Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: icHgoYzNqH+4KrLLXz2cU5scBdw49hKEUTQhxrV2zw4=
Subject key identifier: F6:B1:99:69:86:53:BC:17:38:AB:1C:67:FC:7F:91:88:7F:86:63:24
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 01A0CD7E8B447DEBD0891C79150269AD2E41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 09:00:17 +0000
Manifest this update: Wed 23 Sep 2026 09:00:17 +0000
Manifest next update: Thu 24 Sep 2026 09:00:17 +0000
Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: Plrjy47bIZB/u08TxtUFtQDiogglhyLA+0Na54n6BVI=)
2: Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa (hash: LMUW9+NLiMGnI7ZWrV590GSKNkkWYi8Hg05UOVRU3Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:8b:44:7d:eb:d0:89:1c:79:15:02:69:ad:2e:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Sep 23 09:00:17 2026 GMT
Not After : Sep 24 09:00:17 2026 GMT
Subject: CN=f6b199698653bc1738ab1c67fc7f91887f866324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:12:8c:a3:68:0f:cf:39:8c:49:88:09:29:71:
09:d4:02:91:58:1e:58:06:56:e2:fc:68:f6:11:6d:
56:3d:35:0d:46:f6:dc:91:a5:0e:ea:8b:85:e1:cd:
f0:79:2a:0e:80:f6:4b:85:49:47:64:07:48:8e:e9:
ef:5a:1f:52:15:bd:fd:29:df:53:21:9f:e0:3a:c1:
94:da:5a:b9:af:4c:83:bd:26:19:87:21:73:da:5e:
8c:c5:b2:7d:9d:90:f7:f7:d7:82:7a:37:42:c2:17:
50:f1:e2:75:b2:91:3a:a8:8e:3f:d4:e4:f2:a8:bf:
41:48:e3:0f:4a:fa:76:62:67:01:c9:b5:e7:18:85:
da:36:23:80:15:84:5f:d2:83:8d:73:8d:88:16:2b:
bb:2f:b8:f7:e0:49:6f:65:c9:68:84:35:64:17:6a:
c7:12:6b:4b:e0:9c:d2:59:c8:a0:e6:3c:ad:f2:8d:
91:5e:1f:68:83:22:64:fe:91:ea:ac:ba:2a:d4:13:
d5:88:4c:b1:77:fb:5b:e1:65:ed:3c:7f:90:0f:e4:
74:9e:5b:65:a8:62:39:fb:7f:fa:6d:de:de:f2:4a:
f0:1c:48:0f:ff:67:9e:74:4e:fd:e0:98:39:db:2d:
fd:d4:9d:96:f4:fe:d0:5c:75:36:e9:a7:ae:ae:2c:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B1:99:69:86:53:BC:17:38:AB:1C:67:FC:7F:91:88:7F:86:63:24
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d1:63:18:50:5a:52:f1:94:0c:e5:4c:3c:64:bb:e2:9e:fc:
82:cd:f7:0e:9d:19:52:9b:0c:cf:90:92:24:56:36:e5:d0:6a:
98:e3:88:c7:19:fa:a3:39:75:27:be:c6:12:9d:66:57:50:ce:
58:d8:ce:ca:b0:01:f6:d5:80:2b:3a:10:1c:13:34:48:94:10:
43:9e:55:20:6f:ce:13:a2:05:1f:bd:f0:3b:09:0c:ae:13:21:
05:07:d9:70:a0:2a:c8:ae:f2:6f:8e:40:3d:4f:3e:34:d6:63:
c0:37:1c:29:4d:3b:7f:c7:83:03:df:33:f1:65:9f:74:80:e2:
61:f2:95:46:ae:21:83:be:14:f3:54:8e:93:cb:af:12:bb:91:
bb:96:79:07:7e:8a:01:e7:f6:44:66:5d:b5:e3:f0:b2:2b:3c:
e8:05:03:a0:fd:1a:a0:9d:c9:11:22:01:00:aa:8d:74:10:48:
97:6c:de:67:c7:f1:09:9e:20:7a:5c:ab:61:9d:70:21:dc:b3:
b0:8d:15:f4:2b:10:29:29:0e:da:10:23:ba:6a:f1:31:15:c8:
80:4d:03:c8:c3:b6:00:40:50:5c:6c:fa:20:e4:3a:f9:f5:dc:
64:c6:8c:bf:9d:29:ac:7a:10:bc:1e:ce:74:56:80:8a:0d:ee:
e1:54:52:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDNfotEfevQiRx5FQJprS5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOWIxY2YyMWQyMGY4YzZmOTQ2NDFlMzMyN2U0NTU1ZTJl
NDExMDIwHhcNMjYwOTIzMDkwMDE3WhcNMjYwOTI0MDkwMDE3WjAzMTEwLwYDVQQD
EyhmNmIxOTk2OTg2NTNiYzE3MzhhYjFjNjdmYzdmOTE4ODdmODY2MzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RKMo2gPzzmMSYgJKXEJ1AKRWB5Y
Blbi/Gj2EW1WPTUNRvbckaUO6ouF4c3weSoOgPZLhUlHZAdIjunvWh9SFb39Kd9T
IZ/gOsGU2lq5r0yDvSYZhyFz2l6MxbJ9nZD399eCejdCwhdQ8eJ1spE6qI4/1OTy
qL9BSOMPSvp2YmcBybXnGIXaNiOAFYRf0oONc42IFiu7L7j34ElvZclohDVkF2rH
EmtL4JzSWcig5jyt8o2RXh9ogyJk/pHqrLoq1BPViEyxd/tb4WXtPH+QD+R0nltl
qGI5+3/6bd7e8krwHEgP/2eedE794Jg52y391J2W9P7QXHU26aeuriyo2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaxmWmGU7wXOKscZ/x/kYh/hmMkMB8GA1UdIwQY
MBaAFEKbHPIdIPjG+UZB4zJ+RVXi5BECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3Yzgt
ZTU2ZTczODM4MGRlLzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yMDQ1MDktOGEzMi00YjI4LTk3YzgtZTU2ZTczODM4MGRl
LzEvUXBzYzhoMGctTWI1UmtIak1uNUZWZUxrRVFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGNFjGFBa
UvGUDOVMPGS74p78gs33Dp0ZUpsMz5CSJFY25dBqmOOIxxn6ozl1J77GEp1mV1DO
WNjOyrAB9tWAKzoQHBM0SJQQQ55VIG/OE6IFH73wOwkMrhMhBQfZcKAqyK7yb45A
PU8+NNZjwDccKU07f8eDA98z8WWfdIDiYfKVRq4hg74U81SOk8uvEruRu5Z5B36K
Aef2RGZdtePwsis86AUDoP0aoJ3JESIBAKqNdBBIl2zeZ8fxCZ4gelyrYZ1wIdyz
sI0V9CsQKSkO2hAjumrxMRXIgE0DyMO2AEBQXGz6IOQ6+fXcZMaMv50prHoQvB7O
dFaAig3u4VRSbw==
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:36:57 2026 by rpki-client