Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
File: qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft (raw, json)
Hash identifier: NNDkel8Q4xCQUXIM9PvW2w+jPsEVWzWMPFV6PeWONWM=
Subject key identifier: 64:08:42:2A:DB:9B:D9:91:28:24:6A:89:13:31:55:97:DE:87:8C:1B
Authority key identifier: A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
Certificate issuer: /CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Certificate serial: 01A1765E7A50F5356E4840D2EF9F01F1EB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
Manifest number: 11B7
Signing time: Mon 26 Oct 2026 04:01:05 +0000
Manifest this update: Mon 26 Oct 2026 04:01:05 +0000
Manifest next update: Tue 27 Oct 2026 04:01:05 +0000
Files and hashes: 1: pJy_J4dH-nPKCXyAdCdJtDsMxrU.roa (hash: uOd0xGswmdF48/9jkoke/SyXvT+SzaX6MAmlYWoqoHE=)
2: qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl (hash: YH/jJ5+1s49446zwgHV3fQW8cNrUaWPXfXQwJE2waj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5e:7a:50:f5:35:6e:48:40:d2:ef:9f:01:f1:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8f1e05bd7b3f8ca9b4abd0f899912179b566df7
Validity
Not Before: Oct 26 04:01:05 2026 GMT
Not After : Oct 27 04:01:05 2026 GMT
Subject: CN=6408422adb9bd99128246a8913315597de878c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e5:3b:ed:ab:98:99:aa:5d:51:dd:7e:3d:b3:
94:10:da:5d:61:43:c8:a7:96:a4:12:9d:70:a0:cf:
09:d5:24:7f:63:f7:7d:a3:35:90:bc:02:c8:63:42:
75:11:c8:6f:dc:ab:90:f6:a5:51:bb:42:a0:1d:95:
7e:0b:8a:c3:05:92:81:51:75:d9:ae:62:9e:68:47:
b7:29:2e:7a:9d:39:2f:4e:ad:d5:f6:f8:f1:16:2e:
7c:d1:72:02:7f:08:d7:7d:59:0c:6c:62:b0:66:cd:
ff:5b:27:00:0b:16:7e:53:e1:08:e0:a1:fc:38:bf:
05:1c:a5:bb:c1:1f:45:fc:5d:8f:cb:47:2e:0a:ca:
73:ce:21:9a:ef:4f:94:cd:0f:52:fd:94:f2:7b:06:
64:a6:ca:0a:f6:22:c3:76:e9:95:02:72:32:1d:c3:
88:a3:42:69:79:fc:e5:39:04:67:97:18:c5:b1:13:
33:34:19:f9:1b:41:77:7a:08:b8:7c:6e:dd:43:3d:
98:b5:33:2f:71:31:c1:c3:16:64:79:b8:4c:23:10:
c5:8b:2d:f9:59:7f:ac:75:32:52:3f:e6:65:fd:d9:
33:bf:5e:b3:d7:53:0f:73:a8:86:be:66:40:1e:f6:
5e:28:79:8d:d6:76:41:cd:ce:5a:07:8c:f2:e7:7e:
a8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:08:42:2A:DB:9B:D9:91:28:24:6A:89:13:31:55:97:DE:87:8C:1B
X509v3 Authority Key Identifier:
keyid:A8:F1:E0:5B:D7:B3:F8:CA:9B:4A:BD:0F:89:99:12:17:9B:56:6D:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qPHgW9ez-MqbSr0PiZkSF5tWbfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4469b5-3bf7-4095-89c2-be9dd15d8291/1/qPHgW9ez-MqbSr0PiZkSF5tWbfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fa:45:d2:67:c1:92:c5:5f:d0:e8:f5:ee:bf:3e:3a:05:10:
77:1f:da:d7:f2:ab:d8:fa:4e:ac:4f:53:dd:1e:74:76:da:ac:
9f:04:cd:a5:a8:ea:fb:1f:65:13:2c:ad:a4:0e:cf:20:eb:0d:
94:64:53:87:7e:c6:81:d4:2d:e4:53:a3:eb:aa:2c:15:6a:5c:
6d:8a:e6:99:9f:2e:55:9b:7b:9e:f7:af:f7:78:98:d6:a2:a5:
54:37:1d:f8:f4:e9:64:3b:ef:72:05:5c:c7:b4:b4:b6:95:47:
c0:0a:74:54:87:0c:67:82:8c:8b:9e:4b:d0:52:68:63:9c:83:
c9:87:a1:a5:7e:11:d7:cf:bc:2b:d6:b3:ac:df:b0:11:cf:75:
60:a4:8f:0e:51:d0:6f:f9:99:34:28:8e:13:e5:ac:9d:f2:f8:
de:57:a9:dd:f8:cd:00:95:4a:04:bf:aa:c4:cb:08:3b:94:c0:
f5:72:5e:42:b0:55:42:7f:1e:4e:a1:1d:9d:74:c7:f0:3f:23:
63:65:fb:1f:e4:ca:ba:ac:d8:ee:66:f0:20:8d:18:5a:a3:ea:
f8:e4:9f:37:8e:d0:55:51:8e:87:97:40:6e:2f:f7:4e:0c:95:
86:07:49:8a:4a:9f:45:65:b4:fa:f0:a9:eb:cc:44:13:63:be:
ce:54:8f:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2XnpQ9TVuSEDS758B8etVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ZjFlMDViZDdiM2Y4Y2E5YjRhYmQwZjg5OTkxMjE3OWI1
NjZkZjcwHhcNMjYxMDI2MDQwMTA1WhcNMjYxMDI3MDQwMTA1WjAzMTEwLwYDVQQD
Eyg2NDA4NDIyYWRiOWJkOTkxMjgyNDZhODkxMzMxNTU5N2RlODc4YzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruU77auYmapdUd1+PbOUENpdYUPI
p5akEp1woM8J1SR/Y/d9ozWQvALIY0J1Echv3KuQ9qVRu0KgHZV+C4rDBZKBUXXZ
rmKeaEe3KS56nTkvTq3V9vjxFi580XICfwjXfVkMbGKwZs3/WycACxZ+U+EI4KH8
OL8FHKW7wR9F/F2Py0cuCspzziGa70+UzQ9S/ZTyewZkpsoK9iLDdumVAnIyHcOI
o0JpefzlOQRnlxjFsRMzNBn5G0F3egi4fG7dQz2YtTMvcTHBwxZkebhMIxDFiy35
WX+sdTJSP+Zl/dkzv16z11MPc6iGvmZAHvZeKHmN1nZBzc5aB4zy536oUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQIQirbm9mRKCRqiRMxVZfeh4wbMB8GA1UdIwQY
MBaAFKjx4FvXs/jKm0q9D4mZEhebVm33MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVBIZ1c5ZXotTXFiU3IwUGlaa1NGNXRXYmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80NDY5YjUtM2JmNy00MDk1LTg5YzIt
YmU5ZGQxNWQ4MjkxLzEvcVBIZ1c5ZXotTXFiU3IwUGlaa1NGNXRXYmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80NDY5YjUtM2JmNy00MDk1LTg5YzItYmU5ZGQxNWQ4Mjkx
LzEvcVBIZ1c5ZXotTXFiU3IwUGlaa1NGNXRXYmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/pF0mfB
ksVf0Oj17r8+OgUQdx/a1/Kr2PpOrE9T3R50dtqsnwTNpajq+x9lEyytpA7PIOsN
lGRTh37GgdQt5FOj66osFWpcbYrmmZ8uVZt7nvev93iY1qKlVDcd+PTpZDvvcgVc
x7S0tpVHwAp0VIcMZ4KMi55L0FJoY5yDyYehpX4R18+8K9azrN+wEc91YKSPDlHQ
b/mZNCiOE+WsnfL43lep3fjNAJVKBL+qxMsIO5TA9XJeQrBVQn8eTqEdnXTH8D8j
Y2X7H+TKuqzY7mbwII0YWqPq+OSfN47QVVGOh5dAbi/3TgyVhgdJikqfRWW0+vCp
68xEE2O+zlSPzA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:10 2026 by rpki-client