Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
File: QSkmah4uyYN6UxNE-0zHVcK01Jk.mft (raw, json)
Hash identifier: Pvhxy02fvFn8sSntxQMsQuJfYxD8yRcJWov94n6Jn5c=
Subject key identifier: 23:85:81:74:8B:42:47:52:B9:4A:81:B4:48:19:E8:8B:82:47:61:A3
Authority key identifier: 41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
Certificate issuer: /CN=4129266a1e2ec9837a531344fb4cc755c2b4d499
Certificate serial: 01A0C5205103D8A63D943B962092A8D182AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
Manifest number: 63
Signing time: Mon 21 Sep 2026 18:00:24 +0000
Manifest this update: Mon 21 Sep 2026 18:00:24 +0000
Manifest next update: Tue 22 Sep 2026 18:00:24 +0000
Files and hashes: 1: 8fGG8Tv4WNAQ4RCHYBbNJs1eKto.roa (hash: SgO/P537q3vAhj6DO7s9EJP2JmPeHZPclIyQgjWdkQo=)
2: QSkmah4uyYN6UxNE-0zHVcK01Jk.crl (hash: v+QbelBShy+WgzjcFCcXiuWxqrErfImOGIEkz8iKzbI=)
3: sg6AMDBnEClTk14yZrKH_UdfS-0.roa (hash: uREnj3d/6nKXsYDGOx95oE8DlNkz3JuX/7dowk4t+kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:20:51:03:d8:a6:3d:94:3b:96:20:92:a8:d1:82:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4129266a1e2ec9837a531344fb4cc755c2b4d499
Validity
Not Before: Sep 21 18:00:24 2026 GMT
Not After : Sep 22 18:00:24 2026 GMT
Subject: CN=238581748b424752b94a81b44819e88b824761a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c0:54:6c:c6:4a:3c:7c:be:f4:3b:85:ba:cc:
08:31:a4:11:94:a9:9d:07:93:a8:3d:45:c5:3a:50:
63:53:32:0c:63:36:26:1e:8f:4c:7f:44:4b:8f:69:
56:b1:7b:8c:d2:2d:80:26:f2:0d:80:bf:ed:3d:ca:
12:3e:73:88:dd:e8:a8:2f:86:54:5c:25:ed:50:62:
bb:8f:95:04:33:6a:09:04:85:f8:03:3c:52:aa:41:
dc:3c:8c:77:48:17:6f:3d:5b:f0:2a:85:0b:9f:08:
0f:f8:eb:0d:ff:48:23:79:50:6c:77:f5:c7:65:2b:
1a:a4:c8:9e:bf:09:e1:54:e4:99:fa:de:18:12:90:
7a:2d:6a:db:1e:bb:8d:d1:25:3d:3a:78:03:de:5f:
16:d3:d6:d4:15:ec:09:f8:0b:c8:9f:fd:c3:f7:a2:
c5:47:41:35:e9:8d:84:3b:ba:2d:b8:4d:a9:22:0e:
83:b2:9f:ca:24:e1:ba:e2:f5:ea:af:6e:bb:51:07:
29:31:17:77:b3:4d:d7:eb:d6:24:44:c5:8e:6c:ec:
1d:01:cc:3c:fa:f6:e3:78:16:e1:83:69:ac:22:81:
1e:50:be:50:85:84:20:e2:1d:f9:62:d5:12:5c:0f:
8d:b6:d0:e3:64:67:04:50:af:7c:4a:51:6c:f3:db:
da:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:85:81:74:8B:42:47:52:B9:4A:81:B4:48:19:E8:8B:82:47:61:A3
X509v3 Authority Key Identifier:
keyid:41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dd:a0:fa:85:84:30:96:90:d9:a9:80:ea:1b:a5:a5:25:d8:
7b:d2:16:2d:2a:a4:72:a6:98:bc:8a:b8:a0:82:7e:dc:2b:67:
d3:e7:44:f9:ec:c5:c6:cd:a4:cf:4e:9f:d4:79:aa:ad:8f:f5:
fe:7e:bc:8a:72:19:5e:71:96:4a:28:cc:c9:d4:3f:b9:5c:66:
56:07:ea:eb:f7:d9:d9:93:d2:da:e6:06:dc:cf:4a:65:37:16:
4f:8c:bd:99:41:6e:e9:37:42:5d:90:55:f1:9f:44:e9:80:5c:
d7:76:64:4f:42:52:0c:cc:f1:99:10:db:a3:e4:7c:b3:1c:03:
37:30:98:c4:29:f2:d3:83:e1:5e:44:a5:69:cc:b2:fb:d7:8b:
50:0c:f5:fb:c5:78:fc:8e:bf:76:4e:b3:9f:ae:16:aa:94:76:
43:97:e7:fe:a9:32:21:0f:c5:40:36:95:43:7f:54:48:0d:ea:
f2:7b:5d:f5:e8:1a:98:08:52:b1:34:c3:39:35:6f:21:07:4e:
4c:cd:65:f5:15:6f:06:df:97:41:a6:e0:fc:aa:cc:f0:fd:8d:
34:d0:e4:3a:26:a6:32:ce:6e:d3:2f:64:fb:54:ad:61:ce:2d:
49:3e:4c:c4:2e:eb:75:21:0d:21:19:9f:9f:c0:f2:f5:8f:fd:
1d:20:50:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFIFED2KY9lDuWIJKo0YKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjkyNjZhMWUyZWM5ODM3YTUzMTM0NGZiNGNjNzU1YzJi
NGQ0OTkwHhcNMjYwOTIxMTgwMDI0WhcNMjYwOTIyMTgwMDI0WjAzMTEwLwYDVQQD
EygyMzg1ODE3NDhiNDI0NzUyYjk0YTgxYjQ0ODE5ZTg4YjgyNDc2MWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MBUbMZKPHy+9DuFuswIMaQRlKmd
B5OoPUXFOlBjUzIMYzYmHo9Mf0RLj2lWsXuM0i2AJvINgL/tPcoSPnOI3eioL4ZU
XCXtUGK7j5UEM2oJBIX4AzxSqkHcPIx3SBdvPVvwKoULnwgP+OsN/0gjeVBsd/XH
ZSsapMievwnhVOSZ+t4YEpB6LWrbHruN0SU9OngD3l8W09bUFewJ+AvIn/3D96LF
R0E16Y2EO7otuE2pIg6Dsp/KJOG64vXqr267UQcpMRd3s03X69YkRMWObOwdAcw8
+vbjeBbhg2msIoEeUL5QhYQg4h35YtUSXA+NttDjZGcEUK98SlFs89vaqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCOFgXSLQkdSuUqBtEgZ6IuCR2GjMB8GA1UdIwQY
MBaAFEEpJmoeLsmDelMTRPtMx1XCtNSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNrbWFoNHV5WU42VXhORS0wekhWY0swMUprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iMzlmYWItYWVjOS00ZTU2LWE3NmIt
ZmQ0ZTQwNzVlYzg3LzEvUVNrbWFoNHV5WU42VXhORS0wekhWY0swMUprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iMzlmYWItYWVjOS00ZTU2LWE3NmItZmQ0ZTQwNzVlYzg3
LzEvUVNrbWFoNHV5WU42VXhORS0wekhWY0swMUprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAd2g+oWE
MJaQ2amA6hulpSXYe9IWLSqkcqaYvIq4oIJ+3Ctn0+dE+ezFxs2kz06f1HmqrY/1
/n68inIZXnGWSijMydQ/uVxmVgfq6/fZ2ZPS2uYG3M9KZTcWT4y9mUFu6TdCXZBV
8Z9E6YBc13ZkT0JSDMzxmRDbo+R8sxwDNzCYxCny04PhXkSlacyy+9eLUAz1+8V4
/I6/dk6zn64WqpR2Q5fn/qkyIQ/FQDaVQ39USA3q8ntd9egamAhSsTTDOTVvIQdO
TM1l9RVvBt+XQabg/KrM8P2NNNDkOiamMs5u0y9k+1StYc4tST5MxC7rdSENIRmf
n8Dy9Y/9HSBQHw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:56:49 2026 by rpki-client