Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: DtmxEfigN3H+j2T2z4jSKui8p/G07JpIMvKR2QFzgOQ=
Subject key identifier: 82:17:9F:B1:9D:74:D0:39:13:2E:E0:01:66:54:17:6F:A6:E5:CD:16
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 01A1310FEEF9A1CE7631C433C91EAE659F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0E99
Signing time: Mon 12 Oct 2026 17:01:30 +0000
Manifest this update: Mon 12 Oct 2026 17:01:30 +0000
Manifest next update: Tue 13 Oct 2026 17:01:30 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: 6YcatHH+HIhAbublS8y4hZXIe/yTd/u3KamtZC0RL+E=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 17:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:0f:ee:f9:a1:ce:76:31:c4:33:c9:1e:ae:65:9f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Oct 12 17:01:30 2026 GMT
Not After : Oct 13 17:01:30 2026 GMT
Subject: CN=82179fb19d74d039132ee0016654176fa6e5cd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:90:c4:f7:aa:83:d0:70:4b:82:47:4d:82:
f9:3a:0a:9a:bf:90:49:5b:ef:3d:d5:d6:ac:1d:49:
62:4f:c7:41:d2:17:89:5a:ff:eb:86:90:3a:50:b8:
cc:13:10:02:04:62:7b:fa:a5:f0:a7:70:a0:60:1d:
93:51:c4:c2:e2:48:cb:d5:47:ec:97:be:c3:58:aa:
2a:9d:8d:af:f0:5d:5e:36:f2:d7:2a:55:55:7e:85:
cc:f0:11:35:78:ef:5b:ef:78:d3:40:46:5c:17:d2:
0f:b2:67:9e:4a:d4:e3:7c:bc:75:59:33:43:56:f3:
c7:86:73:d0:e8:0a:d7:74:80:39:fe:fd:0b:11:00:
3d:ce:b4:17:fc:7c:78:23:33:2e:16:68:4e:db:6c:
d3:92:7d:af:38:d5:a2:6f:a0:e9:e4:6c:b5:34:ab:
ed:cd:0a:f2:03:7d:21:97:3e:0e:7e:9b:43:5f:b9:
d6:56:2f:cb:7f:ca:e5:2d:5e:13:b1:c7:85:17:39:
b2:53:8b:7d:f8:61:ae:b2:82:8c:2a:1a:59:94:91:
cc:4f:b7:9d:b1:36:f0:5a:08:c4:36:e3:00:b6:d4:
27:03:04:35:dc:4b:fb:69:81:cb:5b:6b:85:0b:5f:
c1:7a:4b:48:ab:bb:8b:ab:23:10:c8:53:0b:19:8d:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:17:9F:B1:9D:74:D0:39:13:2E:E0:01:66:54:17:6F:A6:E5:CD:16
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0a:b4:d3:ba:24:d5:44:83:d8:8b:f4:07:8a:01:4c:86:20:
e2:6f:71:33:6a:1a:86:a3:04:f6:48:f6:28:a8:1b:4c:31:5c:
fe:47:8b:3a:67:c9:ac:64:0e:42:69:fb:e5:d0:fa:bf:c7:5a:
db:92:82:2e:ce:fa:31:63:a7:fe:6b:40:e3:de:78:e4:2a:43:
c0:bc:7d:97:68:17:16:7f:cb:f1:a5:37:b1:8c:a7:f1:a8:24:
a3:ec:c9:c9:8b:09:96:25:58:5c:b4:36:75:49:39:a4:ba:31:
27:15:c4:c8:0f:c7:3e:a2:9d:76:e4:cb:14:e3:9e:91:c6:b6:
ce:d6:05:de:6b:8d:db:93:06:3d:69:ab:7f:0f:ec:f9:65:ec:
5d:0b:12:f3:b7:5a:3a:b2:63:f4:ec:6c:53:a9:fe:50:0d:e7:
d3:54:b2:9b:9a:b0:98:82:eb:36:c6:18:cb:8f:cf:10:61:ae:
13:02:88:8e:e9:47:a8:b9:b9:5a:91:59:0e:e8:6a:73:a7:b9:
a6:c6:02:b4:42:98:44:85:b7:74:e5:dd:63:c2:37:3c:89:11:
c4:ca:6c:80:f8:44:df:cd:12:58:95:89:ab:13:2f:9a:07:f0:
a3:7b:7a:95:90:fc:7f:0f:b6:c3:80:3a:ce:ca:9a:cc:6c:f9:
fc:46:64:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaExD+75oc52McQzyR6uZZ89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZDRmNmU0MjI5NWY1NDAzYjg0NWI1MmJiYTk2Nzk3NjFk
ODg0ZDgwHhcNMjYxMDEyMTcwMTMwWhcNMjYxMDEzMTcwMTMwWjAzMTEwLwYDVQQD
Eyg4MjE3OWZiMTlkNzRkMDM5MTMyZWUwMDE2NjU0MTc2ZmE2ZTVjZDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMmQxPeqg9BwS4JHTYL5Ogqav5BJ
W+891dasHUliT8dB0heJWv/rhpA6ULjMExACBGJ7+qXwp3CgYB2TUcTC4kjL1Ufs
l77DWKoqnY2v8F1eNvLXKlVVfoXM8BE1eO9b73jTQEZcF9IPsmeeStTjfLx1WTND
VvPHhnPQ6ArXdIA5/v0LEQA9zrQX/Hx4IzMuFmhO22zTkn2vONWib6Dp5Gy1NKvt
zQryA30hlz4OfptDX7nWVi/Lf8rlLV4TsceFFzmyU4t9+GGusoKMKhpZlJHMT7ed
sTbwWgjENuMAttQnAwQ13Ev7aYHLW2uFC1/BektIq7uLqyMQyFMLGY00RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIIXn7GddNA5Ey7gAWZUF2+m5c0WMB8GA1UdIwQY
MBaAFELU9uQilfVAO4RbUrupZ5dh2ITYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEt
M2M3NmRkNDkxMDA2LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEtM2M3NmRkNDkxMDA2
LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwq007ok
1USD2Iv0B4oBTIYg4m9xM2oahqME9kj2KKgbTDFc/keLOmfJrGQOQmn75dD6v8da
25KCLs76MWOn/mtA49545CpDwLx9l2gXFn/L8aU3sYyn8agko+zJyYsJliVYXLQ2
dUk5pLoxJxXEyA/HPqKdduTLFOOekca2ztYF3muN25MGPWmrfw/s+WXsXQsS87da
OrJj9OxsU6n+UA3n01Sym5qwmILrNsYYy4/PEGGuEwKIjulHqLm5WpFZDuhqc6e5
psYCtEKYRIW3dOXdY8I3PIkRxMpsgPhE380SWJWJqxMvmgfwo3t6lZD8fw+2w4A6
zsqazGz5/EZkvw==
-----END CERTIFICATE-----
Generated at Tue Oct 13 01:26:29 2026 by rpki-client