Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
File: qDOwgB1A0FhJBy4vyBITsCXSorw.mft (raw, json)
Hash identifier: hpuK0w+dNb85Idx9ELSOwbHo/xeukCBe+9hoA28Zbkw=
Subject key identifier: 7F:C6:C5:ED:5A:4E:BF:D8:43:EC:F8:C4:D7:40:55:5D:5B:7C:3A:2D
Authority key identifier: A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
Certificate issuer: /CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Certificate serial: 01A16E6EE9EC9DBE0ADF4D97167BB7F5DB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
Manifest number: 0471
Signing time: Sat 24 Oct 2026 15:02:04 +0000
Manifest this update: Sat 24 Oct 2026 15:02:04 +0000
Manifest next update: Sun 25 Oct 2026 15:02:04 +0000
Files and hashes: 1: 8dx6CDeeDv1yQZPzxZW_CCsiWuI.roa (hash: d7H5FvAS5k9Xu18WJ58VOwYw00U/ixBu9RyNPrcPus0=)
2: qDOwgB1A0FhJBy4vyBITsCXSorw.crl (hash: ikfH8r1w0kiPFCCY4e8iSdpdWdRuBRsSps0OiN2Oqwc=)
3: vZtaog6rpuNltteEkdUJlHMVrcw.roa (hash: 7RtaWZDq5AUONnDyPCbjKsuXwOlICNTJNhflkjZkwLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:6e:e9:ec:9d:be:0a:df:4d:97:16:7b:b7:f5:db:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a833b0801d40d05849072e2fc81213b025d2a2bc
Validity
Not Before: Oct 24 15:02:04 2026 GMT
Not After : Oct 25 15:02:04 2026 GMT
Subject: CN=7fc6c5ed5a4ebfd843ecf8c4d740555d5b7c3a2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:1c:dc:da:ea:d3:40:50:eb:3c:26:bb:06:
8c:03:47:23:66:5e:fa:75:1f:64:d9:cb:45:dd:b2:
c6:99:07:b8:f4:2d:1a:3d:6c:19:f7:dc:96:23:51:
4e:ab:87:c0:18:5b:1d:c2:15:2e:8c:42:f2:56:35:
9f:4f:f8:1d:c7:bc:fc:2d:88:71:77:29:0b:ba:ba:
3e:69:8a:b6:21:9b:4e:cb:bc:61:ea:58:7d:da:3f:
d7:bc:26:cf:d9:48:fd:47:63:77:87:84:21:5a:63:
3a:e2:6c:d4:56:08:a2:8c:d7:61:e1:1a:b9:fd:44:
f7:ea:de:be:5e:a6:4a:ea:8a:49:b3:13:80:4a:09:
0b:32:42:41:27:b2:26:4f:b0:59:16:50:68:f3:6b:
22:2d:5a:c4:40:12:50:e5:6d:55:c6:c3:d3:44:e3:
82:62:8b:a8:ee:fe:33:e5:1f:5c:c0:d1:18:89:dd:
f8:a0:a7:73:0a:f4:35:63:24:91:44:19:21:e0:2a:
52:4d:97:ec:c7:d0:2c:7f:1f:0f:85:86:ba:e2:3e:
d2:49:37:09:23:b6:59:c1:16:7a:69:24:81:51:50:
af:e7:ac:97:3c:69:9b:d8:b9:c7:50:a5:75:97:ec:
55:22:7e:71:a3:e4:b3:10:8e:cc:35:cf:d9:08:20:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:C5:ED:5A:4E:BF:D8:43:EC:F8:C4:D7:40:55:5D:5B:7C:3A:2D
X509v3 Authority Key Identifier:
keyid:A8:33:B0:80:1D:40:D0:58:49:07:2E:2F:C8:12:13:B0:25:D2:A2:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDOwgB1A0FhJBy4vyBITsCXSorw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f42ab1-1089-4b14-b2f9-17bf066da4c5/1/qDOwgB1A0FhJBy4vyBITsCXSorw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:6f:f8:10:a4:f7:31:53:39:e6:82:e9:e9:79:15:d7:1f:2c:
5e:de:36:7f:20:54:49:54:f9:ae:de:99:d1:e0:ce:1a:1c:2b:
87:eb:ac:3d:35:b8:d8:1d:33:99:8d:94:d4:9f:7f:83:61:82:
0d:ed:c1:13:c5:60:ee:1a:d3:61:e8:99:cb:d7:ec:ca:a5:a3:
d5:df:b7:50:52:3c:f8:11:a1:d1:4e:0f:23:4b:40:33:5b:48:
2b:e6:f9:d2:22:74:02:ce:0d:61:cb:9e:2d:d3:81:f3:24:f7:
3f:0e:91:df:10:02:5d:63:69:e2:15:fe:f8:c6:e6:6c:ab:e3:
27:9c:d3:6a:b0:33:50:1f:c6:14:cb:1a:45:fd:d0:74:36:92:
b6:69:18:3a:79:ff:9d:5d:20:a6:e5:02:30:02:b3:13:57:2d:
21:21:a7:6d:a9:8d:85:60:9f:66:23:8f:17:b1:91:14:aa:88:
82:6c:d6:23:14:4a:b9:7d:9b:c8:30:2f:66:a5:f5:34:06:ed:
35:32:fa:26:3c:2f:47:c8:f5:44:f3:52:d1:4a:48:14:b6:0c:
e3:d4:87:36:82:84:a4:56:61:38:84:07:62:c0:6f:98:b0:f6:
75:31:6e:41:f8:f8:df:d5:e7:ef:79:50:7d:2f:7a:14:3e:b4:
f3:f7:df:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFubunsnb4K302XFnu39dtTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MzNiMDgwMWQ0MGQwNTg0OTA3MmUyZmM4MTIxM2IwMjVk
MmEyYmMwHhcNMjYxMDI0MTUwMjA0WhcNMjYxMDI1MTUwMjA0WjAzMTEwLwYDVQQD
Eyg3ZmM2YzVlZDVhNGViZmQ4NDNlY2Y4YzRkNzQwNTU1ZDViN2MzYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdgc3Nrq00BQ6zwmuwaMA0cjZl76
dR9k2ctF3bLGmQe49C0aPWwZ99yWI1FOq4fAGFsdwhUujELyVjWfT/gdx7z8LYhx
dykLuro+aYq2IZtOy7xh6lh92j/XvCbP2Uj9R2N3h4QhWmM64mzUVgiijNdh4Rq5
/UT36t6+XqZK6opJsxOASgkLMkJBJ7ImT7BZFlBo82siLVrEQBJQ5W1VxsPTROOC
Youo7v4z5R9cwNEYid34oKdzCvQ1YySRRBkh4CpSTZfsx9Asfx8PhYa64j7SSTcJ
I7ZZwRZ6aSSBUVCv56yXPGmb2LnHUKV1l+xVIn5xo+SzEI7MNc/ZCCCGKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/Gxe1aTr/YQ+z4xNdAVV1bfDotMB8GA1UdIwQY
MBaAFKgzsIAdQNBYSQcuL8gSE7Al0qK8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mNDJhYjEtMTA4OS00YjE0LWIyZjkt
MTdiZjA2NmRhNGM1LzEvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9mNDJhYjEtMTA4OS00YjE0LWIyZjktMTdiZjA2NmRhNGM1
LzEvcURPd2dCMUEwRmhKQnk0dnlCSVRzQ1hTb3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAm/4EKT3
MVM55oLp6XkV1x8sXt42fyBUSVT5rt6Z0eDOGhwrh+usPTW42B0zmY2U1J9/g2GC
De3BE8Vg7hrTYeiZy9fsyqWj1d+3UFI8+BGh0U4PI0tAM1tIK+b50iJ0As4NYcue
LdOB8yT3Pw6R3xACXWNp4hX++MbmbKvjJ5zTarAzUB/GFMsaRf3QdDaStmkYOnn/
nV0gpuUCMAKzE1ctISGnbamNhWCfZiOPF7GRFKqIgmzWIxRKuX2byDAvZqX1NAbt
NTL6JjwvR8j1RPNS0UpIFLYM49SHNoKEpFZhOIQHYsBvmLD2dTFuQfj439Xn73lQ
fS96FD608/ffag==
-----END CERTIFICATE-----
Generated at Sun Oct 25 01:08:31 2026 by rpki-client