Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
File: QdFPKPmNO9zEXhkibx9WFw4xKr8.mft (raw, json)
Hash identifier: bd/ah0ZYSfUMGQ/5jz3FNygKDgluzXOWVTMiaCEGIrU=
Subject key identifier: D5:70:03:29:8A:32:4B:F6:00:4B:46:98:49:FE:45:DF:EA:69:73:86
Authority key identifier: 41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
Certificate issuer: /CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Certificate serial: 019FAB2C6B9AFD7FC2D875DC829ADBA14465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 00:00:42 +0000
Manifest this update: Wed 29 Jul 2026 00:00:42 +0000
Manifest next update: Thu 30 Jul 2026 00:00:42 +0000
Files and hashes: 1: NuvWFYQk-kiKl2MmMjAPNDb8So4.roa (hash: HNkfwrKS+V0tdXG/bTci5kuusdPPHQbnnFcQ26SERCU=)
2: QdFPKPmNO9zEXhkibx9WFw4xKr8.crl (hash: jX2bim4ITgetsA/nLSSx+y+vJbaOXH465tlSFQ4rZ2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:6b:9a:fd:7f:c2:d8:75:dc:82:9a:db:a1:44:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d14f28f98d3bdcc45e19226f1f56170e312abf
Validity
Not Before: Jul 29 00:00:42 2026 GMT
Not After : Jul 30 00:00:42 2026 GMT
Subject: CN=d57003298a324bf6004b469849fe45dfea697386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7c:ed:03:00:64:21:e4:e2:ea:3b:4d:67:35:
51:12:dd:58:4f:c1:e3:92:13:b0:34:01:a5:cf:0f:
7c:7a:f6:81:c1:e9:26:b2:20:4c:83:76:07:31:15:
7d:42:a1:22:d9:c2:4d:86:8d:67:30:07:99:1b:0f:
5e:b5:a0:b4:ac:73:67:c4:9a:95:29:8e:3f:30:72:
56:93:4c:8b:0c:3a:d4:01:7f:e9:e8:7a:eb:6c:8f:
15:e3:80:fe:89:c4:8b:24:3d:76:16:48:89:63:90:
99:18:07:44:79:d4:76:fd:89:be:dc:69:42:44:48:
c3:4e:f9:29:5b:45:d1:47:93:b4:d0:02:71:00:47:
c2:23:df:a8:4b:6f:06:42:73:92:a8:fa:67:69:2f:
2f:83:d0:10:fe:d7:5e:20:61:9f:5b:3b:f9:bf:ff:
4c:c1:81:21:54:b7:28:45:f9:38:d4:ae:95:bf:5f:
5a:53:a5:18:da:49:31:ee:ce:36:d1:87:78:03:cf:
6f:63:ce:00:e6:2e:4d:a0:a1:e7:c6:39:5a:d2:5b:
23:66:18:65:94:72:85:81:7f:bf:74:f8:4b:ec:35:
fb:38:b8:8c:47:79:85:94:e4:2d:8e:c3:eb:11:57:
a2:d2:ab:99:cf:b7:be:ca:b1:a3:4c:e5:f2:ae:35:
86:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:70:03:29:8A:32:4B:F6:00:4B:46:98:49:FE:45:DF:EA:69:73:86
X509v3 Authority Key Identifier:
keyid:41:D1:4F:28:F9:8D:3B:DC:C4:5E:19:22:6F:1F:56:17:0E:31:2A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdFPKPmNO9zEXhkibx9WFw4xKr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a074e2-66ea-43cc-94a7-b380453267f9/1/QdFPKPmNO9zEXhkibx9WFw4xKr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:82:a4:91:c5:08:fb:cf:31:e1:6f:ae:6b:8d:3e:ff:ca:4f:
95:d1:72:ca:ab:28:f9:cf:50:ca:2a:8e:25:26:7d:74:8b:bd:
ee:23:17:15:66:bf:0c:07:4c:df:1f:23:03:ed:31:3f:cd:18:
72:b8:94:ae:6f:c0:50:87:23:b7:19:d8:07:45:1f:21:6b:28:
30:9d:e4:ea:20:3b:86:26:ec:6c:77:f7:68:de:96:f4:0b:ed:
d9:65:06:c1:b2:e5:86:d5:4b:c4:55:83:0f:22:65:62:be:b1:
70:b7:48:76:b9:27:b6:33:4c:5b:90:07:3e:d3:c0:09:b9:0e:
2b:56:c4:a1:c7:6c:72:15:1d:d6:d4:c0:6e:c9:9c:20:38:92:
28:a7:72:36:b2:a6:ce:56:e3:81:97:3d:b2:7e:5e:c5:4e:bb:
3e:19:1d:c3:aa:12:3c:91:9c:42:94:f6:59:d6:dd:df:9f:0d:
ad:c8:63:ae:ea:78:fa:46:79:16:3e:03:87:02:52:10:a7:30:
77:15:15:f8:a1:20:3d:1a:59:8d:be:98:e0:c3:39:97:9c:5e:
2b:32:d2:0a:7b:f0:01:6d:fb:a7:31:18:27:1c:15:fe:77:07:
a4:cb:bc:81:7c:f7:01:d0:12:16:50:a2:0b:09:df:9d:f9:cc:
71:ca:e8:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLGua/X/C2HXcgprboURlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZDE0ZjI4Zjk4ZDNiZGNjNDVlMTkyMjZmMWY1NjE3MGUz
MTJhYmYwHhcNMjYwNzI5MDAwMDQyWhcNMjYwNzMwMDAwMDQyWjAzMTEwLwYDVQQD
EyhkNTcwMDMyOThhMzI0YmY2MDA0YjQ2OTg0OWZlNDVkZmVhNjk3Mzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnztAwBkIeTi6jtNZzVREt1YT8Hj
khOwNAGlzw98evaBwekmsiBMg3YHMRV9QqEi2cJNho1nMAeZGw9etaC0rHNnxJqV
KY4/MHJWk0yLDDrUAX/p6HrrbI8V44D+icSLJD12FkiJY5CZGAdEedR2/Ym+3GlC
REjDTvkpW0XRR5O00AJxAEfCI9+oS28GQnOSqPpnaS8vg9AQ/tdeIGGfWzv5v/9M
wYEhVLcoRfk41K6Vv19aU6UY2kkx7s420Yd4A89vY84A5i5NoKHnxjla0lsjZhhl
lHKFgX+/dPhL7DX7OLiMR3mFlOQtjsPrEVei0quZz7e+yrGjTOXyrjWGYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVwAymKMkv2AEtGmEn+Rd/qaXOGMB8GA1UdIwQY
MBaAFEHRTyj5jTvcxF4ZIm8fVhcOMSq/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTct
YjM4MDQ1MzI2N2Y5LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hMDc0ZTItNjZlYS00M2NjLTk0YTctYjM4MDQ1MzI2N2Y5
LzEvUWRGUEtQbU5POXpFWGhraWJ4OVdGdzR4S3I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIKkkcUI
+88x4W+ua40+/8pPldFyyqso+c9QyiqOJSZ9dIu97iMXFWa/DAdM3x8jA+0xP80Y
criUrm/AUIcjtxnYB0UfIWsoMJ3k6iA7hibsbHf3aN6W9Avt2WUGwbLlhtVLxFWD
DyJlYr6xcLdIdrkntjNMW5AHPtPACbkOK1bEocdschUd1tTAbsmcIDiSKKdyNrKm
zlbjgZc9sn5exU67Phkdw6oSPJGcQpT2Wdbd358Nrchjrup4+kZ5Fj4DhwJSEKcw
dxUV+KEgPRpZjb6Y4MM5l5xeKzLSCnvwAW37pzEYJxwV/ncHpMu8gXz3AdASFlCi
CwnfnfnMccroYA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:11 2026 by rpki-client