Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: BjhWmdufadjvXrAthajQHFDMKUITYAebnjNJui/s2fI=
Subject key identifier: 65:D7:F0:B6:63:C1:C4:2E:B9:CB:35:4B:4F:CC:2F:7B:1B:07:66:4C
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 01A13E26729DA44CBA280F75179FDD1F5386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 1AA3
Signing time: Thu 15 Oct 2026 06:01:09 +0000
Manifest this update: Thu 15 Oct 2026 06:01:09 +0000
Manifest next update: Fri 16 Oct 2026 06:01:09 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: v4ZhFV5/oJK3XDv8MkNIfT+RlXzDNJv0ZupC3SHQza0=)
2: 3vC4pYqybSvnyiv9AWSFuid8GOw.roa (hash: v8QGywV5eLuGaT2Uqfo+veGfvP9FzA92hTs+zKxoZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:72:9d:a4:4c:ba:28:0f:75:17:9f:dd:1f:53:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Oct 15 06:01:09 2026 GMT
Not After : Oct 16 06:01:09 2026 GMT
Subject: CN=65d7f0b663c1c42eb9cb354b4fcc2f7b1b07664c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0a:95:ea:cc:95:58:7a:41:0d:10:cd:2b:b4:
05:0d:29:4d:5d:bd:49:40:c3:ea:9b:23:a4:01:81:
22:df:74:15:62:61:7d:df:1b:2c:96:38:6e:14:66:
5a:95:91:01:f1:16:3c:34:de:f4:f5:a9:66:02:fb:
09:c9:83:19:c4:b3:ed:63:97:98:47:c1:70:41:71:
94:97:ad:40:04:47:1a:e5:99:79:07:88:b0:38:f5:
3a:a3:33:08:aa:f5:8e:6c:70:b4:31:92:a3:b7:c6:
b3:a1:1c:af:f2:be:0d:8b:b4:b7:af:1b:b1:77:7b:
0b:6e:33:c8:11:35:14:f9:51:72:65:06:54:72:8f:
2e:f4:32:f8:91:43:7c:10:a5:0f:c2:d1:c6:c0:0c:
6e:10:8c:8c:68:9b:09:e8:e8:09:c1:71:d3:19:a0:
ab:32:5f:da:32:6b:0b:30:af:0d:29:9d:1b:19:35:
5d:47:25:7e:eb:69:b7:2a:4d:3f:e7:b8:a7:4a:45:
c2:92:0a:f7:b1:fa:7b:54:23:83:8c:de:ea:13:9d:
50:96:b1:ce:35:d3:4a:1a:78:38:b1:e0:8a:5e:60:
23:d8:b8:8a:9d:a6:66:c5:82:46:7d:f2:dd:6e:0d:
a5:68:bf:d4:02:d7:dc:83:3d:03:d7:e9:61:6f:99:
9a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D7:F0:B6:63:C1:C4:2E:B9:CB:35:4B:4F:CC:2F:7B:1B:07:66:4C
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b3:1a:da:4b:12:b4:80:1d:a6:17:79:ba:2b:1b:8e:4a:8c:
33:30:a5:ca:b8:67:73:6f:10:2d:7c:b2:b6:05:62:f8:17:36:
1b:ed:ef:54:96:b8:e4:c2:6d:ac:a4:b2:f9:82:23:2d:8a:95:
3e:3a:f2:8d:ec:db:00:1a:8a:26:ef:78:06:dd:5d:d4:8a:d9:
9d:2e:c9:97:68:75:83:a3:9f:6f:f0:35:4c:05:4b:b3:06:d5:
d1:48:3b:75:3c:67:5b:b8:70:66:a4:78:12:a2:d6:a9:d7:5d:
08:07:ea:ca:da:ed:c6:88:11:83:37:c3:c0:c3:13:18:72:c8:
ae:5f:9e:13:d6:26:31:a4:d5:78:b8:3f:95:d2:ea:f4:5f:11:
ae:6d:b7:b0:ed:59:92:22:f8:e6:3c:e5:ec:57:7d:35:8d:b8:
2f:dd:22:f7:8d:ee:2a:bc:ab:aa:a3:b2:38:e3:b9:c7:1b:79:
7b:6c:9e:fe:f8:06:f7:9d:11:d3:f5:e8:12:cb:e3:4b:15:cd:
a1:e5:78:50:b0:2e:27:df:47:4c:22:89:e0:d4:0e:05:b3:ef:
71:77:cb:d8:12:89:5d:c3:b6:8e:61:86:69:82:0a:48:a5:31:
c4:61:6b:c2:79:2f:a9:a0:bd:36:a4:e1:02:3c:a4:0f:48:97:
a8:4f:65:ea
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE+JnKdpEy6KA91F5/dH1OGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTYxZTI5YzE2NmJmMDYzNWM4Y2VmZThkYTgyMTA0YTc4
M2I0NTQwHhcNMjYxMDE1MDYwMTA5WhcNMjYxMDE2MDYwMTA5WjAzMTEwLwYDVQQD
Eyg2NWQ3ZjBiNjYzYzFjNDJlYjljYjM1NGI0ZmNjMmY3YjFiMDc2NjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAqV6syVWHpBDRDNK7QFDSlNXb1J
QMPqmyOkAYEi33QVYmF93xssljhuFGZalZEB8RY8NN709almAvsJyYMZxLPtY5eY
R8FwQXGUl61ABEca5Zl5B4iwOPU6ozMIqvWObHC0MZKjt8azoRyv8r4Ni7S3rxux
d3sLbjPIETUU+VFyZQZUco8u9DL4kUN8EKUPwtHGwAxuEIyMaJsJ6OgJwXHTGaCr
Ml/aMmsLMK8NKZ0bGTVdRyV+62m3Kk0/57inSkXCkgr3sfp7VCODjN7qE51QlrHO
NdNKGng4seCKXmAj2LiKnaZmxYJGffLdbg2laL/UAtfcgz0D1+lhb5mazQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGXX8LZjwcQuucs1S0/ML3sbB2ZMMB8GA1UdIwQY
MBaAFPqmHinBZr8GNcjO/o2oIQSng7RUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xWWVLY0ZtdndZMXlNNy1qYWdoQktlRHRGUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvMTQ2NzFlLTg2ZDItNDJmYy04MGQ5
LTgyNWQzZmYxZGRlOC8xLzEtcVllS2NGbXZ3WTF5TTctamFnaEJLZUR0RlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U5LzE0NjcxZS04NmQyLTQyZmMtODBkOS04MjVkM2ZmMWRk
ZTgvMS8xLXFZZUtjRm12d1kxeU03LWphZ2hCS2VEdEZRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrMa
2ksStIAdphd5uisbjkqMMzClyrhnc28QLXyytgVi+Bc2G+3vVJa45MJtrKSy+YIj
LYqVPjryjezbABqKJu94Bt1d1IrZnS7Jl2h1g6Ofb/A1TAVLswbV0Ug7dTxnW7hw
ZqR4EqLWqdddCAfqytrtxogRgzfDwMMTGHLIrl+eE9YmMaTVeLg/ldLq9F8Rrm23
sO1ZkiL45jzl7Fd9NY24L90i943uKryrqqOyOOO5xxt5e2ye/vgG950R0/XoEsvj
SxXNoeV4ULAuJ99HTCKJ4NQOBbPvcXfL2BKJXcO2jmGGaYIKSKUxxGFrwnkvqaC9
NqThAjykD0iXqE9l6g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:17 2026 by rpki-client