VllXe
Zz+e9mGR3k6zhzDgTj3hExn9eSzOhK8ZfnoVDQxygyoSR4tZhn93b64hFJP2AWFk
AAZEvvrPMmO+6cGzQubhiGzqz3ilFWGLJQCaSelfDPWiAdm716PfF9tyyUaoUEOv
fmKwEInS22YWoa+ftC4NYSeMxwVUYFpG5hnP29Xqx7G1xUWKi8W5kL9RfGTveH3s
X2gE1zd9ioUcEA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:44 2026 by rpki-client