Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: vUrQ6ggsr6hgrJjwLVuZivmXSId0u3psLUG2Eu+8y9A=
Subject key identifier: 7E:7A:53:8E:0C:B0:A6:2C:4E:F3:71:E2:A9:19:93:A9:92:DA:3D:36
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 01A12BB2331E8E96850DF53742620FB1AE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 17D8
Signing time: Sun 11 Oct 2026 16:01:01 +0000
Manifest this update: Sun 11 Oct 2026 16:01:01 +0000
Manifest next update: Mon 12 Oct 2026 16:01:01 +0000
Files and hashes: 1: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: nBOIsKiKC5UV4AnsCNwpoVeEyDCvjJ6QjHZbt1jGGFc=)
2: SsfnBHuvPDESg4pTMTaqtv9nT-Q.roa (hash: ZrITCydyp3ig8q1pUL+0pHbv4soXKIcGIYDQm4wHpvo=)
3: c-KZaw3UumwWkGCg1_3weGS8B-U.roa (hash: 2AcxA0Jqp/dgXDEXPcxhpKLcjp+xB4KSRrsphLc65kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 16:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:33:1e:8e:96:85:0d:f5:37:42:62:0f:b1:ae:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Oct 11 16:01:01 2026 GMT
Not After : Oct 12 16:01:01 2026 GMT
Subject: CN=7e7a538e0cb0a62c4ef371e2a91993a992da3d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:01:39:ef:c6:4f:1d:95:84:49:07:30:7a:b0:
2b:9c:4d:4c:fe:da:1f:bd:d5:1b:44:e9:74:e8:55:
57:50:31:6e:d0:4d:07:33:28:31:7f:73:72:43:51:
26:90:1a:64:51:78:f5:6a:54:6e:64:01:5d:bf:a2:
98:59:08:e5:7f:c2:3e:82:fa:00:eb:86:68:9f:94:
00:42:ac:0b:af:16:e8:6a:fd:f3:52:40:71:8e:7b:
8c:d3:59:ce:71:dc:60:dc:18:1b:4f:2b:a1:8f:d0:
48:30:b2:c5:fc:39:90:33:51:77:15:58:7f:0a:70:
eb:19:b3:10:aa:49:b5:3a:60:d2:05:e3:53:d1:4d:
f7:9f:e3:10:e7:8c:2e:dd:2d:1f:52:5b:b4:e8:7a:
d9:20:ab:e8:b5:02:9a:b0:f5:6b:ce:8f:fb:0b:ac:
70:ce:9f:ee:a5:9b:50:6b:6d:e9:7a:75:bd:e7:7b:
e3:92:a2:ee:ab:c9:fd:68:af:53:ed:22:b9:c8:26:
62:67:b8:2d:78:dd:3f:f9:19:1b:3e:16:69:2e:f0:
84:de:f9:7b:15:19:d8:1c:a6:f2:bd:19:5e:50:ab:
4a:c8:9d:16:1b:1e:eb:5a:a5:ad:a5:90:1c:8e:5b:
8f:38:2e:2e:2a:16:72:ab:88:3d:a3:5f:9c:27:db:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7A:53:8E:0C:B0:A6:2C:4E:F3:71:E2:A9:19:93:A9:92:DA:3D:36
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:b6:ef:fa:13:e5:38:d7:c3:c8:3c:72:0b:0f:0c:4a:23:3b:
3e:da:e7:c0:3f:be:68:ce:3c:fe:ae:7e:ab:64:a2:73:bd:60:
39:27:4d:a6:a1:89:1f:99:d5:70:56:06:b7:19:37:99:f2:48:
6f:ee:f6:e7:3a:fa:8e:cd:05:2a:13:47:32:9c:c9:63:9b:4b:
fe:a3:03:9a:a8:d8:c2:c9:df:41:24:97:e5:e5:7d:c2:32:7a:
50:91:42:46:07:65:f5:5c:93:35:36:f7:17:b2:b0:9a:02:3d:
10:7a:f1:f4:f1:df:c5:d6:a7:08:5a:37:ef:e5:90:98:5a:81:
76:05:a4:8c:7c:35:f1:a8:a3:28:53:0e:33:57:52:f8:dc:af:
08:8b:c3:90:9f:bf:f4:df:1f:eb:9d:53:42:fe:fc:21:cd:16:
3b:84:fc:93:70:59:7d:c0:40:19:5e:7e:eb:12:c1:45:81:3e:
16:c7:20:88:6c:a9:30:5d:a1:01:2f:90:c7:80:b1:1f:aa:14:
34:78:11:da:da:f7:96:30:1b:57:8c:c9:2c:34:07:47:ee:3d:
f6:2f:3d:9d:2f:59:b2:59:56:af:91:84:9a:6b:7d:ee:0f:e7:
e3:87:44:a7:d6:e9:95:47:c5:de:67:fb:62:2f:ba:8c:d0:ee:
36:14:29:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErsjMejpaFDfU3QmIPsa5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNTEyNTYxZmM0ZWU1NGI3OTljNWFmNDI4ZmZmYmNiYWZk
NDU0ZWYwHhcNMjYxMDExMTYwMTAxWhcNMjYxMDEyMTYwMTAxWjAzMTEwLwYDVQQD
Eyg3ZTdhNTM4ZTBjYjBhNjJjNGVmMzcxZTJhOTE5OTNhOTkyZGEzZDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gE578ZPHZWESQcwerArnE1M/tof
vdUbROl06FVXUDFu0E0HMygxf3NyQ1EmkBpkUXj1alRuZAFdv6KYWQjlf8I+gvoA
64Zon5QAQqwLrxboav3zUkBxjnuM01nOcdxg3BgbTyuhj9BIMLLF/DmQM1F3FVh/
CnDrGbMQqkm1OmDSBeNT0U33n+MQ54wu3S0fUlu06HrZIKvotQKasPVrzo/7C6xw
zp/upZtQa23penW953vjkqLuq8n9aK9T7SK5yCZiZ7gteN0/+RkbPhZpLvCE3vl7
FRnYHKbyvRleUKtKyJ0WGx7rWqWtpZAcjluPOC4uKhZyq4g9o1+cJ9vUiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH56U44MsKYsTvNx4qkZk6mS2j02MB8GA1UdIwQY
MBaAFEJRJWH8TuVLeZxa9Cj/+8uv1FTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUt
N2E3MmUyNmM4OTE4LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUtN2E3MmUyNmM4OTE4
LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrbv+hPl
ONfDyDxyCw8MSiM7PtrnwD++aM48/q5+q2Sic71gOSdNpqGJH5nVcFYGtxk3mfJI
b+725zr6js0FKhNHMpzJY5tL/qMDmqjYwsnfQSSX5eV9wjJ6UJFCRgdl9VyTNTb3
F7KwmgI9EHrx9PHfxdanCFo37+WQmFqBdgWkjHw18aijKFMOM1dS+NyvCIvDkJ+/
9N8f651TQv78Ic0WO4T8k3BZfcBAGV5+6xLBRYE+FscgiGypMF2hAS+Qx4CxH6oU
NHgR2tr3ljAbV4zJLDQHR+499i89nS9ZsllWr5GEmmt97g/n44dEp9bplUfF3mf7
Yi+6jNDuNhQp3w==
-----END CERTIFICATE-----
Generated at Mon Oct 12 02:10:21 2026 by rpki-client