Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.mft
File: qL9-hBKX4Vb6H-1VGop5kxy5BNQ.mft (raw, json)
Hash identifier: zQ5OqIvcM5gpIjTSMaAKP95khtEFzjiBWlae+0u9Ocw=
Subject key identifier: 09:8D:D5:5E:6E:FE:F4:2C:B4:2E:7E:11:0D:E1:6A:D6:BE:79:69:B5
Authority key identifier: A8:BF:7E:84:12:97:E1:56:FA:1F:ED:55:1A:8A:79:93:1C:B9:04:D4
Certificate issuer: /CN=a8bf7e841297e156fa1fed551a8a79931cb904d4
Certificate serial: 01A156D44F509E50D415B8D4A1146FBE1347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.mft
Manifest number: 15
Signing time: Tue 20 Oct 2026 01:01:56 +0000
Manifest this update: Tue 20 Oct 2026 01:01:56 +0000
Manifest next update: Wed 21 Oct 2026 01:01:56 +0000
Files and hashes: 1: 3A_5REI1WoaAIOXX3NcVfMmONwE.roa (hash: DcSlI4Zg58MWz5+nMQ75Gey9VrmFr8SDTp+sLJwmSBQ=)
2: jrjO5cE0GdFyalZX0hzX8nRDdw0.roa (hash: 1V0Z7NxZdeUw4NHvj1xmVAaD4P9npohDIfXsrgz0Xo8=)
3: qL9-hBKX4Vb6H-1VGop5kxy5BNQ.crl (hash: CabTgxmSAnwNYUtPemLWR9IeAJvPXT0+Z1ZvRBAahrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:d4:4f:50:9e:50:d4:15:b8:d4:a1:14:6f:be:13:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8bf7e841297e156fa1fed551a8a79931cb904d4
Validity
Not Before: Oct 20 01:01:56 2026 GMT
Not After : Oct 21 01:01:56 2026 GMT
Subject: CN=098dd55e6efef42cb42e7e110de16ad6be7969b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:b9:d3:ef:24:86:e5:4a:12:57:6e:66:1d:
9c:dc:03:8a:44:cb:d7:1d:be:e8:10:59:46:54:0f:
c3:ea:62:e6:1f:00:a5:f6:f9:c7:42:34:2d:fe:43:
ea:f5:a6:11:b2:33:c3:72:3d:88:15:8e:78:eb:88:
0f:8b:27:8b:79:0d:a9:cd:1f:db:f9:cb:64:41:5e:
fa:ba:ff:95:a1:d5:5c:9b:8c:6f:65:8e:30:03:61:
6e:67:ac:c6:e5:9e:cd:8b:37:46:3d:7f:52:8b:ca:
4e:19:d0:28:c5:a9:95:0e:32:04:a8:6a:56:89:de:
b6:6d:91:8b:a2:47:85:cf:a6:94:fe:7a:1b:1b:4f:
67:cf:c5:1b:54:28:d5:76:2e:65:5d:98:c5:80:73:
d4:c5:95:2c:41:5c:4b:af:6a:db:2c:b7:28:cd:8f:
1d:1b:2a:1a:37:c6:21:0a:62:10:c9:57:94:5b:65:
00:69:f7:3a:08:8c:2a:d2:44:7d:13:cb:27:2e:ee:
18:35:99:f7:e0:2d:02:e7:b4:03:32:d4:bb:52:17:
27:73:2d:db:38:b0:01:a2:e1:32:8a:54:4c:c5:2c:
96:f8:2e:81:5a:e6:da:05:57:02:b4:e5:f7:1c:8c:
1b:ca:09:36:8e:17:d3:e9:7f:e4:05:20:4c:88:a7:
77:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8D:D5:5E:6E:FE:F4:2C:B4:2E:7E:11:0D:E1:6A:D6:BE:79:69:B5
X509v3 Authority Key Identifier:
keyid:A8:BF:7E:84:12:97:E1:56:FA:1F:ED:55:1A:8A:79:93:1C:B9:04:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/59f3fb-c65e-4eb4-8470-8382e1949976/1/qL9-hBKX4Vb6H-1VGop5kxy5BNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:61:c6:cf:e2:82:9e:f3:7e:56:87:00:73:d1:3b:4d:b5:2f:
1f:e0:42:ea:49:f1:94:f3:06:2a:b6:26:ca:34:ec:3d:0e:f1:
92:30:bb:1c:56:ae:96:9e:c6:0d:19:86:f1:7c:b3:95:a4:9c:
cd:46:87:8d:88:4c:c7:0b:c8:11:87:48:5b:6c:98:54:ec:2a:
46:5e:5f:36:32:59:e9:36:b6:f6:10:10:97:75:cf:50:d5:f8:
86:42:ea:36:13:86:ee:40:44:ab:c3:f9:80:98:6a:9c:d1:20:
d2:3d:2d:d0:1f:71:cf:e0:f2:44:f6:ef:6d:36:51:e9:92:44:
e2:02:f3:2f:1f:51:dc:68:8e:c6:fd:86:38:57:b3:df:a0:3a:
e1:a0:84:87:78:52:05:cf:7d:8d:c7:e7:40:b6:5f:fb:c4:f7:
a1:7f:22:49:9d:02:81:70:93:1e:55:aa:e8:7d:0e:27:7a:a8:
10:d6:56:f4:48:54:f8:19:9f:ed:1a:e8:1d:63:ac:6d:1c:be:
3b:9f:57:97:42:d1:49:62:20:ee:7c:2e:4b:6a:3c:a3:75:bf:
f8:e4:17:8d:80:9b:c4:61:1b:c3:9b:aa:e2:b8:a7:b6:09:ab:
c0:d4:1b:92:25:89:90:b9:1f:47:5c:7c:78:cb:b9:d1:6f:9a:
2c:0c:9e:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFW1E9QnlDUFbjUoRRvvhNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YmY3ZTg0MTI5N2UxNTZmYTFmZWQ1NTFhOGE3OTkzMWNi
OTA0ZDQwHhcNMjYxMDIwMDEwMTU2WhcNMjYxMDIxMDEwMTU2WjAzMTEwLwYDVQQD
EygwOThkZDU1ZTZlZmVmNDJjYjQyZTdlMTEwZGUxNmFkNmJlNzk2OWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/S50+8khuVKElduZh2c3AOKRMvX
Hb7oEFlGVA/D6mLmHwCl9vnHQjQt/kPq9aYRsjPDcj2IFY5464gPiyeLeQ2pzR/b
+ctkQV76uv+VodVcm4xvZY4wA2FuZ6zG5Z7NizdGPX9Si8pOGdAoxamVDjIEqGpW
id62bZGLokeFz6aU/nobG09nz8UbVCjVdi5lXZjFgHPUxZUsQVxLr2rbLLcozY8d
GyoaN8YhCmIQyVeUW2UAafc6CIwq0kR9E8snLu4YNZn34C0C57QDMtS7Uhcncy3b
OLABouEyilRMxSyW+C6BWubaBVcCtOX3HIwbygk2jhfT6X/kBSBMiKd3DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmN1V5u/vQstC5+EQ3hata+eWm1MB8GA1UdIwQY
MBaAFKi/foQSl+FW+h/tVRqKeZMcuQTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUw5LWhCS1g0VmI2SC0xVkdvcDVreHk1Qk5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81OWYzZmItYzY1ZS00ZWI0LTg0NzAt
ODM4MmUxOTQ5OTc2LzEvcUw5LWhCS1g0VmI2SC0xVkdvcDVreHk1Qk5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy81OWYzZmItYzY1ZS00ZWI0LTg0NzAtODM4MmUxOTQ5OTc2
LzEvcUw5LWhCS1g0VmI2SC0xVkdvcDVreHk1Qk5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZWHGz+KC
nvN+VocAc9E7TbUvH+BC6knxlPMGKrYmyjTsPQ7xkjC7HFaulp7GDRmG8XyzlaSc
zUaHjYhMxwvIEYdIW2yYVOwqRl5fNjJZ6Ta29hAQl3XPUNX4hkLqNhOG7kBEq8P5
gJhqnNEg0j0t0B9xz+DyRPbvbTZR6ZJE4gLzLx9R3GiOxv2GOFez36A64aCEh3hS
Bc99jcfnQLZf+8T3oX8iSZ0CgXCTHlWq6H0OJ3qoENZW9EhU+Bmf7RroHWOsbRy+
O59Xl0LRSWIg7nwuS2o8o3W/+OQXjYCbxGEbw5uq4rintgmrwNQbkiWJkLkfR1x8
eMu50W+aLAyeRw==
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:00:44 2026 by rpki-client