Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: a+w05wjPa9Bj9AAWlIyflG4Hl/9ZZfXTg4QHoWeEH4M=
Subject key identifier: 41:8D:1A:A4:D6:2A:44:7E:81:25:B4:50:22:D1:F1:E5:BF:A3:E9:87
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 01A0C70F16E82EAC5F8D1E77C17F8F1558B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 03:00:49 +0000
Manifest this update: Tue 22 Sep 2026 03:00:49 +0000
Manifest next update: Wed 23 Sep 2026 03:00:49 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: aDTBiZcxRr43HZ8AlyBWKzOyk1dB1YVBu1A4OqIhibo=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0f:16:e8:2e:ac:5f:8d:1e:77:c1:7f:8f:15:58:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Sep 22 03:00:49 2026 GMT
Not After : Sep 23 03:00:49 2026 GMT
Subject: CN=418d1aa4d62a447e8125b45022d1f1e5bfa3e987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:8d:69:83:53:7e:0b:ce:29:a7:aa:7b:32:
f3:17:12:44:c4:2f:61:b4:62:fd:96:14:18:8a:40:
e6:e0:22:81:17:74:f5:14:47:4c:ce:d8:9f:af:40:
6f:9e:95:c8:77:ea:d8:b5:27:9c:b2:76:4f:57:04:
69:a4:09:5f:e6:a5:c3:9a:27:9c:0d:70:97:85:32:
d4:b1:4b:f0:74:ca:32:ee:4f:48:cf:bc:51:72:52:
48:ae:3c:c3:96:2d:0b:ef:36:ba:e3:6e:8f:dd:b3:
a1:39:6a:07:7b:76:43:9b:a1:16:9d:5a:0a:90:15:
8c:3c:2a:8c:74:cc:97:f1:d0:69:e9:f8:99:69:38:
fd:a7:5c:84:19:87:86:22:30:38:4d:10:f1:79:d7:
06:69:5c:17:fa:c1:71:19:4a:d7:c1:78:db:ae:ea:
15:2e:3b:73:4f:a4:f6:ab:da:9e:3d:58:61:7c:1d:
e6:db:36:28:09:e6:d2:74:7a:d2:4e:a7:29:eb:e2:
ce:45:a6:1a:77:d4:89:82:78:d0:8a:b3:4e:76:8e:
ae:04:f9:4a:36:2e:98:7e:00:c1:7f:c0:12:c2:80:
0e:3b:31:19:7e:b6:98:71:2d:ab:45:af:a5:e9:f8:
96:8d:81:c4:c4:78:6b:0b:cb:d4:b4:19:64:8c:31:
c1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8D:1A:A4:D6:2A:44:7E:81:25:B4:50:22:D1:F1:E5:BF:A3:E9:87
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:17:04:ad:bd:39:ab:7e:bf:0d:25:bd:3c:e1:82:b7:89:da:
6d:46:96:ba:7f:95:37:1d:8b:5e:4d:34:80:1c:33:28:a7:a0:
d5:24:dc:0c:54:fd:7b:1b:7f:c1:13:66:d9:82:13:c7:71:9f:
91:0c:89:a6:b5:74:44:5b:a3:89:52:7b:59:dc:32:ef:8b:20:
f0:32:03:92:f2:d8:37:fc:0e:b4:a6:a8:8e:78:ad:08:53:2c:
8f:71:4e:48:b8:66:1f:cb:cd:34:3e:e0:80:1e:be:4a:28:eb:
34:6c:55:a6:15:8d:9f:af:ff:68:ac:55:82:78:1d:1f:c8:57:
31:9b:61:3d:15:e3:2c:cc:33:3d:cf:76:f9:43:b2:1a:7f:58:
fa:06:6a:3e:d7:c7:64:7f:8d:f5:22:f3:55:56:b1:01:6a:56:
02:77:c9:0a:75:37:eb:58:13:c9:6c:6a:e9:e3:e5:76:44:6a:
43:2a:28:8e:a1:d2:a0:8a:ae:ed:9d:d9:dc:46:31:2f:8d:11:
db:59:3e:40:72:51:31:6d:d4:5b:71:87:51:af:64:96:21:f7:
c1:25:32:48:ab:08:eb:e1:ee:ee:9d:a0:a3:0e:33:3e:fc:95:
95:6a:4b:05:7d:3e:cf:12:4b:1b:2a:03:4e:f6:5e:1a:39:f0:
92:40:5a:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHDxboLqxfjR53wX+PFVi3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTQwODhjNzdiZDEyNjg3ZmQ0YmE5ZmUzMTU5ZWE4MDU4
ODhlZDIwHhcNMjYwOTIyMDMwMDQ5WhcNMjYwOTIzMDMwMDQ5WjAzMTEwLwYDVQQD
Eyg0MThkMWFhNGQ2MmE0NDdlODEyNWI0NTAyMmQxZjFlNWJmYTNlOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZWNaYNTfgvOKaeqezLzFxJExC9h
tGL9lhQYikDm4CKBF3T1FEdMztifr0BvnpXId+rYtSecsnZPVwRppAlf5qXDmiec
DXCXhTLUsUvwdMoy7k9Iz7xRclJIrjzDli0L7za6426P3bOhOWoHe3ZDm6EWnVoK
kBWMPCqMdMyX8dBp6fiZaTj9p1yEGYeGIjA4TRDxedcGaVwX+sFxGUrXwXjbruoV
LjtzT6T2q9qePVhhfB3m2zYoCebSdHrSTqcp6+LORaYad9SJgnjQirNOdo6uBPlK
Ni6YfgDBf8ASwoAOOzEZfraYcS2rRa+l6fiWjYHExHhrC8vUtBlkjDHBaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGNGqTWKkR+gSW0UCLR8eW/o+mHMB8GA1UdIwQY
MBaAFEIUCIx3vRJof9S6n+MVnqgFiI7SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9iYjVlY2UtMDEyZS00MTk0LTk5ODAt
N2UyMWRiNWEyZWY5LzEvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9iYjVlY2UtMDEyZS00MTk0LTk5ODAtN2UyMWRiNWEyZWY5
LzEvUWhRSWpIZTlFbWhfMUxxZjR4V2VxQVdJanRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvhcErb05
q36/DSW9POGCt4nabUaWun+VNx2LXk00gBwzKKeg1STcDFT9ext/wRNm2YITx3Gf
kQyJprV0RFujiVJ7Wdwy74sg8DIDkvLYN/wOtKaojnitCFMsj3FOSLhmH8vNND7g
gB6+SijrNGxVphWNn6//aKxVgngdH8hXMZthPRXjLMwzPc92+UOyGn9Y+gZqPtfH
ZH+N9SLzVVaxAWpWAnfJCnU361gTyWxq6ePldkRqQyoojqHSoIqu7Z3Z3EYxL40R
21k+QHJRMW3UW3GHUa9kliH3wSUySKsI6+Hu7p2gow4zPvyVlWpLBX0+zxJLGyoD
TvZeGjnwkkBaSA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:29:58 2026 by rpki-client