Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
File: QbiIzsBviqWb7MzHs6lwGKu3PQs.mft (raw, json)
Hash identifier: YjvNK7STxcRo1aE6Im4hpgq5xqQe54PSmtqeM8DGQaE=
Subject key identifier: 33:78:D0:C7:BF:AD:9A:18:1B:D9:35:B9:FB:5B:B6:D3:8E:E5:A6:A0
Authority key identifier: 41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
Certificate issuer: /CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Certificate serial: 01A0C66AFE31A8D2571FC38218C0EFF602B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
Manifest number: E0
Signing time: Tue 22 Sep 2026 00:01:35 +0000
Manifest this update: Tue 22 Sep 2026 00:01:35 +0000
Manifest next update: Wed 23 Sep 2026 00:01:35 +0000
Files and hashes: 1: QbiIzsBviqWb7MzHs6lwGKu3PQs.crl (hash: 0D4cwPNmTVffAuBNVuL7izDC/tvMatc3sv5ghmQu/20=)
2: _QiQmroF9P3WbIwXaXOwVu2gju0.roa (hash: 9+ii97HZuPAGD+TGVcgVZZlv5SLZbzjKViVe7ESoXRc=)
3: kOQCx-Wt3RfUtND4HBeOaf-__Ao.roa (hash: 6wtyOlYKb3vdJIPgCwFvXGUrxNL2Wzr22WnpzvrLq54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:fe:31:a8:d2:57:1f:c3:82:18:c0:ef:f6:02:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Validity
Not Before: Sep 22 00:01:35 2026 GMT
Not After : Sep 23 00:01:35 2026 GMT
Subject: CN=3378d0c7bfad9a181bd935b9fb5bb6d38ee5a6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:5a:e5:49:33:00:ee:8e:54:47:4e:88:ad:
36:a6:b5:39:9a:b6:76:1b:36:f2:e5:1d:a4:90:ce:
62:a3:20:5c:8f:92:4e:d7:a5:7a:af:67:54:74:23:
b3:66:ad:4f:8c:46:83:e5:8b:29:08:88:86:d8:31:
b7:8b:74:3b:a9:72:28:ec:1f:83:8d:9d:bd:a9:f2:
8f:ad:8a:13:5b:3e:82:e2:db:a7:70:05:fc:96:0d:
86:b1:49:71:b4:9b:c4:7d:6c:60:87:d9:05:03:97:
1a:00:a9:88:92:6b:cb:5c:23:b0:07:8f:ce:b1:5d:
56:7f:61:24:af:91:cb:f7:ec:2f:be:99:bd:14:2f:
e0:10:93:d3:8e:9f:21:a7:49:c6:72:13:e2:7c:33:
20:3a:2e:94:52:4c:50:e5:0a:f3:50:33:72:2c:90:
fb:7b:59:17:6a:67:67:f2:31:7c:dc:1b:dd:d6:79:
8c:cb:8d:53:42:ef:ef:3e:14:7a:46:f2:71:13:d6:
ae:53:49:91:08:43:d7:d2:17:73:59:76:42:07:e3:
0c:75:22:34:66:39:dc:d0:1b:7a:31:7c:15:d1:79:
63:84:91:05:78:d3:13:bf:62:a9:54:a5:c4:cd:2e:
07:6e:70:9f:01:60:9e:d6:1d:c0:af:cf:28:08:92:
6c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:78:D0:C7:BF:AD:9A:18:1B:D9:35:B9:FB:5B:B6:D3:8E:E5:A6:A0
X509v3 Authority Key Identifier:
keyid:41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:24:74:64:03:77:ec:c3:09:db:72:3a:5a:66:92:fb:89:eb:
13:ff:00:7d:d9:0d:04:d9:f4:ab:0d:cf:70:7f:29:28:71:18:
51:b3:e5:3e:ba:2a:8b:3d:f9:d7:43:c6:51:f2:4a:d4:e1:0b:
eb:f1:ed:23:12:62:5e:40:ce:a2:c0:d3:81:57:bb:cd:02:3d:
7e:ba:7d:24:0c:34:54:b5:97:f4:4e:5a:bb:97:e1:40:0e:fd:
df:20:9a:9a:62:22:18:90:01:3e:7a:57:1b:05:c9:da:bf:7c:
b6:9e:14:fa:e0:e3:e7:53:f8:64:41:e4:90:85:11:63:a6:c2:
5d:6e:93:52:7b:78:b1:7a:d3:40:51:ad:be:a6:78:dc:39:ac:
ac:49:f4:d6:65:a4:dd:14:96:f6:6f:f9:1c:d8:a3:1d:51:18:
d6:4d:21:ee:93:ca:d0:1a:c6:e7:2e:ab:0d:33:bb:41:32:43:
21:3e:65:ce:5b:39:ad:16:87:50:ce:ed:39:4e:e8:e6:e9:32:
82:84:e1:5f:95:d6:7b:c4:09:b9:4f:7b:dc:e6:29:6b:c0:4d:
8d:63:e9:9b:70:3d:8c:ef:1b:03:2e:d3:25:09:91:6c:46:9c:
eb:8d:90:57:6b:5a:f7:41:82:0f:23:e1:8a:9e:cb:ba:4f:a6:
e6:33:2b:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGav4xqNJXH8OCGMDv9gK4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjg4OGNlYzA2ZjhhYTU5YmVjY2NjN2IzYTk3MDE4YWJi
NzNkMGIwHhcNMjYwOTIyMDAwMTM1WhcNMjYwOTIzMDAwMTM1WjAzMTEwLwYDVQQD
EygzMzc4ZDBjN2JmYWQ5YTE4MWJkOTM1YjlmYjViYjZkMzhlZTVhNmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzha5UkzAO6OVEdOiK02prU5mrZ2
Gzby5R2kkM5ioyBcj5JO16V6r2dUdCOzZq1PjEaD5YspCIiG2DG3i3Q7qXIo7B+D
jZ29qfKPrYoTWz6C4tuncAX8lg2GsUlxtJvEfWxgh9kFA5caAKmIkmvLXCOwB4/O
sV1Wf2Ekr5HL9+wvvpm9FC/gEJPTjp8hp0nGchPifDMgOi6UUkxQ5QrzUDNyLJD7
e1kXamdn8jF83Bvd1nmMy41TQu/vPhR6RvJxE9auU0mRCEPX0hdzWXZCB+MMdSI0
Zjnc0Bt6MXwV0XljhJEFeNMTv2KpVKXEzS4HbnCfAWCe1h3Ar88oCJJsvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDN40Me/rZoYG9k1uftbttOO5aagMB8GA1UdIwQY
MBaAFEG4iM7Ab4qlm+zMx7OpcBirtz0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJpSXpzQnZpcVdiN016SHM2bHdHS3UzUFFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYjhjYTItOWZjOS00ODk4LWIwNDgt
NTJhMzY4Y2FjNDAzLzEvUWJpSXpzQnZpcVdiN016SHM2bHdHS3UzUFFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9mYjhjYTItOWZjOS00ODk4LWIwNDgtNTJhMzY4Y2FjNDAz
LzEvUWJpSXpzQnZpcVdiN016SHM2bHdHS3UzUFFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACR0ZAN3
7MMJ23I6WmaS+4nrE/8AfdkNBNn0qw3PcH8pKHEYUbPlProqiz3510PGUfJK1OEL
6/HtIxJiXkDOosDTgVe7zQI9frp9JAw0VLWX9E5au5fhQA793yCammIiGJABPnpX
GwXJ2r98tp4U+uDj51P4ZEHkkIURY6bCXW6TUnt4sXrTQFGtvqZ43DmsrEn01mWk
3RSW9m/5HNijHVEY1k0h7pPK0BrG5y6rDTO7QTJDIT5lzls5rRaHUM7tOU7o5uky
goThX5XWe8QJuU973OYpa8BNjWPpm3A9jO8bAy7TJQmRbEac642QV2ta90GCDyPh
ip7Luk+m5jMrQQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 11:34:22 2026 by rpki-client