Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: bm/+G1cx8c7x82UgawkALtKXcO117atWa7WTMfv42Ws=
Subject key identifier: 05:9A:9A:3D:F6:82:45:61:F5:02:CC:10:FD:01:00:4A:CE:8B:26:8C
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 01A13A124C82F626F15A9AFA555B19B490A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0C67
Signing time: Wed 14 Oct 2026 11:00:39 +0000
Manifest this update: Wed 14 Oct 2026 11:00:39 +0000
Manifest next update: Thu 15 Oct 2026 11:00:39 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: SBO9K+57y71jFvZy82wwGMWOJQpn1xkn60LNQ0i/HWs=)
2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:12:4c:82:f6:26:f1:5a:9a:fa:55:5b:19:b4:90:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Oct 14 11:00:39 2026 GMT
Not After : Oct 15 11:00:39 2026 GMT
Subject: CN=059a9a3df6824561f502cc10fd01004ace8b268c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:2b:ae:8c:85:3b:f7:8a:d2:76:28:de:93:
65:09:fd:b5:82:4c:89:32:a3:17:10:82:9c:8e:dc:
21:1e:37:bf:9c:58:ca:e0:d5:19:a2:77:07:ea:b7:
10:5b:18:54:a3:60:ec:0a:6c:9e:ac:b1:c7:e5:1b:
04:fe:a6:87:bc:0a:ce:7f:d7:89:89:62:a4:0e:63:
fa:2c:a7:b8:d7:b7:7f:aa:31:64:16:a0:f8:eb:df:
d1:50:e8:26:ab:b3:16:13:ff:74:fa:61:0d:3b:f3:
b1:2e:95:47:5a:3d:17:40:5f:15:98:63:3c:10:50:
07:57:77:0d:f0:0b:71:9b:fd:89:1a:ad:5a:4e:4d:
e2:e5:1f:fe:c7:59:5e:a8:2b:ef:c1:39:de:21:a5:
cc:bc:b5:81:37:d1:49:d1:d8:fa:72:f7:9f:2f:b3:
ac:aa:19:ac:91:12:61:95:3c:1a:a5:bd:b0:71:21:
bc:33:02:ab:55:d7:ed:c6:58:22:00:81:c5:20:97:
ea:59:71:88:c6:0b:b5:6b:f1:4d:c8:da:16:9c:1c:
0f:6d:90:1a:27:8e:6f:e3:ec:3c:8f:6f:46:6b:65:
9a:f9:a0:70:61:27:2c:a0:98:32:95:31:0b:31:a6:
17:1d:19:48:31:e1:86:d4:29:44:49:c4:44:82:8f:
34:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9A:9A:3D:F6:82:45:61:F5:02:CC:10:FD:01:00:4A:CE:8B:26:8C
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:83:f0:a5:0c:50:29:54:4c:c5:ff:01:2f:90:6c:ee:d5:e6:
27:5a:a9:c0:9f:38:98:98:a9:3a:44:8c:6b:db:81:14:4d:af:
0b:05:b8:81:47:5e:cd:ba:41:3c:0b:79:16:1e:74:14:03:63:
89:cf:ac:9b:f4:f0:3c:b1:12:ee:17:45:09:6b:3b:c8:db:c2:
23:12:68:01:65:8d:e4:ed:c9:fb:da:c5:fb:b4:57:42:de:2b:
7c:88:cc:97:51:3a:f1:9d:53:b1:20:92:72:55:f8:59:e2:6c:
7f:11:ac:30:4e:0b:6c:a4:33:e5:3f:05:d6:b4:db:38:b3:df:
cb:fa:15:06:93:e4:c6:b3:3a:ae:a5:ad:bc:13:e8:7d:2f:33:
18:ce:0f:51:f6:42:58:d5:98:64:93:02:b7:a7:5e:c7:9d:74:
03:71:fa:7a:1a:38:d6:98:13:c2:d5:8f:8b:05:7e:60:34:b9:
5e:93:3f:b3:29:ee:61:6d:60:15:79:78:28:cd:a9:fc:4d:ca:
00:9b:18:8c:3f:81:78:33:40:f5:4c:d2:a8:dc:54:78:3e:5f:
23:1c:99:25:f5:80:f2:61:30:a9:37:52:51:8e:fe:48:d0:c3:
78:b2:c6:78:8b:f9:80:2c:45:5c:d2:a7:b2:06:01:df:cf:4d:
94:ea:b9:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE6EkyC9ibxWpr6VVsZtJCmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNmIyZDc0NDBmYjc4ODQ0Y2YwMTM1ZWM1MTgyYjNmNmY3
ODNhODYwHhcNMjYxMDE0MTEwMDM5WhcNMjYxMDE1MTEwMDM5WjAzMTEwLwYDVQQD
EygwNTlhOWEzZGY2ODI0NTYxZjUwMmNjMTBmZDAxMDA0YWNlOGIyNjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10MrroyFO/eK0nYo3pNlCf21gkyJ
MqMXEIKcjtwhHje/nFjK4NUZoncH6rcQWxhUo2DsCmyerLHH5RsE/qaHvArOf9eJ
iWKkDmP6LKe417d/qjFkFqD469/RUOgmq7MWE/90+mENO/OxLpVHWj0XQF8VmGM8
EFAHV3cN8Atxm/2JGq1aTk3i5R/+x1leqCvvwTneIaXMvLWBN9FJ0dj6cvefL7Os
qhmskRJhlTwapb2wcSG8MwKrVdftxlgiAIHFIJfqWXGIxgu1a/FNyNoWnBwPbZAa
J45v4+w8j29Ga2Wa+aBwYScsoJgylTELMaYXHRlIMeGG1ClEScREgo80EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWamj32gkVh9QLMEP0BAErOiyaMMB8GA1UdIwQY
MBaAFEJrLXRA+3iETPATXsUYKz9veDqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMt
MjU5MmExZWE2MTM4LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMtMjU5MmExZWE2MTM4
LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkoPwpQxQ
KVRMxf8BL5Bs7tXmJ1qpwJ84mJipOkSMa9uBFE2vCwW4gUdezbpBPAt5Fh50FANj
ic+sm/TwPLES7hdFCWs7yNvCIxJoAWWN5O3J+9rF+7RXQt4rfIjMl1E68Z1TsSCS
clX4WeJsfxGsME4LbKQz5T8F1rTbOLPfy/oVBpPkxrM6rqWtvBPofS8zGM4PUfZC
WNWYZJMCt6dex510A3H6eho41pgTwtWPiwV+YDS5XpM/synuYW1gFXl4KM2p/E3K
AJsYjD+BeDNA9UzSqNxUeD5fIxyZJfWA8mEwqTdSUY7+SNDDeLLGeIv5gCxFXNKn
sgYB389NlOq5qA==
-----END CERTIFICATE-----
Generated at Wed Oct 14 17:43:36 2026 by rpki-client