Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
File: QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft (raw, json)
Hash identifier: pKqYmE7eftvDu633VFo5P59UVWV1j3rmUOmy5sQ8RqI=
Subject key identifier: 2E:6A:1D:FD:6A:04:BE:F1:0D:00:47:56:3E:4E:D1:FC:7D:72:FA:3B
Authority key identifier: 40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
Certificate issuer: /CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Certificate serial: 019D9962250332621FBF91F18922F0099868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
Manifest number: 0509
Signing time: Fri 17 Apr 2026 03:00:39 +0000
Manifest this update: Fri 17 Apr 2026 03:00:39 +0000
Manifest next update: Sat 18 Apr 2026 03:00:39 +0000
Files and hashes: 1: QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl (hash: 9SkOQV1/zoKMjHOgQnMzXlWqJ82QhlXFeYeNu5YYu54=)
2: wMAaF9FeE8vQPeGbyh-_gFZr-RQ.roa (hash: U3G2ZKAfz9i+c+9iabqEffqSxjMJIKuTC8d9C/LqbOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:25:03:32:62:1f:bf:91:f1:89:22:f0:09:98:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405ffc74ae92386afb7ce770f0390e90d4cde306
Validity
Not Before: Apr 17 03:00:39 2026 GMT
Not After : Apr 18 03:00:39 2026 GMT
Subject: CN=2e6a1dfd6a04bef10d0047563e4ed1fc7d72fa3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:3b:b5:19:7f:d0:39:96:da:e7:00:6d:59:
e1:d2:5a:41:f5:de:aa:5f:33:2f:4d:ee:d6:8e:36:
49:93:eb:86:a5:ec:68:a4:3d:13:a2:59:1d:bf:d7:
0e:40:24:0d:7a:fb:da:e0:0a:e3:4f:75:e0:9f:79:
04:5e:d9:d3:28:b1:d1:79:3c:2b:71:f9:da:08:f5:
db:b7:1c:10:4a:b6:57:a2:67:5a:cb:37:ec:f7:f8:
ba:1d:a4:6f:6e:1c:27:2c:82:da:6f:44:e8:56:cf:
3c:31:51:8f:c4:36:1e:ad:38:49:62:1c:9d:d0:0a:
08:c2:94:dc:f2:89:30:cb:2a:3d:3f:5a:93:99:0a:
17:90:85:d1:30:09:37:07:7e:a0:7c:a6:98:8b:3c:
a8:88:e3:df:2b:b5:0d:a6:22:f5:4c:5c:c1:3e:72:
db:a9:84:a6:58:40:c7:a1:99:cc:3b:77:49:ba:1d:
78:b8:1a:b8:ae:e6:71:05:6f:89:fd:3b:f3:20:e0:
09:91:dc:38:3a:a8:77:98:eb:1b:76:14:93:d8:86:
dc:08:2a:9c:25:f5:d2:7f:3d:2d:ac:59:d6:3e:c8:
7e:d8:9b:a1:99:60:57:26:5a:dd:c7:83:46:57:8e:
30:d0:f7:ee:c0:98:f1:d6:33:5a:4c:42:2a:4e:f3:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:6A:1D:FD:6A:04:BE:F1:0D:00:47:56:3E:4E:D1:FC:7D:72:FA:3B
X509v3 Authority Key Identifier:
keyid:40:5F:FC:74:AE:92:38:6A:FB:7C:E7:70:F0:39:0E:90:D4:CD:E3:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF_8dK6SOGr7fOdw8DkOkNTN4wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b1fd7a-2e26-4a5d-802d-7246aefcd272/1/QF_8dK6SOGr7fOdw8DkOkNTN4wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:38:ef:a0:9b:95:9c:22:58:f7:ea:cd:50:4f:be:75:ab:1f:
72:23:7e:15:49:36:25:66:e3:eb:20:fb:4c:17:a2:6d:82:84:
13:05:57:f3:3b:31:71:65:cd:e1:6b:1c:33:8a:5f:f4:96:11:
1a:12:05:2e:8e:07:15:8e:83:20:42:dc:23:64:12:62:a6:92:
e0:66:e8:97:16:08:4e:d5:4c:2c:de:1b:47:8f:60:df:e1:33:
b2:73:53:4f:81:4e:14:66:68:93:48:2d:00:80:38:e6:6b:08:
56:6f:cc:26:0c:8c:6f:dc:77:a4:a9:b3:02:42:30:7e:44:46:
d3:60:a4:df:fd:e2:f9:33:ee:b7:e4:35:c3:ab:ce:0d:f8:fc:
19:12:1c:a8:36:c5:9c:8d:84:95:cc:fa:fe:20:f9:de:6e:4d:
f1:5b:6c:10:f7:56:c9:b9:7f:a1:e4:7f:30:0b:4d:29:2e:ac:
47:ec:e0:0d:e2:be:ec:48:52:1b:9f:48:35:e0:5b:84:46:1c:
0f:af:87:61:16:4a:58:31:6c:c9:b1:b7:62:73:b2:dd:73:d5:
01:79:66:c2:7d:70:96:07:ed:57:24:03:67:bc:95:3a:1c:84:
e4:a4:7b:4e:ae:41:ef:ef:14:f9:ab:be:61:83:80:26:8f:09:
9e:71:58:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYiUDMmIfv5HxiSLwCZhoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNWZmYzc0YWU5MjM4NmFmYjdjZTc3MGYwMzkwZTkwZDRj
ZGUzMDYwHhcNMjYwNDE3MDMwMDM5WhcNMjYwNDE4MDMwMDM5WjAzMTEwLwYDVQQD
EygyZTZhMWRmZDZhMDRiZWYxMGQwMDQ3NTYzZTRlZDFmYzdkNzJmYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn287tRl/0DmW2ucAbVnh0lpB9d6q
XzMvTe7WjjZJk+uGpexopD0Tolkdv9cOQCQNevva4ArjT3Xgn3kEXtnTKLHReTwr
cfnaCPXbtxwQSrZXomdayzfs9/i6HaRvbhwnLILab0ToVs88MVGPxDYerThJYhyd
0AoIwpTc8okwyyo9P1qTmQoXkIXRMAk3B36gfKaYizyoiOPfK7UNpiL1TFzBPnLb
qYSmWEDHoZnMO3dJuh14uBq4ruZxBW+J/TvzIOAJkdw4Oqh3mOsbdhST2IbcCCqc
JfXSfz0trFnWPsh+2JuhmWBXJlrdx4NGV44w0PfuwJjx1jNaTEIqTvNJjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5qHf1qBL7xDQBHVj5O0fx9cvo7MB8GA1UdIwQY
MBaAFEBf/HSukjhq+3zncPA5DpDUzeMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iMWZkN2EtMmUyNi00YTVkLTgwMmQt
NzI0NmFlZmNkMjcyLzEvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9iMWZkN2EtMmUyNi00YTVkLTgwMmQtNzI0NmFlZmNkMjcy
LzEvUUZfOGRLNlNPR3I3Zk9kdzhEa09rTlRONHdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTjvoJuV
nCJY9+rNUE++dasfciN+FUk2JWbj6yD7TBeibYKEEwVX8zsxcWXN4WscM4pf9JYR
GhIFLo4HFY6DIELcI2QSYqaS4GbolxYITtVMLN4bR49g3+EzsnNTT4FOFGZok0gt
AIA45msIVm/MJgyMb9x3pKmzAkIwfkRG02Ck3/3i+TPut+Q1w6vODfj8GRIcqDbF
nI2Elcz6/iD53m5N8VtsEPdWybl/oeR/MAtNKS6sR+zgDeK+7EhSG59INeBbhEYc
D6+HYRZKWDFsybG3YnOy3XPVAXlmwn1wlgftVyQDZ7yVOhyE5KR7Tq5B7+8U+au+
YYOAJo8JnnFYzQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:54 2026 by rpki-client