Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
File: qajkTlc8U8cZIxL8xyFQ0t43fW0.mft (raw, json)
Hash identifier: HNbhA6/eop+ty2WpTvee7XLfdsEI2giJeimd70iUXhQ=
Subject key identifier: 3D:44:CF:B7:72:BA:A9:68:04:28:DD:C5:84:BD:E6:EE:B6:DF:A4:4E
Authority key identifier: A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
Certificate issuer: /CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Certificate serial: 01A132C6B00D7B08C605B1B32CA360D46D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
Manifest number: 1AA5
Signing time: Tue 13 Oct 2026 01:00:44 +0000
Manifest this update: Tue 13 Oct 2026 01:00:44 +0000
Manifest next update: Wed 14 Oct 2026 01:00:44 +0000
Files and hashes: 1: hLY2--5SKTnZ1QC36Cf-E8Iq5ho.roa (hash: lfg0kzyvgHw2ZfZ5eS4nTJ7bYAVmeebrxL6dhvaG0Ms=)
2: qajkTlc8U8cZIxL8xyFQ0t43fW0.crl (hash: S94zezhAnqmwfsUYeqJFo6mqhPmCqDjl/d6Rer3YC5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:c6:b0:0d:7b:08:c6:05:b1:b3:2c:a3:60:d4:6d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a8e44e573c53c7192312fcc72150d2de377d6d
Validity
Not Before: Oct 13 01:00:44 2026 GMT
Not After : Oct 14 01:00:44 2026 GMT
Subject: CN=3d44cfb772baa9680428ddc584bde6eeb6dfa44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:d3:fa:a9:fc:25:29:46:18:52:ba:80:0d:
f6:30:42:fa:24:d8:1b:5a:68:55:b0:ed:ad:de:c3:
30:ec:e2:52:ce:0e:1b:23:f3:df:24:ee:88:54:a7:
2e:6e:fb:3c:53:d9:13:86:08:12:ac:a0:9f:95:e1:
19:d3:21:7e:4d:fa:c8:2f:d4:04:2a:d2:9e:3c:1f:
fb:e8:68:35:51:bc:44:3a:71:db:18:ea:db:5e:c7:
53:35:a7:42:8b:e8:34:0f:35:ce:c1:a7:90:58:ed:
8d:b1:8d:16:21:b8:2e:1a:d2:7a:f1:d3:f7:37:0f:
f2:42:f3:22:fc:33:a9:03:0b:4e:21:31:a2:3c:5a:
4a:33:d1:8b:45:66:53:f1:8d:52:72:35:f4:20:d0:
ad:e1:05:37:4f:1e:70:71:ba:0a:30:b1:71:55:c0:
04:b4:a2:a9:1d:41:bb:dc:a7:b2:64:a7:8d:20:e4:
c8:1a:12:a2:a2:66:4a:bb:40:b8:a6:43:b5:4c:1c:
e1:2b:3b:32:9d:7c:78:8c:e0:dc:e8:5a:37:b7:ab:
3c:ee:9c:76:30:ba:16:eb:7c:60:97:73:d1:5b:d7:
90:c7:e9:e6:ce:84:59:74:90:e5:59:4f:bd:d8:02:
57:7b:c8:13:3f:4a:d4:61:94:3e:f4:a6:a0:18:9a:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:44:CF:B7:72:BA:A9:68:04:28:DD:C5:84:BD:E6:EE:B6:DF:A4:4E
X509v3 Authority Key Identifier:
keyid:A9:A8:E4:4E:57:3C:53:C7:19:23:12:FC:C7:21:50:D2:DE:37:7D:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qajkTlc8U8cZIxL8xyFQ0t43fW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/452dd5-d0e4-4d4b-8ae6-1951345cea33/1/qajkTlc8U8cZIxL8xyFQ0t43fW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c6:04:92:63:cc:4e:3c:07:15:d8:b9:60:c3:84:3d:78:59:
b8:e8:f4:7d:1a:d7:5f:c1:68:2f:e1:46:64:aa:c3:f1:62:2d:
52:d5:b5:2d:89:bb:47:dc:4f:49:0b:24:7f:b1:6d:07:78:ab:
a4:04:75:50:9b:84:c6:ce:f8:44:60:d1:36:6a:96:c9:aa:ae:
b9:d7:5f:48:43:59:8e:40:b1:8f:2f:9e:78:ea:fe:20:b8:05:
50:63:db:1a:f1:39:c1:31:b9:d8:60:81:9b:f4:5a:54:88:0d:
f0:b5:21:84:f5:b6:11:37:1f:1a:70:31:37:b1:7b:6d:4f:fe:
72:7a:71:3b:11:f7:cf:fc:81:66:e5:43:ab:ac:f4:82:42:7f:
b8:02:25:58:c2:13:59:87:cc:40:6f:c2:1c:25:ea:8f:ec:e9:
7c:8e:2e:68:10:3f:46:f9:f9:d2:8c:71:e1:54:26:38:12:f4:
47:50:28:47:88:0f:83:d7:92:28:9a:ad:08:6f:d4:27:97:94:
f4:17:a0:b6:f3:eb:58:b6:58:1c:63:53:fb:41:df:a7:85:d3:
35:ce:3e:cd:6a:fd:a6:d5:d6:79:c5:e6:5e:40:3f:7a:e3:9c:
ae:e7:81:da:a8:26:f8:6e:fa:4d:2a:0a:47:ee:07:42:6c:7c:
06:25:29:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEyxrANewjGBbGzLKNg1G04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YThlNDRlNTczYzUzYzcxOTIzMTJmY2M3MjE1MGQyZGUz
NzdkNmQwHhcNMjYxMDEzMDEwMDQ0WhcNMjYxMDE0MDEwMDQ0WjAzMTEwLwYDVQQD
EygzZDQ0Y2ZiNzcyYmFhOTY4MDQyOGRkYzU4NGJkZTZlZWI2ZGZhNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmDT+qn8JSlGGFK6gA32MEL6JNgb
WmhVsO2t3sMw7OJSzg4bI/PfJO6IVKcubvs8U9kThggSrKCfleEZ0yF+TfrIL9QE
KtKePB/76Gg1UbxEOnHbGOrbXsdTNadCi+g0DzXOwaeQWO2NsY0WIbguGtJ68dP3
Nw/yQvMi/DOpAwtOITGiPFpKM9GLRWZT8Y1ScjX0INCt4QU3Tx5wcboKMLFxVcAE
tKKpHUG73KeyZKeNIOTIGhKiomZKu0C4pkO1TBzhKzsynXx4jODc6Fo3t6s87px2
MLoW63xgl3PRW9eQx+nmzoRZdJDlWU+92AJXe8gTP0rUYZQ+9KagGJoDkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1Ez7dyuqloBCjdxYS95u6236ROMB8GA1UdIwQY
MBaAFKmo5E5XPFPHGSMS/MchUNLeN31tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYt
MTk1MTM0NWNlYTMzLzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy80NTJkZDUtZDBlNC00ZDRiLThhZTYtMTk1MTM0NWNlYTMz
LzEvcWFqa1RsYzhVOGNaSXhMOHh5RlEwdDQzZlcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcYEkmPM
TjwHFdi5YMOEPXhZuOj0fRrXX8FoL+FGZKrD8WItUtW1LYm7R9xPSQskf7FtB3ir
pAR1UJuExs74RGDRNmqWyaquuddfSENZjkCxjy+eeOr+ILgFUGPbGvE5wTG52GCB
m/RaVIgN8LUhhPW2ETcfGnAxN7F7bU/+cnpxOxH3z/yBZuVDq6z0gkJ/uAIlWMIT
WYfMQG/CHCXqj+zpfI4uaBA/Rvn50oxx4VQmOBL0R1AoR4gPg9eSKJqtCG/UJ5eU
9BegtvPrWLZYHGNT+0Hfp4XTNc4+zWr9ptXWecXmXkA/euOcrueB2qgm+G76TSoK
R+4HQmx8BiUp5Q==
-----END CERTIFICATE-----
Generated at Tue Oct 13 10:27:19 2026 by rpki-client