Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
File: q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft (raw, json)
Hash identifier: oY9SSNQy5z3rs8G+4kuIpIzFZ2ox3NZL03gH6qbeVIE=
Subject key identifier: 96:FB:6C:31:43:3E:40:02:B7:1C:84:4E:20:08:7A:31:ED:81:D7:9B
Authority key identifier: AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
Certificate issuer: /CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Certificate serial: 01A08E32717AEDE6D6860D3C1B23E1433E7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
Manifest number: 1A4C
Signing time: Fri 11 Sep 2026 02:01:05 +0000
Manifest this update: Fri 11 Sep 2026 02:01:05 +0000
Manifest next update: Sat 12 Sep 2026 02:01:05 +0000
Files and hashes: 1: 8TsXg-XUAk1JE35W5iwCEn8OxHY.roa (hash: wgiKwTO+cQ6amDFPE6cljiPgi+iGvWx/hXbXkD8CRAQ=)
2: q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl (hash: +p4n5lR4MvJR4kKr3jc9quKnXNMV1qF+cxHF7Zzb7EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:32:71:7a:ed:e6:d6:86:0d:3c:1b:23:e1:43:3e:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc45b658b1ec0fdeb459e6ff2577db8ca6a9330
Validity
Not Before: Sep 11 02:01:05 2026 GMT
Not After : Sep 12 02:01:05 2026 GMT
Subject: CN=96fb6c31433e4002b71c844e20087a31ed81d79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:63:ff:c0:24:75:73:a0:21:fe:bc:5e:6c:d3:
91:a7:2c:95:0b:32:46:11:ba:47:ec:ef:1b:1b:4b:
a8:5c:73:6a:36:dd:8b:29:24:eb:dd:c8:0a:f7:4a:
0c:bd:d9:ef:2b:25:be:f1:1f:55:85:78:84:71:c3:
a8:93:c1:9b:e9:b4:e9:16:16:aa:93:d8:52:6f:69:
29:30:5e:ce:fe:b4:9a:45:9b:23:21:eb:4e:d0:2d:
af:32:3e:5e:b0:b9:a9:71:44:04:76:6e:b7:1a:60:
d8:ca:d4:56:ed:32:18:eb:f5:70:71:95:2e:b7:66:
72:7d:cc:ba:ce:d8:7e:11:e1:ab:47:4d:dd:ba:7b:
f4:46:ec:14:d3:43:dd:ee:9d:7f:33:fb:88:b3:8f:
97:22:d8:b3:da:2c:76:29:34:a3:75:7e:34:c6:58:
a1:a2:af:10:8f:d1:68:57:91:8a:d3:97:e3:a1:08:
25:b6:37:d1:18:7a:a9:47:6b:27:36:67:f0:6b:df:
15:4a:d1:d0:12:23:23:a7:1b:68:ab:84:91:b4:60:
6f:40:f4:fd:5d:d6:c6:8d:10:7d:4e:b8:61:03:4c:
99:24:c2:47:83:f6:c2:ad:c2:77:8a:36:f4:d8:53:
c5:8f:c0:0a:b9:f8:e9:95:c8:64:1e:e0:fb:b9:bc:
49:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FB:6C:31:43:3E:40:02:B7:1C:84:4E:20:08:7A:31:ED:81:D7:9B
X509v3 Authority Key Identifier:
keyid:AB:C4:5B:65:8B:1E:C0:FD:EB:45:9E:6F:F2:57:7D:B8:CA:6A:93:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8RbZYsewP3rRZ5v8ld9uMpqkzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c5c1b3-e5ca-4a83-8390-917933b1502e/1/q8RbZYsewP3rRZ5v8ld9uMpqkzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e7:72:97:ee:c4:9a:24:53:23:1c:15:b7:46:e5:c3:87:bf:
b3:fb:96:00:bb:b2:5f:86:b2:24:e6:4a:31:00:56:45:ac:a7:
4c:06:d0:d0:66:87:d5:79:e9:85:da:41:c8:9d:d8:dd:e1:f6:
b0:15:a6:09:da:02:9d:d2:ff:ea:f3:22:21:e2:78:54:20:2c:
69:fe:1a:42:dd:9d:09:67:88:82:39:7f:1e:24:7a:39:44:71:
98:38:9c:33:7e:db:0a:80:9d:91:5c:d9:50:64:47:eb:a3:c3:
94:aa:35:85:19:a9:0c:f2:99:fe:be:17:3a:59:95:0b:68:6a:
f3:75:e7:5b:47:30:5a:32:d4:aa:fc:51:a0:c6:6a:2c:f2:86:
66:de:21:ed:66:66:44:c9:4b:09:6b:8d:07:cc:3f:eb:dc:1a:
0b:97:b9:3e:18:94:8e:f5:2d:d5:ba:da:86:83:36:64:a3:fd:
15:ad:ae:2b:54:dd:e5:dd:e0:72:88:04:6e:ec:5c:73:3c:02:
a7:0a:f2:ce:75:27:e8:85:38:af:8f:75:ab:be:7e:4a:99:3a:
e3:2a:8c:dc:b6:56:70:ce:d2:93:35:f0:b3:1f:49:e0:e2:7c:
14:e2:3d:0b:59:ad:60:9a:0e:84:55:11:43:f5:bc:4f:b1:8a:
1b:d4:27:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCOMnF67ebWhg08GyPhQz57MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYzQ1YjY1OGIxZWMwZmRlYjQ1OWU2ZmYyNTc3ZGI4Y2E2
YTkzMzAwHhcNMjYwOTExMDIwMTA1WhcNMjYwOTEyMDIwMTA1WjAzMTEwLwYDVQQD
Eyg5NmZiNmMzMTQzM2U0MDAyYjcxYzg0NGUyMDA4N2EzMWVkODFkNzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WP/wCR1c6Ah/rxebNORpyyVCzJG
EbpH7O8bG0uoXHNqNt2LKSTr3cgK90oMvdnvKyW+8R9VhXiEccOok8Gb6bTpFhaq
k9hSb2kpMF7O/rSaRZsjIetO0C2vMj5esLmpcUQEdm63GmDYytRW7TIY6/VwcZUu
t2Zyfcy6zth+EeGrR03dunv0RuwU00Pd7p1/M/uIs4+XItiz2ix2KTSjdX40xlih
oq8Qj9FoV5GK05fjoQgltjfRGHqpR2snNmfwa98VStHQEiMjpxtoq4SRtGBvQPT9
XdbGjRB9TrhhA0yZJMJHg/bCrcJ3ijb02FPFj8AKufjplchkHuD7ubxJ8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJb7bDFDPkACtxyETiAIejHtgdebMB8GA1UdIwQY
MBaAFKvEW2WLHsD960Web/JXfbjKapMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jNWMxYjMtZTVjYS00YTgzLTgzOTAt
OTE3OTMzYjE1MDJlLzEvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jNWMxYjMtZTVjYS00YTgzLTgzOTAtOTE3OTMzYjE1MDJl
LzEvcThSYlpZc2V3UDNyUlo1djhsZDl1TXBxa3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOdyl+7E
miRTIxwVt0blw4e/s/uWALuyX4ayJOZKMQBWRaynTAbQ0GaH1XnphdpByJ3Y3eH2
sBWmCdoCndL/6vMiIeJ4VCAsaf4aQt2dCWeIgjl/HiR6OURxmDicM37bCoCdkVzZ
UGRH66PDlKo1hRmpDPKZ/r4XOlmVC2hq83XnW0cwWjLUqvxRoMZqLPKGZt4h7WZm
RMlLCWuNB8w/69waC5e5PhiUjvUt1brahoM2ZKP9Fa2uK1Td5d3gcogEbuxcczwC
pwryznUn6IU4r491q75+Spk64yqM3LZWcM7SkzXwsx9J4OJ8FOI9C1mtYJoOhFUR
Q/W8T7GKG9QnAQ==
-----END CERTIFICATE-----
Generated at Fri Sep 11 11:27:42 2026 by rpki-client