Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: iSWaV1B+OLUqi8Y17B5xOyt3Zu1oY1VMDg/YlVrr9jM=
Subject key identifier: 81:39:4E:9B:00:42:CB:0A:23:B0:F7:FA:4B:D6:79:54:89:7D:1D:AF
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 019E318594926244274A2C69657E5680BC31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 108B
Signing time: Sat 16 May 2026 16:01:38 +0000
Manifest this update: Sat 16 May 2026 16:01:38 +0000
Manifest next update: Sun 17 May 2026 16:01:38 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: S6Z6kv3ORz5wXVN/9Sgcrw9BSr+Q/CtvvIE4dLWFPug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:85:94:92:62:44:27:4a:2c:69:65:7e:56:80:bc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: May 16 16:01:38 2026 GMT
Not After : May 17 16:01:38 2026 GMT
Subject: CN=81394e9b0042cb0a23b0f7fa4bd67954897d1daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0d:ba:85:3b:a4:bb:df:83:22:c4:71:d2:6c:
61:9c:59:46:40:7d:ab:c8:8e:ac:52:ee:a6:70:cc:
5c:3a:18:ec:ea:f1:5e:25:2b:d2:1c:29:5b:09:01:
48:de:45:32:8c:70:c9:90:6d:27:9a:55:10:14:5d:
fc:51:58:99:27:17:72:fa:5b:27:51:64:3d:f7:44:
da:a4:89:d5:1f:8e:f4:24:f5:7e:8d:d6:33:c2:9c:
16:cb:5a:d0:bf:67:64:15:e6:01:5e:70:43:ee:6f:
58:79:bf:e7:0a:76:96:b1:97:d3:db:a9:7a:d7:9e:
80:76:74:93:f2:fd:bb:da:cf:b4:93:d0:dc:bb:17:
23:18:11:7e:9d:44:1c:f3:92:c9:6f:7c:29:81:6e:
56:98:ad:5b:8f:26:b9:30:cb:f7:11:84:47:78:a5:
21:92:97:07:8b:8d:5d:07:3a:86:e6:bd:d5:c9:af:
f3:db:6d:45:18:b5:92:a1:8e:3b:b8:ba:97:2e:1f:
23:a0:68:df:7b:63:70:b9:66:13:bb:4f:c6:44:71:
07:05:ad:8d:b2:93:e5:30:8e:f7:7f:3d:35:22:b9:
bd:7f:94:89:6b:84:0d:03:62:2d:a1:71:08:22:a1:
e9:5d:e1:5c:b8:55:d6:28:82:0b:ef:83:15:c6:15:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:39:4E:9B:00:42:CB:0A:23:B0:F7:FA:4B:D6:79:54:89:7D:1D:AF
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:de:e6:26:40:86:02:b1:a4:7b:44:ba:c7:15:2e:40:3a:e2:
93:7a:d0:e2:ef:a2:40:0d:a6:3b:f8:23:8f:f8:50:84:8c:6e:
6b:e9:1c:a9:4f:1f:e5:5d:1b:c3:13:41:c9:57:51:5e:50:69:
c8:b9:a1:8e:d1:7e:b0:f7:e1:95:35:c1:de:c3:9a:50:12:75:
c9:a9:3b:b6:09:18:b1:37:66:1f:c8:29:c3:27:56:c8:6d:05:
7d:e0:6b:a9:87:3d:0d:59:74:18:d2:2f:4d:13:20:7c:91:94:
a2:ba:94:61:5f:ed:41:8d:b7:c6:d5:c5:77:17:b0:c5:4e:2d:
ad:ed:32:15:18:76:a6:c8:38:56:57:06:b0:25:af:5a:b6:24:
6f:61:fd:1e:3a:cc:0a:f9:83:48:17:69:31:fc:79:57:ec:27:
68:28:a1:00:a0:0f:da:38:9f:f6:01:d2:be:bd:fa:bc:0d:62:
e4:97:19:18:af:fc:b1:7e:4d:e1:49:6d:0c:2f:e6:c1:d8:3c:
a0:62:05:e2:e5:51:05:29:04:6d:f4:07:da:c5:b3:86:b5:57:
27:1a:ce:d8:6a:e8:0d:cd:20:81:6a:38:8b:5c:a2:d5:9a:de:
47:25:ba:8f:ca:ea:72:2c:c6:d8:03:24:95:74:e2:36:74:8b:
76:be:e9:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4xhZSSYkQnSixpZX5WgLwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDM4ZWFjZjRkMDY0ZTg3YTc2YmI0NjJkM2I0YjJjYzM4
NThhNGMwHhcNMjYwNTE2MTYwMTM4WhcNMjYwNTE3MTYwMTM4WjAzMTEwLwYDVQQD
Eyg4MTM5NGU5YjAwNDJjYjBhMjNiMGY3ZmE0YmQ2Nzk1NDg5N2QxZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg26hTuku9+DIsRx0mxhnFlGQH2r
yI6sUu6mcMxcOhjs6vFeJSvSHClbCQFI3kUyjHDJkG0nmlUQFF38UViZJxdy+lsn
UWQ990TapInVH470JPV+jdYzwpwWy1rQv2dkFeYBXnBD7m9Yeb/nCnaWsZfT26l6
156AdnST8v272s+0k9DcuxcjGBF+nUQc85LJb3wpgW5WmK1bjya5MMv3EYRHeKUh
kpcHi41dBzqG5r3Vya/z221FGLWSoY47uLqXLh8joGjfe2NwuWYTu0/GRHEHBa2N
spPlMI73fz01Irm9f5SJa4QNA2ItoXEIIqHpXeFcuFXWKIIL74MVxhWTYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIE5TpsAQssKI7D3+kvWeVSJfR2vMB8GA1UdIwQY
MBaAFKhDjqz00GToena7Ri07SyzDhYpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEt
MWMyODAwODMxYzY0LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEtMWMyODAwODMxYzY0
LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACt7mJkCG
ArGke0S6xxUuQDrik3rQ4u+iQA2mO/gjj/hQhIxua+kcqU8f5V0bwxNByVdRXlBp
yLmhjtF+sPfhlTXB3sOaUBJ1yak7tgkYsTdmH8gpwydWyG0FfeBrqYc9DVl0GNIv
TRMgfJGUorqUYV/tQY23xtXFdxewxU4tre0yFRh2psg4VlcGsCWvWrYkb2H9HjrM
CvmDSBdpMfx5V+wnaCihAKAP2jif9gHSvr36vA1i5JcZGK/8sX5N4UltDC/mwdg8
oGIF4uVRBSkEbfQH2sWzhrVXJxrO2GroDc0ggWo4i1yi1ZreRyW6j8rqcizG2AMk
lXTiNnSLdr7p7w==
-----END CERTIFICATE-----
Generated at Sat May 16 23:30:38 2026 by rpki-client