Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
File: qEOOrPTQZOh6drtGLTtLLMOFikw.mft (raw, json)
Hash identifier: vK96ki5xXuEw+uf2BiXfvd86wXbCsfqTRAvFAmHP2Sw=
Subject key identifier: F2:04:86:74:EE:6D:CE:80:4B:D5:0B:0D:85:70:C0:E9:2E:72:5B:A6
Authority key identifier: A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
Certificate issuer: /CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Certificate serial: 01A17D737F8EC8B6EB5EF1DA6C349296ADD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
Manifest number: 1240
Signing time: Tue 27 Oct 2026 13:01:23 +0000
Manifest this update: Tue 27 Oct 2026 13:01:23 +0000
Manifest next update: Wed 28 Oct 2026 13:01:23 +0000
Files and hashes: 1: JONbkjOcThPFPe34Q68G6YG7CEA.roa (hash: PZVk2tUkIHhzZkYLKlXFtV0597wIzDAE7k654RC/+A4=)
2: X6SzNQXiBFFDJhBNdvMhCBPHFfQ.roa (hash: fQujnsKiKmQAa2eiIQn71F8Xhr3SmxLUUr/Q/pLfIgU=)
3: qEOOrPTQZOh6drtGLTtLLMOFikw.crl (hash: fGNIkjXxCBYzkLwP7NGL4/T5iXzu2Vm4k0vUCWnBPbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:7f:8e:c8:b6:eb:5e:f1:da:6c:34:92:96:ad:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8438eacf4d064e87a76bb462d3b4b2cc3858a4c
Validity
Not Before: Oct 27 13:01:23 2026 GMT
Not After : Oct 28 13:01:23 2026 GMT
Subject: CN=f2048674ee6dce804bd50b0d8570c0e92e725ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:31:9b:dd:c8:a2:5a:34:c5:ef:b9:27:cf:
45:e6:e6:d4:83:22:f9:86:e6:c2:ef:f9:34:dd:5d:
0e:3f:3b:d2:74:f4:63:c6:5f:ad:ee:22:43:b1:52:
3a:96:c5:42:c6:04:df:29:e8:32:a6:dd:8f:d9:f5:
22:44:86:20:91:8d:e5:40:1c:c0:f8:78:ea:46:57:
50:46:c2:24:8c:ba:c1:6b:86:54:fb:cc:e1:1a:8f:
42:92:89:b4:5d:5b:15:49:f4:d9:ca:d5:59:1a:06:
a0:59:57:72:24:ee:7a:3b:4b:d8:88:82:11:02:ad:
be:86:d0:98:5d:77:d4:4b:2a:a7:9d:10:40:3c:44:
71:d8:e5:e2:b4:6d:35:e4:51:82:68:80:7c:44:30:
1f:cb:2e:56:62:e3:8e:8b:1f:df:f1:52:ac:71:6b:
d3:59:93:a7:13:bd:84:c0:09:56:e2:20:60:8c:fa:
50:03:8c:2b:65:47:9f:d7:3a:f0:a2:94:15:30:b2:
1f:dc:76:01:e9:dc:5c:cb:3a:50:7f:b2:70:6e:b7:
c3:3d:92:fd:ab:b8:0a:af:a4:f8:59:b0:5c:cc:cf:
87:56:30:a2:93:24:cd:26:a7:cd:0d:79:0b:d9:c5:
cd:66:fb:82:52:ba:df:1c:7a:20:f5:ed:16:5a:68:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:04:86:74:EE:6D:CE:80:4B:D5:0B:0D:85:70:C0:E9:2E:72:5B:A6
X509v3 Authority Key Identifier:
keyid:A8:43:8E:AC:F4:D0:64:E8:7A:76:BB:46:2D:3B:4B:2C:C3:85:8A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEOOrPTQZOh6drtGLTtLLMOFikw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8e1122-8cb9-4872-8811-1c2800831c64/1/qEOOrPTQZOh6drtGLTtLLMOFikw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:00:ec:7f:f5:d1:32:f7:99:a0:84:67:42:44:e8:84:8b:b6:
c8:b2:c2:ec:52:99:85:ae:10:56:4e:b0:f1:3e:d1:fb:c5:f8:
c8:ad:79:e3:82:60:7f:3c:47:95:66:b5:7b:da:c0:a3:1d:24:
6b:3a:96:5a:b3:0a:d1:0e:3e:70:40:ad:a2:0e:89:ed:ac:ab:
dc:04:14:68:29:a5:f3:73:bd:48:a4:8d:d4:33:64:bc:26:f4:
f7:7f:98:cb:c5:e8:1e:bc:17:1c:94:e3:70:4e:05:a0:4b:86:
03:fe:7d:97:d0:df:4d:42:c6:4b:aa:9e:2b:1e:4e:00:3a:b0:
29:82:ec:bb:37:53:6e:4a:20:41:7a:be:d5:dd:c4:a2:4d:85:
68:bc:9d:5c:be:a1:91:30:dd:b2:9f:93:b3:9a:68:c2:b7:f0:
53:67:32:b4:58:df:ec:a4:91:a0:73:a7:60:bd:fd:7b:de:a0:
2e:78:cd:f7:88:ee:ac:5f:fa:af:1e:ff:c1:85:c8:ac:45:d1:
c7:20:29:cf:63:c1:64:51:b3:bf:b3:d3:77:de:05:d4:6b:a0:
41:f8:8a:f9:de:1e:d7:0c:e7:7e:69:7b:e8:fd:ed:e9:f0:e7:
e6:26:fa:b0:16:80:9a:10:88:0c:33:8d:68:77:dd:4e:5a:7d:
16:52:ed:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9c3+OyLbrXvHabDSSlq3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDM4ZWFjZjRkMDY0ZTg3YTc2YmI0NjJkM2I0YjJjYzM4
NThhNGMwHhcNMjYxMDI3MTMwMTIzWhcNMjYxMDI4MTMwMTIzWjAzMTEwLwYDVQQD
EyhmMjA0ODY3NGVlNmRjZTgwNGJkNTBiMGQ4NTcwYzBlOTJlNzI1YmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVIxm93Iolo0xe+5J89F5ubUgyL5
hubC7/k03V0OPzvSdPRjxl+t7iJDsVI6lsVCxgTfKegypt2P2fUiRIYgkY3lQBzA
+HjqRldQRsIkjLrBa4ZU+8zhGo9Ckom0XVsVSfTZytVZGgagWVdyJO56O0vYiIIR
Aq2+htCYXXfUSyqnnRBAPERx2OXitG015FGCaIB8RDAfyy5WYuOOix/f8VKscWvT
WZOnE72EwAlW4iBgjPpQA4wrZUef1zrwopQVMLIf3HYB6dxcyzpQf7JwbrfDPZL9
q7gKr6T4WbBczM+HVjCikyTNJqfNDXkL2cXNZvuCUrrfHHog9e0WWmjSKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIEhnTubc6AS9ULDYVwwOkuclumMB8GA1UdIwQY
MBaAFKhDjqz00GToena7Ri07SyzDhYpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEt
MWMyODAwODMxYzY0LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84ZTExMjItOGNiOS00ODcyLTg4MTEtMWMyODAwODMxYzY0
LzEvcUVPT3JQVFFaT2g2ZHJ0R0xUdExMTU9GaWt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0wDsf/XR
MveZoIRnQkTohIu2yLLC7FKZha4QVk6w8T7R+8X4yK1544JgfzxHlWa1e9rAox0k
azqWWrMK0Q4+cECtog6J7ayr3AQUaCml83O9SKSN1DNkvCb093+Yy8XoHrwXHJTj
cE4FoEuGA/59l9DfTULGS6qeKx5OADqwKYLsuzdTbkogQXq+1d3Eok2FaLydXL6h
kTDdsp+Ts5powrfwU2cytFjf7KSRoHOnYL39e96gLnjN94jurF/6rx7/wYXIrEXR
xyApz2PBZFGzv7PTd94F1GugQfiK+d4e1wznfml76P3t6fDn5ib6sBaAmhCIDDON
aHfdTlp9FlLtsQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:44:32 2026 by rpki-client