Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
File: qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft (raw, json)
Hash identifier: iHZf0RBi3lbt8cB6g+NFfIuCbbDOY3QJ6P2f2aosX6g=
Subject key identifier: 7D:5F:90:3D:94:DD:57:90:D9:DA:D3:DA:64:EF:BD:4D:4D:9A:9F:68
Authority key identifier: AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
Certificate issuer: /CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Certificate serial: 01A139A43ADC312C6ED27315FDD90DB9E49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
Manifest number: 1A7B
Signing time: Wed 14 Oct 2026 09:00:26 +0000
Manifest this update: Wed 14 Oct 2026 09:00:26 +0000
Manifest next update: Thu 15 Oct 2026 09:00:26 +0000
Files and hashes: 1: L-HwD3a1YvSj02j1QCP8hdaPo2Q.roa (hash: 5Wk7yg6Zqe4Rx0Uz4L8PVzxHV08SwQbCHKVJQ29cOi4=)
2: qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl (hash: sWfSVeGqWZKFkdzOvqzMaH/IVykhGgnNhdfk8Rzc2aM=)
3: yDO02X54f1LQ0eg7vIsPILfqVfg.roa (hash: QejEGgHdQAnoB+VVS4oCOej9y3m34VK1Ik/jfXOr3V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a4:3a:dc:31:2c:6e:d2:73:15:fd:d9:0d:b9:e4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc41aafbbccaa96711849745ef722a5260ac7e
Validity
Not Before: Oct 14 09:00:26 2026 GMT
Not After : Oct 15 09:00:26 2026 GMT
Subject: CN=7d5f903d94dd5790d9dad3da64efbd4d4d9a9f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:4d:01:54:63:87:e0:5b:b6:13:fb:73:4d:
1d:55:45:c8:bb:43:3f:47:06:73:e5:f7:2c:58:51:
9f:ce:2a:0f:b0:b5:fa:bf:4b:fd:d5:89:d3:85:69:
a8:85:98:ce:6b:33:39:0e:c8:36:17:de:89:a9:96:
ab:c3:f8:9e:78:4f:cd:77:66:be:c7:5e:3f:5f:c0:
32:d7:f4:2e:14:1e:19:9f:a2:e5:60:d2:a2:e7:85:
90:6f:a2:00:bf:b8:82:77:0d:8d:34:e9:8c:e1:c3:
9d:c3:03:4f:b1:22:23:28:03:fb:42:e9:46:9f:e7:
53:39:10:83:c4:07:41:16:91:37:c2:1b:3a:5f:ac:
c0:f0:7f:15:32:0e:84:ba:93:a3:45:7d:ce:58:44:
c9:d3:a2:7a:f2:37:c1:f3:ee:3f:60:60:65:23:a9:
91:9d:fe:ca:d3:6e:34:be:0f:02:b5:c6:26:54:c5:
81:8a:d3:1c:6d:18:38:78:62:a6:d8:65:87:f0:08:
8d:e1:88:a8:f0:74:1b:4e:e0:73:22:8f:f5:51:99:
34:73:08:c5:91:2a:b3:4d:7a:88:59:73:42:16:9c:
70:f2:92:91:14:78:1f:6d:53:83:c8:5c:35:12:00:
75:f1:93:16:2d:6b:e1:3e:eb:65:1c:49:1f:65:8c:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5F:90:3D:94:DD:57:90:D9:DA:D3:DA:64:EF:BD:4D:4D:9A:9F:68
X509v3 Authority Key Identifier:
keyid:AA:FC:41:AA:FB:BC:CA:A9:67:11:84:97:45:EF:72:2A:52:60:AC:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvxBqvu8yqlnEYSXRe9yKlJgrH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fddd4-526a-4807-b127-1bc31c62401f/1/qvxBqvu8yqlnEYSXRe9yKlJgrH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:59:13:e9:5f:eb:1d:d8:5f:fc:3d:f0:7d:02:2c:c4:ec:81:
b1:0a:cd:1d:2f:59:1a:55:5a:77:f1:ab:06:ad:37:2e:0c:1a:
b4:a9:c4:f3:38:f3:54:34:9e:f9:a6:ad:0d:ef:32:24:0e:85:
9f:ac:5c:04:6c:0b:48:bb:9b:d7:1c:85:ab:a8:00:d6:67:21:
2e:6d:12:c9:9d:c4:46:f7:72:58:7a:9a:85:33:90:c2:17:28:
a7:38:c3:7f:5d:46:5f:e8:1e:58:48:4f:7a:94:a1:6d:df:e2:
a5:80:7e:bf:06:d7:ad:52:b9:e3:d9:01:db:f7:a2:d1:94:fd:
8e:6f:9d:70:d9:15:1d:1b:db:3e:66:75:59:24:bc:2b:63:51:
ad:46:5d:8c:23:c1:e1:5c:6f:14:f1:f2:c6:c6:c9:56:61:68:
78:d7:41:5b:3c:b8:2d:fe:fa:71:46:1c:73:c9:53:d5:19:67:
fd:ae:bc:f7:4f:84:3d:06:98:02:93:60:b2:55:c8:cf:82:87:
bb:19:1c:1d:58:04:ba:b9:24:1c:74:5e:40:3e:68:29:6c:1f:
90:db:53:cf:b8:4c:46:4a:ef:2d:7f:12:4d:44:61:d3:8e:8b:
6d:17:6f:79:6f:5d:ae:08:0d:02:76:73:ac:33:a1:66:b1:70:
17:52:91:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE5pDrcMSxu0nMV/dkNueSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZmM0MWFhZmJiY2NhYTk2NzExODQ5NzQ1ZWY3MjJhNTI2
MGFjN2UwHhcNMjYxMDE0MDkwMDI2WhcNMjYxMDE1MDkwMDI2WjAzMTEwLwYDVQQD
Eyg3ZDVmOTAzZDk0ZGQ1NzkwZDlkYWQzZGE2NGVmYmQ0ZDRkOWE5ZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HVNAVRjh+BbthP7c00dVUXIu0M/
RwZz5fcsWFGfzioPsLX6v0v91YnThWmohZjOazM5Dsg2F96JqZarw/ieeE/Nd2a+
x14/X8Ay1/QuFB4Zn6LlYNKi54WQb6IAv7iCdw2NNOmM4cOdwwNPsSIjKAP7QulG
n+dTORCDxAdBFpE3whs6X6zA8H8VMg6EupOjRX3OWETJ06J68jfB8+4/YGBlI6mR
nf7K0240vg8CtcYmVMWBitMcbRg4eGKm2GWH8AiN4Yio8HQbTuBzIo/1UZk0cwjF
kSqzTXqIWXNCFpxw8pKRFHgfbVODyFw1EgB18ZMWLWvhPutlHEkfZYyrkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1fkD2U3VeQ2drT2mTvvU1Nmp9oMB8GA1UdIwQY
MBaAFKr8Qar7vMqpZxGEl0XvcipSYKx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjct
MWJjMzFjNjI0MDFmLzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85ZmRkZDQtNTI2YS00ODA3LWIxMjctMWJjMzFjNjI0MDFm
LzEvcXZ4QnF2dTh5cWxuRVlTWFJlOXlLbEpnckg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlkT6V/r
Hdhf/D3wfQIsxOyBsQrNHS9ZGlVad/GrBq03LgwatKnE8zjzVDSe+aatDe8yJA6F
n6xcBGwLSLub1xyFq6gA1mchLm0SyZ3ERvdyWHqahTOQwhcopzjDf11GX+geWEhP
epShbd/ipYB+vwbXrVK549kB2/ei0ZT9jm+dcNkVHRvbPmZ1WSS8K2NRrUZdjCPB
4VxvFPHyxsbJVmFoeNdBWzy4Lf76cUYcc8lT1Rln/a6890+EPQaYApNgslXIz4KH
uxkcHVgEurkkHHReQD5oKWwfkNtTz7hMRkrvLX8STURh046LbRdveW9drggNAnZz
rDOhZrFwF1KRDg==
-----END CERTIFICATE-----
Generated at Wed Oct 14 13:10:06 2026 by rpki-client