Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
File: a-qEqFfnGtEjL5o2v0j40kqaA_s.mft (raw, json)
Hash identifier: MPbmX6ps+hIUf9Kl8XKosTl9pHBM2iTpsHwhZo4JBJE=
Subject key identifier: DD:CB:C3:B7:89:FF:84:05:C9:3D:1D:4B:6B:8F:B0:0B:A0:FA:D5:B2
Authority key identifier: 6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
Certificate issuer: /CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Certificate serial: 01A17A03C540E8DCDAC42EAB0253EA5B6035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:00:29 +0000
Manifest this update: Mon 26 Oct 2026 21:00:29 +0000
Manifest next update: Tue 27 Oct 2026 21:00:29 +0000
Files and hashes: 1: 3VtMLjenBkjVF4KJLk56mIMtUJI.roa (hash: JPKF0zVe4MNxHQFbONgwYXIrgpkaeNZgOLOSWhU/gyE=)
2: a-qEqFfnGtEjL5o2v0j40kqaA_s.crl (hash: msWetpBG8gpUdBEJhzUAFrYr8jPiN9QG2pPRQ+Dehb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:c5:40:e8:dc:da:c4:2e:ab:02:53:ea:5b:60:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Validity
Not Before: Oct 26 21:00:29 2026 GMT
Not After : Oct 27 21:00:29 2026 GMT
Subject: CN=ddcbc3b789ff8405c93d1d4b6b8fb00ba0fad5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:25:eb:61:99:1c:ff:e8:b8:39:82:4a:b6:
1f:0e:c7:d1:0c:5a:e2:d6:12:da:65:38:20:cb:7b:
8c:02:56:2a:11:9e:a8:d9:8a:98:a8:6d:03:de:09:
a8:32:04:22:7a:d6:71:d9:bd:9d:02:ee:05:d2:ea:
ca:17:8c:08:1e:1e:c6:21:3b:94:7b:52:b2:ee:88:
48:70:83:09:7e:22:65:f7:9d:5e:d3:e7:43:e7:8e:
c4:f9:ff:3e:1d:e5:8d:ee:b5:cd:5e:52:cd:aa:56:
63:5e:89:8d:76:51:7f:fd:fa:24:08:1f:9e:4f:bd:
90:ce:62:a8:1e:20:c8:1c:40:64:4e:7c:1a:6e:6e:
e7:df:6c:eb:31:05:40:f1:04:e1:8f:67:ff:71:a6:
86:00:4c:e9:f9:2c:e8:36:01:11:5b:91:d2:6b:20:
64:9d:64:df:8f:cd:b8:28:dc:9a:1e:43:ae:5e:0e:
f7:76:47:37:b3:bf:9d:08:84:6b:3f:a8:19:dd:e7:
2f:a7:58:94:e9:6b:c6:79:be:79:06:1f:19:97:d0:
9c:bd:21:2f:60:0a:c0:b4:b7:12:27:43:b2:14:35:
ee:ae:f7:68:a8:bc:cf:78:57:08:3e:c3:42:d3:d1:
95:92:c5:fb:7c:fd:1a:96:95:7d:e9:4c:da:66:7e:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CB:C3:B7:89:FF:84:05:C9:3D:1D:4B:6B:8F:B0:0B:A0:FA:D5:B2
X509v3 Authority Key Identifier:
keyid:6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5f:bb:56:00:55:bf:0e:90:7f:9a:04:ab:32:57:7d:33:de:
38:22:08:47:58:e4:a1:16:44:25:09:d6:b8:d2:1a:c3:a1:13:
11:09:0f:89:3e:5a:9d:85:7f:01:4a:93:0a:41:7d:f8:4d:ba:
a5:ba:28:3e:da:86:af:be:86:e1:88:84:33:c8:1a:15:1f:be:
42:7d:90:6a:7d:0c:35:5b:f3:c2:71:d5:f6:f8:64:45:5a:e0:
b6:a0:72:56:1d:d9:5c:b2:97:3e:70:d3:0c:19:d7:9b:c9:03:
3f:21:7f:97:24:a8:23:07:e2:4a:be:3c:e4:59:f4:15:39:89:
fa:05:1f:f4:73:2c:3d:b7:20:0b:84:04:ed:61:47:f8:8a:84:
b2:fd:eb:25:ed:ea:00:7b:32:0c:ba:23:be:7e:11:60:18:87:
dc:dc:34:67:b1:6f:a2:2e:7f:5d:31:be:49:ea:bc:30:8f:a3:
33:ac:49:51:63:da:5b:ab:9c:b9:b3:62:8e:ef:8b:dd:7e:28:
0e:df:a1:8a:6e:22:b8:88:a9:34:43:5d:8e:b3:2e:61:79:bb:
4b:2d:72:41:c4:85:f5:93:d7:00:f2:94:45:09:d7:49:6e:ad:
c0:66:74:5e:9b:54:cb:ff:6d:bf:98:35:9a:20:d6:2f:c0:7d:
ec:a5:cf:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6A8VA6NzaxC6rAlPqW2A1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWE4NGE4NTdlNzFhZDEyMzJmOWEzNmJmNDhmOGQyNGE5
YTAzZmIwHhcNMjYxMDI2MjEwMDI5WhcNMjYxMDI3MjEwMDI5WjAzMTEwLwYDVQQD
EyhkZGNiYzNiNzg5ZmY4NDA1YzkzZDFkNGI2YjhmYjAwYmEwZmFkNWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfIl62GZHP/ouDmCSrYfDsfRDFri
1hLaZTggy3uMAlYqEZ6o2YqYqG0D3gmoMgQietZx2b2dAu4F0urKF4wIHh7GITuU
e1Ky7ohIcIMJfiJl951e0+dD547E+f8+HeWN7rXNXlLNqlZjXomNdlF//fokCB+e
T72QzmKoHiDIHEBkTnwabm7n32zrMQVA8QThj2f/caaGAEzp+SzoNgERW5HSayBk
nWTfj824KNyaHkOuXg73dkc3s7+dCIRrP6gZ3ecvp1iU6WvGeb55Bh8Zl9CcvSEv
YArAtLcSJ0OyFDXurvdoqLzPeFcIPsNC09GVksX7fP0alpV96UzaZn7knwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3Lw7eJ/4QFyT0dS2uPsAug+tWyMB8GA1UdIwQY
MBaAFGvqhKhX5xrRIy+aNr9I+NJKmgP7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS1xRXFGZm5HdEVqTDVvMnYwajQwa3FhQV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEt
YTY1ZmJkODMwMzU4LzEvYS1xRXFGZm5HdEVqTDVvMnYwajQwa3FhQV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9jMzI4OWYtNzZlOS00ODkzLTljZDEtYTY1ZmJkODMwMzU4
LzEvYS1xRXFGZm5HdEVqTDVvMnYwajQwa3FhQV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1+7VgBV
vw6Qf5oEqzJXfTPeOCIIR1jkoRZEJQnWuNIaw6ETEQkPiT5anYV/AUqTCkF9+E26
pbooPtqGr76G4YiEM8gaFR++Qn2Qan0MNVvzwnHV9vhkRVrgtqByVh3ZXLKXPnDT
DBnXm8kDPyF/lySoIwfiSr485Fn0FTmJ+gUf9HMsPbcgC4QE7WFH+IqEsv3rJe3q
AHsyDLojvn4RYBiH3Nw0Z7Fvoi5/XTG+Seq8MI+jM6xJUWPaW6ucubNiju+L3X4o
Dt+him4iuIipNENdjrMuYXm7Sy1yQcSF9ZPXAPKURQnXSW6twGZ0XptUy/9tv5g1
miDWL8B97KXPIg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 01:49:20 2026 by rpki-client