Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: pYES5TaKNQvXakoxNHPrdwqD440Pu5YPNbKjr8MV06Q=
Subject key identifier: C6:17:88:35:75:24:19:10:26:E1:52:5F:DE:E5:48:47:78:9B:44:BB
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 01A14B74409F07C2244A2241DB2A39F925CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 0710
Signing time: Sat 17 Oct 2026 20:01:12 +0000
Manifest this update: Sat 17 Oct 2026 20:01:12 +0000
Manifest next update: Sun 18 Oct 2026 20:01:12 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: cmTKK3HMPWULuVYdz2diXgHylEyh20Gmr8ZuZHCei/I=)
2: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (hash: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:74:40:9f:07:c2:24:4a:22:41:db:2a:39:f9:25:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Oct 17 20:01:12 2026 GMT
Not After : Oct 18 20:01:12 2026 GMT
Subject: CN=c61788357524191026e1525fdee54847789b44bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0e:a7:8c:7c:ba:80:91:27:ac:70:72:19:94:
0a:c1:8d:ca:10:3a:1f:1d:28:b4:30:05:bc:5b:dd:
b5:df:cf:6a:21:05:89:97:4f:7f:01:99:fa:2f:f1:
c9:8d:84:c2:a8:a5:87:33:0b:c0:5c:4d:a7:d8:d1:
83:3c:46:ff:3a:0c:d1:cd:7b:51:f4:b5:bc:8e:53:
31:28:36:0d:df:f8:35:d6:e3:17:90:9e:00:c1:6b:
83:7d:ee:ee:08:ca:2f:2f:00:66:7b:4e:6a:47:8b:
7d:e3:88:04:67:09:80:c0:23:80:1c:6d:f6:f3:de:
34:ac:d0:da:c2:eb:85:0b:e3:6b:fa:86:d9:c8:d4:
d0:6b:2f:69:e0:5a:87:fb:46:28:51:68:a3:39:26:
bc:c5:23:c8:ef:a0:d4:ff:cb:aa:df:a4:64:73:40:
6f:33:8c:20:11:53:1f:6b:59:de:98:5e:aa:6e:c8:
63:5c:86:08:44:5b:cc:37:ca:b8:39:53:66:de:a1:
cb:36:41:bb:5d:b8:13:93:0e:ca:88:56:7c:ad:01:
e6:1a:2b:c9:01:8e:b3:b4:5f:cf:9d:e1:29:e6:61:
2d:5d:e6:84:95:79:bf:fb:e0:db:81:d6:73:af:7b:
ca:67:15:3d:56:a2:25:a3:99:8b:ee:cb:c7:c4:4a:
1d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:17:88:35:75:24:19:10:26:E1:52:5F:DE:E5:48:47:78:9B:44:BB
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8d:93:71:a4:fa:64:9b:34:f6:6a:7f:c1:9a:df:1b:1a:02:
00:58:8b:15:e7:6e:37:b6:b3:2f:56:7c:45:71:16:13:cb:d1:
54:47:01:56:01:4d:da:6f:2f:29:f1:b4:2f:a7:c4:95:c8:39:
de:6c:be:a5:2e:40:12:99:e1:8d:a8:2d:db:1e:5a:a5:9d:eb:
a0:38:d2:1f:d6:2f:9e:39:dc:ec:43:a5:a4:86:e9:d7:c3:38:
59:d3:79:2f:de:15:3c:53:fd:58:76:46:51:2f:46:a4:87:8b:
17:e7:43:1a:6d:34:ee:cf:c8:16:c0:0f:38:74:97:0e:71:e8:
8c:25:5c:42:e2:bb:9a:32:66:60:01:fb:93:00:01:7f:34:0b:
38:17:44:39:a1:dc:af:e3:59:bd:c0:c4:50:a6:94:58:26:4b:
0c:54:63:ca:1a:04:27:51:e3:6a:9d:2a:ec:35:1a:41:00:d6:
f8:18:66:65:95:b5:25:3c:ed:2d:54:86:26:1c:20:53:2a:11:
fe:37:26:0c:d8:95:cf:42:49:5b:40:0b:41:ec:51:2b:b8:f6:
8d:72:58:14:6c:99:e7:3c:38:6d:07:56:7a:82:f4:2f:bb:09:
3d:22:ed:0f:ef:33:a6:02:8a:3f:84:61:2f:c2:f8:cf:a4:33:
82:ca:d3:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLdECfB8IkSiJB2yo5+SXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTVjYTE1YmMyM2MzMjVmMTM0MWU5ODg5ZDg1OGI4ZWQ3
NmQ3NGUwHhcNMjYxMDE3MjAwMTEyWhcNMjYxMDE4MjAwMTEyWjAzMTEwLwYDVQQD
EyhjNjE3ODgzNTc1MjQxOTEwMjZlMTUyNWZkZWU1NDg0Nzc4OWI0NGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA6njHy6gJEnrHByGZQKwY3KEDof
HSi0MAW8W921389qIQWJl09/AZn6L/HJjYTCqKWHMwvAXE2n2NGDPEb/OgzRzXtR
9LW8jlMxKDYN3/g11uMXkJ4AwWuDfe7uCMovLwBme05qR4t944gEZwmAwCOAHG32
8940rNDawuuFC+Nr+obZyNTQay9p4FqH+0YoUWijOSa8xSPI76DU/8uq36Rkc0Bv
M4wgEVMfa1nemF6qbshjXIYIRFvMN8q4OVNm3qHLNkG7XbgTkw7KiFZ8rQHmGivJ
AY6ztF/PneEp5mEtXeaElXm/++DbgdZzr3vKZxU9VqIlo5mL7svHxEodSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYXiDV1JBkQJuFSX97lSEd4m0S7MB8GA1UdIwQY
MBaAFEOlyhW8I8Ml8TQemInYWLjtdtdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgt
YTk2ZTI2MTAzY2VlLzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgtYTk2ZTI2MTAzY2Vl
LzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOo2TcaT6
ZJs09mp/wZrfGxoCAFiLFeduN7azL1Z8RXEWE8vRVEcBVgFN2m8vKfG0L6fElcg5
3my+pS5AEpnhjagt2x5apZ3roDjSH9Yvnjnc7EOlpIbp18M4WdN5L94VPFP9WHZG
US9GpIeLF+dDGm007s/IFsAPOHSXDnHojCVcQuK7mjJmYAH7kwABfzQLOBdEOaHc
r+NZvcDEUKaUWCZLDFRjyhoEJ1Hjap0q7DUaQQDW+BhmZZW1JTztLVSGJhwgUyoR
/jcmDNiVz0JJW0ALQexRK7j2jXJYFGyZ5zw4bQdWeoL0L7sJPSLtD+8zpgKKP4Rh
L8L4z6QzgsrT6w==
-----END CERTIFICATE-----
Generated at Sat Oct 17 22:29:25 2026 by rpki-client