Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
File: 02QfqO0c_D2qI6qvjDp2_oftW6s.mft (raw, json)
Hash identifier: k4uSHqvslBxqbUpSg9wV8cMiL1BNuwDWfLUlE1GrFgg=
Subject key identifier: 67:5B:74:B4:36:CE:48:9B:3A:CF:3C:C6:E2:9F:70:59:1B:64:94:74
Authority key identifier: D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
Certificate issuer: /CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Certificate serial: 01A123C1674BD55615424C6827DB33949123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
Manifest number: 1166
Signing time: Sat 10 Oct 2026 03:00:39 +0000
Manifest this update: Sat 10 Oct 2026 03:00:39 +0000
Manifest next update: Sun 11 Oct 2026 03:00:39 +0000
Files and hashes: 1: 02QfqO0c_D2qI6qvjDp2_oftW6s.crl (hash: B6bsn2JcZfGpyMufUlQTVOPMCaq7zDoFrokx+8RLJ5U=)
2: byVdI5-pp6NIJu3UrT-3MuGaeXY.roa (hash: l8DHq/5oUA3iWZHNp7UWg+LEjnOk5a1rdRkMplixMAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:67:4b:d5:56:15:42:4c:68:27:db:33:94:91:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3641fa8ed1cfc3daa23aaaf8c3a76fe87ed5bab
Validity
Not Before: Oct 10 03:00:39 2026 GMT
Not After : Oct 11 03:00:39 2026 GMT
Subject: CN=675b74b436ce489b3acf3cc6e29f70591b649474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c9:55:d3:4e:d4:b7:9d:3a:40:fa:3f:be:db:
15:f4:cd:d8:9b:9a:bb:cc:7f:18:b3:b9:91:5e:7e:
46:07:7f:47:76:90:f4:a5:28:9e:e1:6f:8e:78:6e:
6b:d8:0d:78:f3:ea:69:0f:0e:69:0d:f4:2c:6f:07:
4c:93:ab:b5:29:3a:49:2d:f7:cd:2b:3b:10:2e:be:
94:7f:d9:46:8a:1a:c8:71:4a:cd:2c:ee:d6:d3:1d:
82:d7:b2:53:b9:f6:51:ed:d6:88:52:a7:38:fd:ab:
cb:3b:84:a2:01:f6:93:83:db:75:e5:9a:fe:9d:3e:
c1:83:6a:d0:a2:c3:91:3f:30:f6:f4:d6:56:e2:e0:
e6:20:33:fc:97:2f:7a:1f:7d:74:6c:1c:8c:b1:34:
26:d0:0c:18:0e:96:90:ee:f4:42:c8:61:cb:c2:1e:
62:46:6f:73:5a:d3:7b:2f:65:7e:a2:2c:c9:51:4f:
34:62:00:d0:bf:7d:4c:34:1c:6a:1d:76:40:f4:d9:
96:2d:a9:22:00:03:f5:d5:99:e7:c6:6f:c8:fa:32:
71:eb:ce:07:5a:7f:a9:99:1a:4e:5b:e7:9b:29:a4:
42:f3:2a:7b:16:a1:83:0a:0a:96:ef:06:13:22:21:
81:13:b2:c1:77:0a:b8:1d:3f:3f:91:f6:58:21:b1:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5B:74:B4:36:CE:48:9B:3A:CF:3C:C6:E2:9F:70:59:1B:64:94:74
X509v3 Authority Key Identifier:
keyid:D3:64:1F:A8:ED:1C:FC:3D:AA:23:AA:AF:8C:3A:76:FE:87:ED:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02QfqO0c_D2qI6qvjDp2_oftW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/59d109-8b06-4ddd-bc20-9941992c9c24/1/02QfqO0c_D2qI6qvjDp2_oftW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0d:30:31:8e:e1:b6:5b:f6:27:51:4c:dd:81:64:ce:86:2f:
28:e5:2e:b4:f9:97:8a:92:ae:8c:fe:74:82:fb:c4:90:3b:a9:
f1:c5:e4:06:33:7e:4f:50:bd:07:16:7a:6b:b9:7a:94:53:f6:
84:2a:6a:ac:23:bc:e2:36:ec:86:12:9b:01:6a:6d:46:46:71:
12:08:17:ad:09:2b:58:33:b3:0b:fe:e3:c4:67:67:44:81:17:
f0:f5:eb:6d:00:b0:69:35:cf:43:c3:9a:44:d9:f0:be:5a:e5:
fc:7b:88:f1:e3:27:53:68:2c:e7:2c:27:43:51:7d:86:be:41:
f6:1e:0f:ea:86:66:43:2d:b2:c0:f2:dc:76:19:63:f3:66:e8:
cf:e7:b8:ef:7d:26:0e:cb:90:08:23:c7:e0:3f:0b:03:7a:0c:
74:ba:7f:8d:4f:5c:7a:2b:ac:e3:ab:62:17:8c:05:17:9b:f2:
bc:62:44:6b:0e:e0:25:64:49:0a:6d:83:ce:13:54:12:0f:ff:
84:c2:83:8e:fc:4c:2f:28:88:ed:b3:79:08:e4:06:0e:06:09:
6f:fd:a6:f9:45:17:89:82:6b:52:a4:70:9d:b7:24:4d:51:28:
d8:d1:5b:b8:f7:27:6d:09:10:ea:1a:7a:7b:0b:4e:a8:25:86:
be:86:20:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEjwWdL1VYVQkxoJ9szlJEjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjQxZmE4ZWQxY2ZjM2RhYTIzYWFhZjhjM2E3NmZlODdl
ZDViYWIwHhcNMjYxMDEwMDMwMDM5WhcNMjYxMDExMDMwMDM5WjAzMTEwLwYDVQQD
Eyg2NzViNzRiNDM2Y2U0ODliM2FjZjNjYzZlMjlmNzA1OTFiNjQ5NDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjclV007Ut506QPo/vtsV9M3Ym5q7
zH8Ys7mRXn5GB39HdpD0pSie4W+OeG5r2A148+ppDw5pDfQsbwdMk6u1KTpJLffN
KzsQLr6Uf9lGihrIcUrNLO7W0x2C17JTufZR7daIUqc4/avLO4SiAfaTg9t15Zr+
nT7Bg2rQosORPzD29NZW4uDmIDP8ly96H310bByMsTQm0AwYDpaQ7vRCyGHLwh5i
Rm9zWtN7L2V+oizJUU80YgDQv31MNBxqHXZA9NmWLakiAAP11Znnxm/I+jJx684H
Wn+pmRpOW+ebKaRC8yp7FqGDCgqW7wYTIiGBE7LBdwq4HT8/kfZYIbE/mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdbdLQ2zkibOs88xuKfcFkbZJR0MB8GA1UdIwQY
MBaAFNNkH6jtHPw9qiOqr4w6dv6H7VurMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81OWQxMDktOGIwNi00ZGRkLWJjMjAt
OTk0MTk5MmM5YzI0LzEvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81OWQxMDktOGIwNi00ZGRkLWJjMjAtOTk0MTk5MmM5YzI0
LzEvMDJRZnFPMGNfRDJxSTZxdmpEcDJfb2Z0VzZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg0wMY7h
tlv2J1FM3YFkzoYvKOUutPmXipKujP50gvvEkDup8cXkBjN+T1C9BxZ6a7l6lFP2
hCpqrCO84jbshhKbAWptRkZxEggXrQkrWDOzC/7jxGdnRIEX8PXrbQCwaTXPQ8Oa
RNnwvlrl/HuI8eMnU2gs5ywnQ1F9hr5B9h4P6oZmQy2ywPLcdhlj82boz+e4730m
DsuQCCPH4D8LA3oMdLp/jU9ceius46tiF4wFF5vyvGJEaw7gJWRJCm2DzhNUEg//
hMKDjvxMLyiI7bN5COQGDgYJb/2m+UUXiYJrUqRwnbckTVEo2NFbuPcnbQkQ6hp6
ewtOqCWGvoYgZg==
-----END CERTIFICATE-----
Generated at Sat Oct 10 10:39:05 2026 by rpki-client