Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: NYvvVv5qtFe/1tUcupCPXc7B/rW/V5EarEMDT//dg7g=
Subject key identifier: 71:C6:B1:9F:31:52:D9:37:98:1C:1B:8C:1A:27:F0:A9:EF:36:3F:88
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 01A08AFA7AA857364451BC572156B29192A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 173D
Signing time: Thu 10 Sep 2026 11:01:06 +0000
Manifest this update: Thu 10 Sep 2026 11:01:06 +0000
Manifest next update: Fri 11 Sep 2026 11:01:06 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: oP2FgZs1GnAeAWOgCPgjKUTq6psuAKS8fqd/lSrGoX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:7a:a8:57:36:44:51:bc:57:21:56:b2:91:92:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Sep 10 11:01:06 2026 GMT
Not After : Sep 11 11:01:06 2026 GMT
Subject: CN=71c6b19f3152d937981c1b8c1a27f0a9ef363f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4e:af:87:ca:8f:61:dc:4f:3a:c2:1c:4d:19:
01:38:33:9c:cc:f8:d6:1f:f6:30:a2:8b:4d:6f:84:
49:52:5e:77:de:2b:1a:aa:ed:83:f6:8f:ff:13:4e:
2a:ae:89:8e:ec:27:2c:db:ec:12:3e:8f:13:a2:9e:
8c:9c:4b:91:08:30:8a:16:e3:de:f6:37:a9:3f:e3:
65:e5:7a:7b:1c:49:1d:f7:73:27:5f:15:2c:24:4f:
35:6a:16:0a:f3:14:0e:ec:39:e6:ab:fa:38:ad:39:
f2:06:e4:cc:c4:da:48:08:9c:bb:58:34:09:03:78:
80:24:7b:58:69:14:6e:fb:fc:c5:79:6f:55:74:3c:
fa:ab:df:46:cc:1d:5d:36:de:64:58:ad:f4:ec:3b:
99:c4:7a:2f:2c:03:f3:50:e6:d6:a3:94:8e:88:9b:
8e:7a:c5:e3:0d:3e:80:bb:19:88:f4:99:45:41:1b:
b5:f6:66:40:a3:f0:de:51:06:b6:82:88:a1:94:4e:
e2:4c:d6:4c:6f:fa:43:a4:07:e9:81:a8:ce:76:41:
f5:52:4e:c0:7c:c9:34:77:b3:5d:87:88:87:d1:df:
c8:eb:36:46:d9:a8:a3:ad:9d:73:80:8b:04:82:42:
44:7c:c7:24:be:72:84:2f:c5:b1:ea:64:9e:a4:0d:
4b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:B1:9F:31:52:D9:37:98:1C:1B:8C:1A:27:F0:A9:EF:36:3F:88
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d1:23:78:ec:4c:cc:fc:9c:04:ef:ca:cc:14:86:b1:ce:65:
2f:34:6e:a3:68:99:2e:82:fa:e4:9d:33:46:da:51:a7:ad:ac:
3f:01:a5:49:2f:75:87:7b:50:e1:35:99:03:b2:86:87:be:5d:
d4:ab:3f:8a:a2:f7:24:ba:17:42:8c:e2:34:12:99:97:68:f5:
c9:8c:8b:61:6d:17:78:6e:c0:57:a4:52:73:b8:53:79:da:bf:
66:ed:aa:b8:10:d8:36:7e:93:ea:01:ee:01:66:fe:3e:32:73:
20:2c:54:a1:60:d4:24:2f:9b:07:a8:64:dc:91:05:2d:fe:6c:
b7:ce:39:9a:8d:b1:0c:a5:bd:6c:c2:29:75:68:f9:5d:3d:71:
68:e8:c4:69:32:5d:59:ad:a9:ca:70:aa:32:a5:fe:c2:a7:31:
8e:a9:77:af:d5:e7:17:af:29:4a:68:25:8c:68:e5:ef:0a:1e:
4a:24:7c:3d:59:ee:3f:d7:ab:95:cf:bc:2c:2e:77:71:b4:1e:
2e:c5:71:d3:6f:08:40:73:24:98:93:ea:18:75:ae:1c:fa:f6:
cf:f2:e0:ff:07:3b:ae:b2:d4:42:37:bf:d5:43:fc:30:d2:65:
89:42:2f:f7:76:d8:39:12:1a:ab:b9:d9:83:18:92:c6:3b:9f:
b6:3f:de:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+nqoVzZEUbxXIVaykZKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjQyNDJjMTBlNDM4NTM3ZTE2OWFiMDAyYmY2YmU4MWZh
MmE1ZWQwHhcNMjYwOTEwMTEwMTA2WhcNMjYwOTExMTEwMTA2WjAzMTEwLwYDVQQD
Eyg3MWM2YjE5ZjMxNTJkOTM3OTgxYzFiOGMxYTI3ZjBhOWVmMzYzZjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k6vh8qPYdxPOsIcTRkBODOczPjW
H/YwootNb4RJUl533isaqu2D9o//E04qromO7Ccs2+wSPo8Top6MnEuRCDCKFuPe
9jepP+Nl5Xp7HEkd93MnXxUsJE81ahYK8xQO7Dnmq/o4rTnyBuTMxNpICJy7WDQJ
A3iAJHtYaRRu+/zFeW9VdDz6q99GzB1dNt5kWK307DuZxHovLAPzUObWo5SOiJuO
esXjDT6AuxmI9JlFQRu19mZAo/DeUQa2goihlE7iTNZMb/pDpAfpgajOdkH1Uk7A
fMk0d7Ndh4iH0d/I6zZG2aijrZ1zgIsEgkJEfMckvnKEL8Wx6mSepA1LBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHGsZ8xUtk3mBwbjBon8KnvNj+IMB8GA1UdIwQY
MBaAFK/0JCwQ5DhTfhaasAK/a+gfoqXtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMt
ZWU3YmEwZTlmN2NhLzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iOWEyODMtNWM4ZC00NjI4LTgwYmMtZWU3YmEwZTlmN2Nh
LzEvcl9Ra0xCRGtPRk4tRnBxd0FyOXI2Qi1pcGUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNEjeOxM
zPycBO/KzBSGsc5lLzRuo2iZLoL65J0zRtpRp62sPwGlSS91h3tQ4TWZA7KGh75d
1Ks/iqL3JLoXQoziNBKZl2j1yYyLYW0XeG7AV6RSc7hTedq/Zu2quBDYNn6T6gHu
AWb+PjJzICxUoWDUJC+bB6hk3JEFLf5st845mo2xDKW9bMIpdWj5XT1xaOjEaTJd
Wa2pynCqMqX+wqcxjql3r9XnF68pSmgljGjl7woeSiR8PVnuP9erlc+8LC53cbQe
LsVx028IQHMkmJPqGHWuHPr2z/Lg/wc7rrLUQje/1UP8MNJliUIv93bYORIaq7nZ
gxiSxjuftj/exw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:40:16 2026 by rpki-client