Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: J3msy467GmIHPE9OcpsnkSzffDFMHXBxKpaR4sqjBVg=
Subject key identifier: E1:55:EA:7E:E1:87:CE:B3:6E:8F:96:7D:81:9E:5B:7C:B0:34:6F:0B
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 01A0DFBC62F43BC826174B9931E162D818F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 0514
Signing time: Sat 26 Sep 2026 22:01:00 +0000
Manifest this update: Sat 26 Sep 2026 22:01:00 +0000
Manifest next update: Sun 27 Sep 2026 22:01:00 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: a8N92Pcr/coe6PIzbehkyAgOPNuYCmtRyPUUdHhCb0Q=)
2: m_rKth0WblNoPGrjkNfcn6MmMxc.roa (hash: S0D1n4kwGONLCb2yvnuQTTGiDLAbMsWlgwxGBJpbiPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:62:f4:3b:c8:26:17:4b:99:31:e1:62:d8:18:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Sep 26 22:01:00 2026 GMT
Not After : Sep 27 22:01:00 2026 GMT
Subject: CN=e155ea7ee187ceb36e8f967d819e5b7cb0346f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:02:8c:28:13:76:92:3e:29:ee:ca:74:9a:
a1:25:d2:0d:22:3b:71:f5:3e:c2:b7:9e:15:c5:5b:
20:e1:21:82:33:09:c3:06:78:0f:07:f7:8e:9e:79:
e7:9f:1e:b0:f8:f9:4c:3e:81:2d:9d:f3:8b:95:99:
a8:a3:1d:a5:00:de:a9:36:d7:6a:2b:1b:53:44:a4:
b7:62:69:6b:90:ec:c4:10:bb:9b:2e:e4:21:d4:8c:
fd:0e:71:e4:fc:8d:6e:08:45:80:e8:1b:5a:ff:b2:
37:a0:58:56:a1:59:49:32:3a:53:f5:5b:70:15:22:
83:1f:9a:71:8f:1b:cf:07:0f:35:50:e3:c1:da:32:
46:3d:f3:88:29:72:cd:2e:50:bb:b7:b7:ba:70:f7:
ab:7c:89:af:e0:f4:a2:27:2e:2f:2f:28:bc:3b:ba:
16:09:0e:ed:4b:57:4c:9b:ef:27:2c:9e:29:eb:f7:
c8:1d:7a:42:3f:3a:2f:e1:2c:77:e8:ca:57:e6:2f:
8f:7a:f8:2b:ea:78:bd:6c:39:df:84:04:6b:ac:b8:
f2:22:7e:dc:79:a4:41:cf:ed:5f:fe:65:bb:17:05:
21:2a:1c:33:db:b3:28:05:1e:04:f6:43:60:bb:e0:
50:9a:02:1a:ad:de:04:9f:f2:62:f4:21:a2:a0:50:
c7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:55:EA:7E:E1:87:CE:B3:6E:8F:96:7D:81:9E:5B:7C:B0:34:6F:0B
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cb:20:33:b5:71:86:92:26:87:4a:fb:b2:b5:04:d3:29:a7:
53:2b:f2:db:5b:f8:16:6e:7e:27:8b:7f:6f:7e:3c:88:48:33:
6d:9a:35:6c:ed:b1:26:17:1f:cc:00:f8:e3:f0:be:46:a8:dc:
1b:8b:0f:64:ef:4f:eb:33:a5:da:cb:68:1d:d4:5b:2f:a4:92:
75:94:27:68:7b:a5:44:dc:80:07:9a:ef:27:80:c0:52:70:b9:
87:a9:ca:d3:c8:d9:c4:aa:f1:db:83:21:42:fd:d4:46:d9:75:
57:d6:b7:3f:fb:f8:df:95:fd:a6:67:40:f6:23:42:6f:8f:e8:
6c:05:bf:9f:81:9d:c2:3a:79:f9:54:f4:6d:4a:b5:ca:01:e2:
43:9d:0f:80:ea:c7:20:cc:51:c8:b8:32:88:21:68:76:fc:af:
94:bc:d5:01:a2:e7:bf:29:02:8d:18:9c:4e:2f:5e:0e:9f:be:
f3:6c:70:9a:4e:a1:03:67:b5:d9:62:b1:1b:db:c3:ad:ce:99:
b4:d0:10:06:27:f2:7b:ac:2e:1b:46:f9:1b:4b:a7:f9:d2:da:
0f:9e:8a:f9:5b:58:20:f8:6d:01:36:9a:53:5f:0f:20:3a:08:
e0:b5:8e:0f:3c:9b:11:76:c8:4b:f5:e7:25:90:a3:f5:86:54:
e0:ab:e5:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvGL0O8gmF0uZMeFi2Bj5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDA5NjUzODRkYzQ0NDg3YTgzMTcxYTZkNWQwNWE5NGE2
YWQ2N2MwHhcNMjYwOTI2MjIwMTAwWhcNMjYwOTI3MjIwMTAwWjAzMTEwLwYDVQQD
EyhlMTU1ZWE3ZWUxODdjZWIzNmU4Zjk2N2Q4MTllNWI3Y2IwMzQ2ZjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+ICjCgTdpI+Ke7KdJqhJdINIjtx
9T7Ct54VxVsg4SGCMwnDBngPB/eOnnnnnx6w+PlMPoEtnfOLlZmoox2lAN6pNtdq
KxtTRKS3YmlrkOzEELubLuQh1Iz9DnHk/I1uCEWA6Bta/7I3oFhWoVlJMjpT9Vtw
FSKDH5pxjxvPBw81UOPB2jJGPfOIKXLNLlC7t7e6cPerfImv4PSiJy4vLyi8O7oW
CQ7tS1dMm+8nLJ4p6/fIHXpCPzov4Sx36MpX5i+Pevgr6ni9bDnfhARrrLjyIn7c
eaRBz+1f/mW7FwUhKhwz27MoBR4E9kNgu+BQmgIard4En/Ji9CGioFDHcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFV6n7hh86zbo+WfYGeW3ywNG8LMB8GA1UdIwQY
MBaAFEPQllOE3ERIeoMXGm1dBalKatZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYt
ODFhNzgzMTlmZDZhLzEvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9jZjc2MTctOTI2ZC00YzRiLTk5NzYtODFhNzgzMTlmZDZh
LzEvUTlDV1U0VGNSRWg2Z3hjYWJWMEZxVXBxMW53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApssgM7Vx
hpImh0r7srUE0ymnUyvy21v4Fm5+J4t/b348iEgzbZo1bO2xJhcfzAD44/C+Rqjc
G4sPZO9P6zOl2stoHdRbL6SSdZQnaHulRNyAB5rvJ4DAUnC5h6nK08jZxKrx24Mh
Qv3URtl1V9a3P/v435X9pmdA9iNCb4/obAW/n4Gdwjp5+VT0bUq1ygHiQ50PgOrH
IMxRyLgyiCFodvyvlLzVAaLnvykCjRicTi9eDp++82xwmk6hA2e12WKxG9vDrc6Z
tNAQBifye6wuG0b5G0un+dLaD56K+VtYIPhtATaaU18PIDoI4LWODzybEXbIS/Xn
JZCj9YZU4KvlIQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:16:58 2026 by rpki-client