Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: h7nvM+a9Z87xMd4Qyi+6Y0LOBO2vG5Q1w/AvONziAmA=
Subject key identifier: D3:BD:A2:22:55:88:69:B4:D6:5A:61:EB:B5:53:AB:E1:5F:26:4F:3F
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 01A0C6336FE9B7488FC1156D4935BBB7014B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 0910
Signing time: Mon 21 Sep 2026 23:00:54 +0000
Manifest this update: Mon 21 Sep 2026 23:00:54 +0000
Manifest next update: Tue 22 Sep 2026 23:00:54 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: m7wNd2mMp22ol0zOXMFBxTY0FU4IoxWNjy01f1vgdlM=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:6f:e9:b7:48:8f:c1:15:6d:49:35:bb:b7:01:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Sep 21 23:00:54 2026 GMT
Not After : Sep 22 23:00:54 2026 GMT
Subject: CN=d3bda222558869b4d65a61ebb553abe15f264f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:e5:da:7c:72:2e:2c:a7:ef:1e:2e:c8:f0:
0d:48:5a:7a:67:87:38:f7:d4:55:64:46:60:09:21:
61:1d:51:8b:aa:a1:e6:a7:1d:6d:b5:06:32:ed:9e:
3f:3a:43:a9:c7:54:fc:80:2f:f2:b2:d3:02:17:5e:
03:5d:5e:5a:a3:1b:fc:95:d2:a1:0a:60:e4:43:93:
ea:2d:fa:2a:42:43:ba:26:25:ed:da:da:8b:4b:2d:
56:79:07:ef:1c:3f:e5:5d:9f:b7:7f:9e:d1:53:1b:
05:4a:b4:39:17:e4:66:9f:ac:db:04:99:ea:f9:7d:
ff:ff:7e:cc:ac:cd:75:79:82:e0:82:b0:e1:70:c6:
b8:68:fe:f7:7e:37:7f:00:23:6e:24:5e:39:15:5f:
3f:7e:68:fb:bd:a4:b8:c3:9a:50:4b:59:da:8c:56:
b2:9e:63:cd:c6:e4:bd:77:d1:ac:35:9b:71:6b:1c:
59:7f:50:6e:12:bc:cd:8b:a0:23:d6:b3:d2:a1:e0:
2f:ba:48:4d:10:c5:5c:34:e9:8c:5d:28:16:8c:77:
e5:01:19:52:a4:0d:36:35:42:a2:64:e8:cb:3e:31:
e7:bf:10:da:88:af:be:5b:2d:68:81:c4:1b:64:d8:
04:cc:1b:e1:e6:6a:59:83:e7:5b:37:a3:7b:a2:ae:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BD:A2:22:55:88:69:B4:D6:5A:61:EB:B5:53:AB:E1:5F:26:4F:3F
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:90:ce:e3:72:c4:53:39:79:28:a2:2f:9d:a5:ae:a5:23:e1:
a9:c4:e2:44:ca:98:5f:9d:34:ec:2c:18:4c:27:28:ca:e2:84:
bb:7a:21:8b:00:08:2e:ea:a8:b8:f9:92:34:f6:14:5c:b0:c4:
49:19:61:6b:24:f8:52:98:5d:f9:ff:55:6b:3d:5d:06:f5:c6:
9b:aa:4c:04:28:e4:f3:b8:f0:10:78:1a:51:2f:05:cd:49:9a:
aa:c3:cf:dc:21:41:6e:ee:bb:80:4c:1f:13:11:6d:2f:16:3d:
97:46:51:44:91:cd:0e:6a:77:68:17:39:07:19:31:56:b0:fb:
6a:3c:21:39:e9:b5:7e:17:96:72:df:1d:82:7e:22:74:a3:45:
fe:45:d8:62:6d:d7:71:0c:35:c5:f4:b5:44:da:04:f8:34:79:
5a:1f:bf:6e:bb:86:fc:13:c6:77:9d:ff:ee:31:56:33:57:73:
6b:68:52:df:6e:3e:de:57:97:ca:58:80:d2:03:e3:96:ae:52:
28:8e:df:88:1e:a1:75:cb:44:fe:7f:76:91:18:90:ea:0f:6e:
47:87:32:a1:86:1b:19:5d:d2:54:98:f6:fc:92:bc:17:8c:b8:
df:cb:78:4f:d4:34:4e:c3:21:c2:9d:8e:e8:b2:9a:1f:a3:11:
a7:81:20:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGM2/pt0iPwRVtSTW7twFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMmZlNzBmNGNlZjEwMzc2ODM2MTUyZjM4ZTRlMDg1MzJj
YzdiOWYwHhcNMjYwOTIxMjMwMDU0WhcNMjYwOTIyMjMwMDU0WjAzMTEwLwYDVQQD
EyhkM2JkYTIyMjU1ODg2OWI0ZDY1YTYxZWJiNTUzYWJlMTVmMjY0ZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRbl2nxyLiyn7x4uyPANSFp6Z4c4
99RVZEZgCSFhHVGLqqHmpx1ttQYy7Z4/OkOpx1T8gC/ystMCF14DXV5aoxv8ldKh
CmDkQ5PqLfoqQkO6JiXt2tqLSy1WeQfvHD/lXZ+3f57RUxsFSrQ5F+Rmn6zbBJnq
+X3//37MrM11eYLggrDhcMa4aP73fjd/ACNuJF45FV8/fmj7vaS4w5pQS1najFay
nmPNxuS9d9GsNZtxaxxZf1BuErzNi6Aj1rPSoeAvukhNEMVcNOmMXSgWjHflARlS
pA02NUKiZOjLPjHnvxDaiK++Wy1ogcQbZNgEzBvh5mpZg+dbN6N7oq6g0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNO9oiJViGm01lph67VTq+FfJk8/MB8GA1UdIwQY
MBaAFEMv5w9M7xA3aDYVLzjk4IUyzHufMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUt
MTg5ZDAwYTMzM2VlLzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zMDc2MDctNTcwNi00ZTQ0LWJiOGUtMTg5ZDAwYTMzM2Vl
LzEvUXlfbkQwenZFRGRvTmhVdk9PVGdoVExNZTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJDO43LE
Uzl5KKIvnaWupSPhqcTiRMqYX5007CwYTCcoyuKEu3ohiwAILuqouPmSNPYUXLDE
SRlhayT4Uphd+f9Vaz1dBvXGm6pMBCjk87jwEHgaUS8FzUmaqsPP3CFBbu67gEwf
ExFtLxY9l0ZRRJHNDmp3aBc5BxkxVrD7ajwhOem1fheWct8dgn4idKNF/kXYYm3X
cQw1xfS1RNoE+DR5Wh+/bruG/BPGd53/7jFWM1dza2hS324+3leXyliA0gPjlq5S
KI7fiB6hdctE/n92kRiQ6g9uR4cyoYYbGV3SVJj2/JK8F4y438t4T9Q0TsMhwp2O
6LKaH6MRp4Egrw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:35:57 2026 by rpki-client