
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: qCjqFpI7FXZ8d28kIfO0ykj4MEIHq486g67BlAZClHw=
Subject key identifier: 47:D9:0A:45:B5:C1:71:C0:5E:BD:0E:C9:48:96:53:53:C1:B8:51:E9
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 01A06E39F6CADA78AAAED799CFD2A606C0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 054D
Signing time: Fri 04 Sep 2026 21:01:27 +0000
Manifest this update: Fri 04 Sep 2026 21:01:27 +0000
Manifest next update: Sat 05 Sep 2026 21:01:27 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: M7WVh1735eukffbqm8HzsxX7Hi4LnG+zvXG9MSU8bmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 21:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:f6:ca:da:78:aa:ae:d7:99:cf:d2:a6:06:c0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Sep 4 21:01:27 2026 GMT
Not After : Sep 5 21:01:27 2026 GMT
Subject: CN=47d90a45b5c171c05ebd0ec948965353c1b851e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:4f:0d:d6:a0:26:9f:c4:a6:19:58:c9:e3:
52:c8:fb:35:89:9f:50:53:fb:31:ef:59:1a:0e:0f:
ea:7d:c1:3d:d2:c2:a3:cd:6b:2e:93:d3:2e:68:d6:
e6:c2:e1:b1:07:d2:93:19:74:86:78:05:19:1f:ef:
c6:29:92:00:ea:54:56:20:ff:43:9a:43:ad:28:b1:
cd:5d:e8:b9:67:28:c3:49:bb:4b:88:8f:fc:5c:03:
01:2c:ee:92:2d:28:fe:b3:d0:d1:86:a6:50:fa:f9:
01:a3:18:e4:04:81:2a:1e:3f:af:cc:54:ee:52:8d:
84:cc:5d:79:da:1a:bd:f8:7a:45:12:4c:39:c0:36:
ca:f1:4a:ea:8c:90:af:08:00:6c:a3:60:18:03:fa:
18:af:8a:a8:75:3e:bd:79:dd:c0:f4:7e:24:76:b8:
66:4b:cf:b5:81:22:e6:0d:b0:b8:9e:00:60:ce:bd:
f2:2f:fa:ca:74:39:dd:be:60:70:e5:14:4b:8c:84:
80:a9:f2:bb:c9:36:59:de:b5:90:06:c0:03:06:72:
fc:d9:f5:8d:a4:35:2d:8e:d0:58:33:a1:31:b2:ba:
e6:8f:49:21:2d:80:1c:a4:2b:74:a1:c3:2f:4e:9e:
4c:77:82:9b:df:0d:dc:83:0f:c8:05:a3:ef:fb:bc:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D9:0A:45:B5:C1:71:C0:5E:BD:0E:C9:48:96:53:53:C1:B8:51:E9
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b0:21:76:4a:af:71:a1:2e:83:a2:3e:e8:ca:ab:90:60:ce:
b3:be:a1:69:05:b7:51:bd:c8:24:ef:ff:58:de:1b:60:6e:74:
80:39:73:40:ee:01:81:65:b1:ba:59:23:a0:bb:db:b2:c1:88:
58:13:09:3c:4b:18:d1:b1:e3:85:02:1f:91:64:c3:bf:4f:ff:
09:0e:b9:0b:cb:f8:bf:4c:49:5a:32:52:8f:89:6b:75:e8:6d:
50:59:7a:39:18:ca:ee:ff:92:f7:ad:ce:af:c0:0c:ed:64:7a:
8e:33:b8:7a:ef:11:f2:ad:c4:e1:62:d3:2e:8c:b1:ca:b0:43:
cc:62:f3:43:89:af:ff:59:82:2a:55:4a:92:c6:51:d5:d0:39:
b2:19:08:db:87:32:36:bf:5f:40:f1:92:02:40:2b:e7:1a:0f:
e9:40:2b:1b:1d:05:b8:2e:04:6f:1f:5c:4b:4f:ed:38:a0:f9:
71:d2:8e:30:0c:30:0c:6d:67:4d:7b:a6:37:8c:b7:e0:66:ec:
7c:48:a8:53:e5:08:c7:fd:f0:51:d1:44:8d:6b:87:fb:3f:fe:
4a:97:14:2c:13:45:c3:44:a5:a3:62:fd:a0:59:8a:31:1e:f5:
b3:8f:e2:be:1e:9a:f9:83:b3:ea:1f:62:41:17:ce:af:27:28:
a2:07:2f:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuOfbK2niqrteZz9KmBsDXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNmQ4ODkwNDFjYjI5YWVkMWZlMWFjMzgwYzc5NGFmN2E0
MmM3ZDEwHhcNMjYwOTA0MjEwMTI3WhcNMjYwOTA1MjEwMTI3WjAzMTEwLwYDVQQD
Eyg0N2Q5MGE0NWI1YzE3MWMwNWViZDBlYzk0ODk2NTM1M2MxYjg1MWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAdPDdagJp/EphlYyeNSyPs1iZ9Q
U/sx71kaDg/qfcE90sKjzWsuk9MuaNbmwuGxB9KTGXSGeAUZH+/GKZIA6lRWIP9D
mkOtKLHNXei5ZyjDSbtLiI/8XAMBLO6SLSj+s9DRhqZQ+vkBoxjkBIEqHj+vzFTu
Uo2EzF152hq9+HpFEkw5wDbK8UrqjJCvCABso2AYA/oYr4qodT69ed3A9H4kdrhm
S8+1gSLmDbC4ngBgzr3yL/rKdDndvmBw5RRLjISAqfK7yTZZ3rWQBsADBnL82fWN
pDUtjtBYM6Exsrrmj0khLYAcpCt0ocMvTp5Md4Kb3w3cgw/IBaPv+7zzmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfZCkW1wXHAXr0OyUiWU1PBuFHpMB8GA1UdIwQY
MBaAFKptiJBByymu0f4aw4DHlK96QsfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYt
ZTEzZDY5YTAwNDVlLzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi85MDUwNzktOWQ3Zi00OGM4LWEzMDYtZTEzZDY5YTAwNDVl
LzEvcW0ySWtFSExLYTdSX2hyRGdNZVVyM3BDeDlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArAhdkqv
caEug6I+6MqrkGDOs76haQW3Ub3IJO//WN4bYG50gDlzQO4BgWWxulkjoLvbssGI
WBMJPEsY0bHjhQIfkWTDv0//CQ65C8v4v0xJWjJSj4lrdehtUFl6ORjK7v+S963O
r8AM7WR6jjO4eu8R8q3E4WLTLoyxyrBDzGLzQ4mv/1mCKlVKksZR1dA5shkI24cy
Nr9fQPGSAkAr5xoP6UArGx0FuC4Ebx9cS0/tOKD5cdKOMAwwDG1nTXumN4y34Gbs
fEioU+UIx/3wUdFEjWuH+z/+SpcULBNFw0Slo2L9oFmKMR71s4/ivh6a+YOz6h9i
QRfOrycoogcvyg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:28:41 2026 by rpki-client