Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
File: qLLDezil93OVmHikQQ21nhc9wgY.mft (raw, json)
Hash identifier: e7Sco+dZxOHA3PzPU9Etv9TeSut48TNYa34/8A5KtzQ=
Subject key identifier: 98:A4:DC:9A:55:24:E7:91:9A:61:93:E0:2B:DB:57:34:70:ED:DE:4D
Authority key identifier: A8:B2:C3:7B:38:A5:F7:73:95:98:78:A4:41:0D:B5:9E:17:3D:C2:06
Certificate issuer: /CN=a8b2c37b38a5f773959878a4410db59e173dc206
Certificate serial: 01A05A44AD894C88C0687647573D4B872B1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
Manifest number: A8
Signing time: Tue 01 Sep 2026 00:00:45 +0000
Manifest this update: Tue 01 Sep 2026 00:00:45 +0000
Manifest next update: Wed 02 Sep 2026 00:00:45 +0000
Files and hashes: 1: OunyrU6BBdReyTyaGtBOEde3_sk.roa (hash: dT+oapbW+wFYcujVYugQxPifKqhdPs/FWRx90NuTH1s=)
2: qLLDezil93OVmHikQQ21nhc9wgY.crl (hash: CTb8rAuowIDKJtGcHoA2R8hP/TOCvdPDcUMhOErZUbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:44:ad:89:4c:88:c0:68:76:47:57:3d:4b:87:2b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b2c37b38a5f773959878a4410db59e173dc206
Validity
Not Before: Sep 1 00:00:45 2026 GMT
Not After : Sep 2 00:00:45 2026 GMT
Subject: CN=98a4dc9a5524e7919a6193e02bdb573470edde4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:31:9f:a0:76:c5:92:63:44:63:26:dd:e2:
f7:e9:89:7a:a0:60:e5:39:47:d9:eb:f8:48:72:26:
95:13:52:47:82:bd:f7:8f:11:9c:b6:a5:fa:10:e6:
83:e1:d5:61:0c:e1:be:3f:f0:b1:81:2b:a1:19:fd:
a7:91:dd:93:2d:18:00:4f:89:42:16:1e:6b:43:6b:
83:5c:f0:7b:95:7d:c3:a4:1d:06:1b:99:0c:14:eb:
25:a3:b4:1d:f5:9d:71:49:7c:bd:00:3b:c2:7d:ec:
3b:a3:15:d8:84:e6:14:d0:58:ec:ee:08:d6:48:f5:
dd:6c:bb:f5:b6:63:ae:3a:ae:51:b8:08:cf:83:56:
86:a3:d3:67:e8:e6:28:10:60:b5:bf:ad:20:31:eb:
4b:67:95:d9:94:5f:1e:78:6f:95:f3:a7:28:72:fc:
fb:99:78:73:d5:4c:c9:99:e6:72:b2:03:d8:73:ed:
4e:c8:9c:81:41:9f:c6:07:7e:38:53:35:5f:4a:08:
cf:7a:0f:95:12:fe:be:03:25:28:54:7d:d1:ba:fc:
cb:f9:b7:eb:22:e0:58:6b:27:6d:82:bc:93:d5:a1:
a1:6f:d7:ba:91:25:be:84:47:da:83:dc:86:f9:6e:
b8:6d:dc:62:8b:78:89:89:3a:02:2b:2b:0a:3c:ae:
fb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A4:DC:9A:55:24:E7:91:9A:61:93:E0:2B:DB:57:34:70:ED:DE:4D
X509v3 Authority Key Identifier:
keyid:A8:B2:C3:7B:38:A5:F7:73:95:98:78:A4:41:0D:B5:9E:17:3D:C2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLLDezil93OVmHikQQ21nhc9wgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cba0d3-5944-4747-8835-bed0567efa6b/1/qLLDezil93OVmHikQQ21nhc9wgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d8:2e:68:c7:17:90:30:bf:d0:59:ad:ea:8c:50:f5:a5:1f:
e0:29:3f:ba:22:0c:c0:2e:66:2c:26:75:2f:55:7a:35:bd:c2:
31:24:16:b8:24:1c:e1:ca:3d:84:05:ce:94:5f:dd:33:bf:8c:
12:0c:bc:a4:8f:b0:0a:22:12:71:31:dc:7c:bc:41:ff:e6:4f:
47:98:60:89:20:58:73:9b:92:71:10:80:bd:ae:16:f8:fc:e6:
c7:13:d6:06:15:50:ad:47:c2:39:c2:87:00:b8:6f:65:9e:58:
1b:8d:b0:80:04:8d:ae:c3:aa:e2:96:47:82:b1:9c:ed:65:c1:
f7:c0:6e:c2:31:42:b1:06:0b:f9:99:5d:9f:e9:35:1a:ea:35:
39:f7:8e:65:d7:3a:15:55:41:18:08:fb:aa:81:e7:e4:00:64:
c9:79:e2:4f:70:68:b9:1f:9e:e3:cf:5c:5a:78:e0:b6:8b:52:
fb:f1:7e:8c:a7:58:36:24:01:ae:a3:ce:ba:c2:de:71:54:37:
6f:ef:1c:bb:64:80:5f:1d:23:20:4b:ad:ad:49:94:b5:f2:d5:
25:97:c8:21:eb:ea:c4:13:bf:f3:4c:9b:e7:2f:c8:a5:96:01:
2c:27:73:f2:37:7f:19:ce:62:c0:e9:b3:69:86:cb:ef:62:50:
10:eb:ed:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBaRK2JTIjAaHZHVz1LhyseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjJjMzdiMzhhNWY3NzM5NTk4NzhhNDQxMGRiNTllMTcz
ZGMyMDYwHhcNMjYwOTAxMDAwMDQ1WhcNMjYwOTAyMDAwMDQ1WjAzMTEwLwYDVQQD
Eyg5OGE0ZGM5YTU1MjRlNzkxOWE2MTkzZTAyYmRiNTczNDcwZWRkZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEExn6B2xZJjRGMm3eL36Yl6oGDl
OUfZ6/hIciaVE1JHgr33jxGctqX6EOaD4dVhDOG+P/CxgSuhGf2nkd2TLRgAT4lC
Fh5rQ2uDXPB7lX3DpB0GG5kMFOslo7Qd9Z1xSXy9ADvCfew7oxXYhOYU0Fjs7gjW
SPXdbLv1tmOuOq5RuAjPg1aGo9Nn6OYoEGC1v60gMetLZ5XZlF8eeG+V86cocvz7
mXhz1UzJmeZysgPYc+1OyJyBQZ/GB344UzVfSgjPeg+VEv6+AyUoVH3RuvzL+bfr
IuBYaydtgryT1aGhb9e6kSW+hEfag9yG+W64bdxii3iJiToCKysKPK77uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJik3JpVJOeRmmGT4CvbVzRw7d5NMB8GA1UdIwQY
MBaAFKiyw3s4pfdzlZh4pEENtZ4XPcIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxMRGV6aWw5M09WbUhpa1FRMjFuaGM5d2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUt
YmVkMDU2N2VmYTZiLzEvcUxMRGV6aWw5M09WbUhpa1FRMjFuaGM5d2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYmEwZDMtNTk0NC00NzQ3LTg4MzUtYmVkMDU2N2VmYTZi
LzEvcUxMRGV6aWw5M09WbUhpa1FRMjFuaGM5d2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntguaMcX
kDC/0Fmt6oxQ9aUf4Ck/uiIMwC5mLCZ1L1V6Nb3CMSQWuCQc4co9hAXOlF/dM7+M
Egy8pI+wCiIScTHcfLxB/+ZPR5hgiSBYc5uScRCAva4W+PzmxxPWBhVQrUfCOcKH
ALhvZZ5YG42wgASNrsOq4pZHgrGc7WXB98BuwjFCsQYL+Zldn+k1Guo1OfeOZdc6
FVVBGAj7qoHn5ABkyXniT3BouR+e489cWnjgtotS+/F+jKdYNiQBrqPOusLecVQ3
b+8cu2SAXx0jIEutrUmUtfLVJZfIIevqxBO/80yb5y/IpZYBLCdz8jd/Gc5iwOmz
aYbL72JQEOvtSQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:12:32 2026 by rpki-client