Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
File: qIe76LBerQ4uRIT4HMjTzTTVJMU.mft (raw, json)
Hash identifier: Vy6G6+wqn0jd9g4i3IxPhNNMs/sz8XVdy9X6GqbYxmY=
Subject key identifier: 39:DB:A8:01:B6:7C:17:B4:F3:EC:25:7E:79:0D:AA:D2:2A:10:0B:C4
Authority key identifier: A8:87:BB:E8:B0:5E:AD:0E:2E:44:84:F8:1C:C8:D3:CD:34:D5:24:C5
Certificate issuer: /CN=a887bbe8b05ead0e2e4484f81cc8d3cd34d524c5
Certificate serial: 01A0C632C9B4D020F51B7C74C4DCCB5E343D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
Manifest number: 5E
Signing time: Mon 21 Sep 2026 23:00:12 +0000
Manifest this update: Mon 21 Sep 2026 23:00:12 +0000
Manifest next update: Tue 22 Sep 2026 23:00:12 +0000
Files and hashes: 1: XGU20dvPzEFLqBGtUHgnqD1uNvc.roa (hash: 0V5jjdVeq5pbW8veVvISrROlp96kJcnyw85WkEAIovA=)
2: qIe76LBerQ4uRIT4HMjTzTTVJMU.crl (hash: BErwG0XCItuWk93E6nbuUG7zOAVskTV5jMKQnbAWtLc=)
3: qbLZvmNVHDw6ywTDJfp7jpRSx3Q.roa (hash: FbKNMJ+Crca/g+9TD+lTtkZskVkL4sJsLikc3sygVLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:c9:b4:d0:20:f5:1b:7c:74:c4:dc:cb:5e:34:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a887bbe8b05ead0e2e4484f81cc8d3cd34d524c5
Validity
Not Before: Sep 21 23:00:12 2026 GMT
Not After : Sep 22 23:00:12 2026 GMT
Subject: CN=39dba801b67c17b4f3ec257e790daad22a100bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:b4:6d:90:e6:c3:89:c0:a8:b0:17:39:58:
4b:5f:f0:1d:e8:a8:78:45:8a:57:9a:d3:a5:3f:7b:
d9:d5:04:bd:74:98:be:a6:1f:58:ae:2a:59:96:52:
99:68:31:d8:10:8c:48:a0:44:de:79:75:ea:9d:e4:
50:08:d0:6b:26:e1:8a:c2:96:fd:ae:12:48:07:1a:
0e:86:13:b2:a2:cf:5b:2d:c7:6a:af:6a:07:8e:ed:
71:2d:22:fa:69:02:31:dd:ac:5e:2a:e0:10:ce:84:
6f:72:03:54:aa:03:3d:99:48:7a:8d:c5:d2:00:c4:
14:a3:f7:2e:85:40:0e:5e:98:66:3f:b7:64:ae:45:
2f:0d:0e:7a:a4:58:09:77:4f:0a:5b:b7:cc:28:3c:
bb:80:0a:d4:51:d3:81:08:ef:f9:93:77:a8:84:08:
95:2d:3e:ec:db:08:21:51:d8:bd:25:ba:0f:17:12:
63:29:ee:be:19:e7:2a:9f:06:36:8b:b7:df:ad:5e:
79:6f:e1:d3:06:d4:9d:c9:51:90:a6:7b:7b:86:bd:
b6:2e:ca:ab:89:4c:17:f6:20:bd:95:0c:27:93:75:
9c:45:29:6d:0e:6e:b9:03:69:6d:84:38:a3:5a:b3:
d4:75:0b:db:cf:e6:e3:d4:80:d3:24:b5:93:b2:ff:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DB:A8:01:B6:7C:17:B4:F3:EC:25:7E:79:0D:AA:D2:2A:10:0B:C4
X509v3 Authority Key Identifier:
keyid:A8:87:BB:E8:B0:5E:AD:0E:2E:44:84:F8:1C:C8:D3:CD:34:D5:24:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:25:0e:da:0b:de:4f:77:fd:c1:d2:90:c7:85:f8:55:76:e4:
9c:ec:bf:18:6e:50:d5:17:40:98:f3:3a:f0:01:45:c8:b1:94:
69:00:88:f8:45:68:17:2b:10:2f:ed:af:32:7c:18:2a:0f:87:
c9:5f:5f:dd:2a:02:3d:64:8c:87:84:9b:60:05:60:a7:96:44:
e9:6e:b1:54:6f:58:a9:be:ab:a5:0a:57:cb:da:f1:5f:08:2f:
ad:3e:c8:55:fd:df:a1:0d:6e:f6:45:1f:4f:a9:f1:58:b3:7d:
7d:0e:b6:35:ea:f9:63:cc:27:5e:f3:8f:7a:06:79:b9:10:20:
7d:cf:04:23:d1:a3:59:d1:79:6a:b3:79:18:e7:30:ae:52:d6:
f0:ea:ac:48:50:25:25:50:c7:6e:7f:6f:f6:0f:41:08:a2:c1:
9d:67:e7:24:fe:b1:df:26:1c:22:1a:76:b3:1b:c2:07:86:fa:
db:d6:2a:fb:74:a8:8a:5a:4b:e4:ee:ac:d5:0d:21:c4:52:3f:
35:81:9b:3a:53:70:9e:a8:3d:f8:20:03:f5:82:e4:3b:cf:7d:
d7:5b:c8:ad:8a:87:8a:b1:3b:66:f6:dc:ce:5b:2b:9d:b5:bc:
90:7d:42:52:b0:94:87:5c:3c:d6:9c:3a:53:9b:7a:81:da:32:
7c:9e:f7:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGMsm00CD1G3x0xNzLXjQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODdiYmU4YjA1ZWFkMGUyZTQ0ODRmODFjYzhkM2NkMzRk
NTI0YzUwHhcNMjYwOTIxMjMwMDEyWhcNMjYwOTIyMjMwMDEyWjAzMTEwLwYDVQQD
EygzOWRiYTgwMWI2N2MxN2I0ZjNlYzI1N2U3OTBkYWFkMjJhMTAwYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gK0bZDmw4nAqLAXOVhLX/Ad6Kh4
RYpXmtOlP3vZ1QS9dJi+ph9YripZllKZaDHYEIxIoETeeXXqneRQCNBrJuGKwpb9
rhJIBxoOhhOyos9bLcdqr2oHju1xLSL6aQIx3axeKuAQzoRvcgNUqgM9mUh6jcXS
AMQUo/cuhUAOXphmP7dkrkUvDQ56pFgJd08KW7fMKDy7gArUUdOBCO/5k3eohAiV
LT7s2wghUdi9JboPFxJjKe6+GecqnwY2i7ffrV55b+HTBtSdyVGQpnt7hr22Lsqr
iUwX9iC9lQwnk3WcRSltDm65A2lthDijWrPUdQvbz+bj1IDTJLWTsv/g7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnbqAG2fBe08+wlfnkNqtIqEAvEMB8GA1UdIwQY
MBaAFKiHu+iwXq0OLkSE+BzI08001STFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUllNzZMQmVyUTR1UklUNEhNalR6VFRWSk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNTk2YmUtNTJmZi00MGEzLWIwZDct
YzE2NzExN2Y4NjQ1LzEvcUllNzZMQmVyUTR1UklUNEhNalR6VFRWSk1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNTk2YmUtNTJmZi00MGEzLWIwZDctYzE2NzExN2Y4NjQ1
LzEvcUllNzZMQmVyUTR1UklUNEhNalR6VFRWSk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESUO2gve
T3f9wdKQx4X4VXbknOy/GG5Q1RdAmPM68AFFyLGUaQCI+EVoFysQL+2vMnwYKg+H
yV9f3SoCPWSMh4SbYAVgp5ZE6W6xVG9Yqb6rpQpXy9rxXwgvrT7IVf3foQ1u9kUf
T6nxWLN9fQ62Ner5Y8wnXvOPegZ5uRAgfc8EI9GjWdF5arN5GOcwrlLW8OqsSFAl
JVDHbn9v9g9BCKLBnWfnJP6x3yYcIhp2sxvCB4b629Yq+3SoilpL5O6s1Q0hxFI/
NYGbOlNwnqg9+CAD9YLkO89911vIrYqHirE7ZvbczlsrnbW8kH1CUrCUh1w81pw6
U5t6gdoyfJ73FQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:00:34 2026 by rpki-client