Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: 2q/+CNpXnNa/h52bhB3z1UrdOlpHkQk7sJHq66D+Z8c=
Subject key identifier: FD:0F:8B:CA:79:16:88:2F:F0:0E:02:A4:D0:A9:4E:A8:85:05:2A:A4
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 01A1479731F575058AF7C5695F4AB24399C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 1AAA
Signing time: Sat 17 Oct 2026 02:00:53 +0000
Manifest this update: Sat 17 Oct 2026 02:00:53 +0000
Manifest next update: Sun 18 Oct 2026 02:00:53 +0000
Files and hashes: 1: 9talkSrwDgnaCxDO4CeVrwCobYU.roa (hash: YP25gB5idoPvdLAQ6DcYcc8fU/wCBS3MFRk7Mh6hG84=)
2: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: gOEHzZLJLC+4IE9KWhf98k4QjVZMBT2e/Lr9U/I5gM8=)
3: pe0y6D9YFwdUoOdD0yoX4k8o7Rg.roa (hash: lD1kQU1t2awKdohr2NZ+PC7BmU3yOJRyp13CGfdz+Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:97:31:f5:75:05:8a:f7:c5:69:5f:4a:b2:43:99:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Oct 17 02:00:53 2026 GMT
Not After : Oct 18 02:00:53 2026 GMT
Subject: CN=fd0f8bca7916882ff00e02a4d0a94ea885052aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:84:93:91:24:44:70:8c:5f:17:3b:ff:af:
37:ab:69:4a:a9:a7:90:ec:b1:a5:26:bb:ae:97:65:
4a:cc:5f:26:87:a5:8c:a1:cd:46:2e:cf:23:99:25:
0d:2c:dc:00:cf:ec:29:6a:5a:2d:82:23:75:53:61:
7b:dc:68:6d:8f:57:d3:d7:14:43:f4:27:be:42:9b:
31:89:7d:53:02:6f:23:b3:39:67:6d:a0:b3:20:68:
b5:42:a4:32:bb:c5:49:42:89:df:6e:4e:e6:89:b5:
9f:c1:97:38:96:e8:a7:a2:7f:15:6e:25:c1:b6:f3:
aa:5a:5e:75:ad:2a:56:24:ff:34:f4:24:04:b5:52:
86:01:72:62:46:e9:a6:e4:d8:38:b9:c5:31:46:b5:
71:3a:8e:69:04:18:29:f4:eb:9e:27:f6:25:4f:f2:
8a:d4:c0:82:08:e2:e7:7e:ae:59:3c:7a:9c:4b:ca:
21:ba:b7:0f:84:97:aa:a2:32:ae:24:28:a5:80:84:
14:ce:fe:f3:c4:54:7d:69:8f:9c:4a:d2:44:90:28:
df:95:4b:63:9c:0b:d5:cc:f8:b1:3b:84:3e:57:f0:
75:bc:8c:58:cc:e5:ea:a2:5d:f7:93:f2:19:89:fe:
d8:60:91:ec:9b:77:e5:d2:5e:74:82:ff:31:2e:97:
43:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0F:8B:CA:79:16:88:2F:F0:0E:02:A4:D0:A9:4E:A8:85:05:2A:A4
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e5:94:f7:84:8c:28:43:0a:05:3a:44:5f:8a:0e:88:b0:96:
69:72:e0:c8:f5:eb:b5:74:5b:4f:fe:a9:7e:17:ae:91:60:ee:
fe:32:07:c9:a2:4d:ec:0c:a8:1e:72:23:d2:93:43:ec:d9:2f:
5b:65:1b:38:7b:58:2f:0f:4e:6d:ad:4a:24:bf:34:1b:07:1f:
54:d8:e5:bd:d4:f4:85:16:37:cc:63:60:95:76:49:50:4b:db:
a7:d3:4a:b8:6b:af:48:62:3a:8d:27:68:a8:a6:81:de:7b:eb:
72:4e:b4:1b:d8:2e:5d:7b:59:44:11:07:d6:ce:6e:19:7d:04:
57:d5:03:c2:b3:57:49:a7:21:f3:be:f5:e3:96:28:61:2d:bc:
e1:33:0a:ce:29:d7:ad:4c:13:be:45:d7:68:de:50:0c:e7:05:
2a:40:ac:ca:6a:c3:dd:86:47:11:9a:e0:c5:e0:5f:b4:4e:0a:
b6:a5:de:3c:0f:d8:c5:e6:ae:b6:bd:21:5c:d8:b8:30:c9:32:
f4:df:6e:13:bd:19:dc:c1:6a:ee:94:68:1a:1c:9a:87:d2:37:
0c:64:e6:a0:78:03:8e:25:e0:a1:ed:4b:b9:95:57:f2:e0:45:
48:b1:44:63:bc:f3:bd:d7:0b:63:ff:4c:95:f1:5e:f9:a2:8d:
51:db:13:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFHlzH1dQWK98VpX0qyQ5nGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMGE1NjQ4ZTFkNDZiNjYyZjRkMWRjYzA2NmQzOTQyN2M2
NWYwZDEwHhcNMjYxMDE3MDIwMDUzWhcNMjYxMDE4MDIwMDUzWjAzMTEwLwYDVQQD
EyhmZDBmOGJjYTc5MTY4ODJmZjAwZTAyYTRkMGE5NGVhODg1MDUyYWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC+Ek5EkRHCMXxc7/683q2lKqaeQ
7LGlJruul2VKzF8mh6WMoc1GLs8jmSUNLNwAz+wpalotgiN1U2F73Ghtj1fT1xRD
9Ce+QpsxiX1TAm8jszlnbaCzIGi1QqQyu8VJQonfbk7mibWfwZc4luinon8VbiXB
tvOqWl51rSpWJP809CQEtVKGAXJiRumm5Ng4ucUxRrVxOo5pBBgp9OueJ/YlT/KK
1MCCCOLnfq5ZPHqcS8ohurcPhJeqojKuJCilgIQUzv7zxFR9aY+cStJEkCjflUtj
nAvVzPixO4Q+V/B1vIxYzOXqol33k/IZif7YYJHsm3fl0l50gv8xLpdD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP0Pi8p5Fogv8A4CpNCpTqiFBSqkMB8GA1UdIwQY
MBaAFEMKVkjh1GtmL00dzAZtOUJ8ZfDRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzct
ODkwNTIyYzYxMDViLzEvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS84NjFjNzUtZGQwMy00MzdiLTlmYzctODkwNTIyYzYxMDVi
LzEvUXdwV1NPSFVhMll2VFIzTUJtMDVRbnhsOE5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYeWU94SM
KEMKBTpEX4oOiLCWaXLgyPXrtXRbT/6pfheukWDu/jIHyaJN7AyoHnIj0pND7Nkv
W2UbOHtYLw9Oba1KJL80GwcfVNjlvdT0hRY3zGNglXZJUEvbp9NKuGuvSGI6jSdo
qKaB3nvrck60G9guXXtZRBEH1s5uGX0EV9UDwrNXSach877145YoYS284TMKzinX
rUwTvkXXaN5QDOcFKkCsymrD3YZHEZrgxeBftE4KtqXePA/Yxeautr0hXNi4MMky
9N9uE70Z3MFq7pRoGhyah9I3DGTmoHgDjiXgoe1LuZVX8uBFSLFEY7zzvdcLY/9M
lfFe+aKNUdsTeQ==
-----END CERTIFICATE-----
Generated at Sat Oct 17 12:04:29 2026 by rpki-client