Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
File: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft (raw, json)
Hash identifier: ksKu8sNWMy5RC/ohfwG50apfPYTYBRTQVDu3Wfe17U0=
Subject key identifier: 27:21:59:FC:09:1B:6D:3E:2B:B0:77:E6:00:A1:D3:DF:4D:51:FC:80
Authority key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Certificate issuer: /CN=f90588ca22897c69a102949a682f9f1a35835bab
Certificate serial: 01A12A9F907298566B6D0A3AF9499DAFB5DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
Manifest number: 022B
Signing time: Sun 11 Oct 2026 11:01:02 +0000
Manifest this update: Sun 11 Oct 2026 11:01:02 +0000
Manifest next update: Mon 12 Oct 2026 11:01:02 +0000
Files and hashes: 1: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl (hash: bkPh5jA2HprwEHC/kJMM3yVp+02spcCDJUB3WnmgNFc=)
2: M0gW80SQeN8-sWeK4V4IiUTNncs.roa (hash: 5lMZVBWnzilRk6pbxwjn0M4dlZP9bPyruzS+ojF0eMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:90:72:98:56:6b:6d:0a:3a:f9:49:9d:af:b5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90588ca22897c69a102949a682f9f1a35835bab
Validity
Not Before: Oct 11 11:01:02 2026 GMT
Not After : Oct 12 11:01:02 2026 GMT
Subject: CN=272159fc091b6d3e2bb077e600a1d3df4d51fc80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0d:c2:6e:06:c9:67:a0:e0:3c:6c:31:96:7e:
24:23:de:75:3b:ca:0b:10:e9:8c:27:86:2e:29:42:
90:06:dc:91:dd:f3:5e:9d:bb:12:a0:53:b5:14:c0:
ef:5e:f3:e8:d8:3e:33:5d:31:2c:73:d9:62:80:56:
54:be:6d:8b:b3:53:ab:d7:d2:eb:81:62:3f:cb:20:
6b:f7:70:83:a4:31:9b:a3:46:86:11:6c:9e:7f:a6:
1a:ce:44:24:53:f9:94:71:23:73:7f:96:fa:0b:21:
1f:5a:02:1a:62:25:a6:c8:aa:98:e7:f0:d6:e9:ea:
d4:b5:06:ea:c0:78:f4:dc:16:e4:3a:26:72:00:79:
a3:3c:53:ac:a9:f1:0e:f2:eb:ff:39:9c:24:fd:fa:
c4:79:8b:45:66:a0:fa:0b:5a:27:58:b0:12:31:81:
43:4b:c3:8b:04:0a:fd:a4:1d:ca:25:0f:f7:e2:7e:
97:4e:8a:2b:09:6d:f6:3c:80:30:28:6c:f5:5f:6e:
8c:57:ce:ee:71:34:47:fc:1d:6b:dd:9c:68:5b:73:
60:5b:73:c5:2e:55:e7:27:1c:f6:fb:e4:d7:61:cc:
75:f2:81:40:2a:2e:25:c0:5a:59:32:29:dd:b5:5a:
7a:4e:90:ed:2f:28:64:43:58:5c:cb:d1:05:7d:be:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:21:59:FC:09:1B:6D:3E:2B:B0:77:E6:00:A1:D3:DF:4D:51:FC:80
X509v3 Authority Key Identifier:
keyid:F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:67:bd:94:06:bc:41:90:0d:62:d8:48:23:8a:4a:64:6c:c9:
83:11:17:92:38:93:de:1e:ba:32:e2:c7:d9:d7:71:48:47:58:
bf:3a:a3:ee:fc:a5:7a:51:af:8c:8b:fa:c5:55:35:93:a6:23:
db:51:c0:86:86:a7:2a:3b:e9:56:13:c8:c1:20:a7:36:c9:e3:
a1:55:37:8b:24:e1:7f:60:ef:69:67:a6:ee:a7:91:70:b6:41:
e4:4c:98:b8:73:c7:77:3f:df:e7:4e:25:41:3d:dc:f5:d0:de:
88:fe:b3:85:e6:c3:bb:96:d6:a2:10:26:af:27:c5:36:32:d3:
cf:ab:54:71:a8:03:b0:c2:e1:96:e7:99:fc:b7:c6:94:f9:92:
20:77:d5:34:ac:37:d1:c1:2d:91:22:38:b9:14:f8:07:67:65:
2a:dc:92:3f:c5:28:8c:20:42:ef:43:e1:9c:fd:0c:e9:cf:34:
67:38:76:46:98:75:29:29:c4:c8:80:e2:ad:b3:25:9c:0f:b8:
50:40:6f:74:98:50:d6:16:d8:17:68:4c:dd:d3:a9:0f:e3:f6:
e6:5f:43:68:e1:fa:f3:a8:dd:6b:39:67:c4:a5:f7:19:5d:6f:
a6:16:2c:58:32:4a:2f:06:22:fe:50:48:30:b4:ff:3f:bb:b3:
c4:00:f2:1b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaEqn5BymFZrbQo6+Umdr7XbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MDU4OGNhMjI4OTdjNjlhMTAyOTQ5YTY4MmY5ZjFhMzU4
MzViYWIwHhcNMjYxMDExMTEwMTAyWhcNMjYxMDEyMTEwMTAyWjAzMTEwLwYDVQQD
EygyNzIxNTlmYzA5MWI2ZDNlMmJiMDc3ZTYwMGExZDNkZjRkNTFmYzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA3CbgbJZ6DgPGwxln4kI951O8oL
EOmMJ4YuKUKQBtyR3fNenbsSoFO1FMDvXvPo2D4zXTEsc9ligFZUvm2Ls1Or19Lr
gWI/yyBr93CDpDGbo0aGEWyef6YazkQkU/mUcSNzf5b6CyEfWgIaYiWmyKqY5/DW
6erUtQbqwHj03BbkOiZyAHmjPFOsqfEO8uv/OZwk/frEeYtFZqD6C1onWLASMYFD
S8OLBAr9pB3KJQ/34n6XToorCW32PIAwKGz1X26MV87ucTRH/B1r3ZxoW3NgW3PF
LlXnJxz2++TXYcx18oFAKi4lwFpZMindtVp6TpDtLyhkQ1hcy9EFfb7YUQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCchWfwJG20+K7B35gCh099NUfyAMB8GA1UdIwQY
MBaAFPkFiMoiiXxpoQKUmmgvnxo1g1urMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1RV0l5aUtKZkdtaEFwU2FhQy1mR2pXRFc2cy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNDI1ZjJiLTBlYzAtNDY1Ny1hMDUw
LTU2OWYxZGQwYzAxZi8xLzEtUVdJeWlLSmZHbWhBcFNhYUMtZkdqV0RXNnMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VmLzQyNWYyYi0wZWMwLTQ2NTctYTA1MC01NjlmMWRkMGMw
MWYvMS8xLVFXSXlpS0pmR21oQXBTYWFDLWZHaldEVzZzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtme9
lAa8QZANYthII4pKZGzJgxEXkjiT3h66MuLH2ddxSEdYvzqj7vylelGvjIv6xVU1
k6Yj21HAhoanKjvpVhPIwSCnNsnjoVU3iyThf2DvaWem7qeRcLZB5EyYuHPHdz/f
504lQT3c9dDeiP6zhebDu5bWohAmryfFNjLTz6tUcagDsMLhlueZ/LfGlPmSIHfV
NKw30cEtkSI4uRT4B2dlKtySP8UojCBC70PhnP0M6c80Zzh2Rph1KSnEyIDirbMl
nA+4UEBvdJhQ1hbYF2hM3dOpD+P25l9DaOH686jdazlnxKX3GV1vphYsWDJKLwYi
/lBIMLT/P7uzxADyGw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:32:31 2026 by rpki-client