Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
File: QKljngI9_Ik-xp2nFrhKtdZOpZw.mft (raw, json)
Hash identifier: Ht7QeUpFZSZjbgXz5rGpgmYrLpRsw9CY7BuwH6SQ4UI=
Subject key identifier: B8:4F:9A:33:68:1E:4F:27:68:84:45:11:7C:28:F5:E0:30:D3:87:94
Authority key identifier: 40:A9:63:9E:02:3D:FC:89:3E:C6:9D:A7:16:B8:4A:B5:D6:4E:A5:9C
Certificate issuer: /CN=40a9639e023dfc893ec69da716b84ab5d64ea59c
Certificate serial: 019FAC08B9004DD56A56ABA90A90A2747C68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
Manifest number: 3F
Signing time: Wed 29 Jul 2026 04:01:20 +0000
Manifest this update: Wed 29 Jul 2026 04:01:20 +0000
Manifest next update: Thu 30 Jul 2026 04:01:20 +0000
Files and hashes: 1: QKljngI9_Ik-xp2nFrhKtdZOpZw.crl (hash: hO+vMhy4i1rWcqJ4EBuuSayuLSjuOVGVnuqUMz6FSYQ=)
2: ou0GbJ1blaoMkgv99wOuI85TEgs.roa (hash: oR49PdheVHE66AKe4AhTIFXe+kYWY/wSYwudCN274ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:b9:00:4d:d5:6a:56:ab:a9:0a:90:a2:74:7c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a9639e023dfc893ec69da716b84ab5d64ea59c
Validity
Not Before: Jul 29 04:01:20 2026 GMT
Not After : Jul 30 04:01:20 2026 GMT
Subject: CN=b84f9a33681e4f27688445117c28f5e030d38794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:f8:39:71:60:a6:b6:dc:93:a9:37:bf:21:
d7:41:c1:ea:76:7d:06:46:58:f0:24:a1:48:7f:61:
6e:a7:b1:67:e4:62:b3:cb:1c:97:78:44:c3:35:e9:
9e:65:54:b9:cd:15:54:5c:77:bb:92:aa:10:6c:22:
43:cf:1a:fb:36:f2:8e:9e:8d:0f:b1:da:64:36:10:
6c:16:10:bb:1c:2a:19:74:92:7a:04:3f:dd:ef:3d:
07:fb:c2:1f:17:b4:b1:3d:9f:fb:25:18:28:c4:91:
0d:f6:c7:9e:2e:89:33:8d:f0:34:6f:68:66:e7:af:
d8:1b:09:be:2f:05:4e:2e:6d:02:5b:b6:85:bf:f6:
a2:7b:07:d0:af:c9:3d:b9:f6:b7:97:d9:49:49:15:
42:0a:b8:57:14:d5:23:48:35:1f:1b:b6:73:be:13:
59:18:22:75:4f:1e:9a:fc:e2:57:3f:68:05:e7:49:
80:63:6c:be:72:e1:6e:da:7e:0d:14:63:75:7f:ee:
10:6d:40:0b:d4:9d:37:04:cc:cb:30:e8:99:4b:e1:
1d:99:c8:ec:1c:03:19:79:e7:bf:33:57:38:f4:40:
c2:58:82:c3:d3:3e:38:c4:42:48:78:c7:5e:23:ff:
16:63:e9:4c:f0:55:2d:1c:91:4b:b1:f6:84:ba:7f:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4F:9A:33:68:1E:4F:27:68:84:45:11:7C:28:F5:E0:30:D3:87:94
X509v3 Authority Key Identifier:
keyid:40:A9:63:9E:02:3D:FC:89:3E:C6:9D:A7:16:B8:4A:B5:D6:4E:A5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:52:9e:17:31:96:18:fb:35:4e:79:97:12:b9:ad:54:22:12:
c2:d1:d3:b7:18:d9:cd:fe:c2:5c:9e:7b:32:dc:7d:a4:b4:fb:
1e:2a:33:0f:37:26:94:ec:e4:34:8f:72:50:3c:0e:e6:14:e1:
29:d0:9f:91:6f:9f:59:71:f0:f3:f7:99:0a:95:3a:2e:9d:de:
53:d9:5c:c9:df:28:df:a7:09:a7:42:07:09:d0:df:00:1f:dd:
c2:72:7d:49:c0:b2:08:7a:d1:c3:10:c1:78:d4:b7:02:6d:d6:
a6:c2:f7:63:a3:5f:61:91:39:2c:b1:98:e1:96:37:b0:93:9f:
72:0b:2e:f8:c9:2f:11:d2:8f:b4:3a:46:34:c2:73:ad:5c:54:
ae:48:8a:2d:79:05:df:48:22:21:a9:dd:ab:cf:56:28:ac:ed:
0e:7b:8b:d9:fd:47:a7:0b:bd:eb:25:66:cc:9d:2e:60:9a:aa:
8b:63:58:7c:01:96:0a:11:2e:99:c6:d7:b3:58:e4:36:e9:26:
11:c6:f9:40:ff:3b:d8:4f:d7:1f:91:cb:81:74:52:d5:b3:c0:
9d:69:51:68:d8:3a:63:92:ee:3f:9e:15:81:a9:2c:c9:65:c5:
f4:ca:1e:94:8b:52:40:53:b7:e7:5b:e1:96:08:17:62:28:d0:
a7:8a:4b:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCLkATdVqVqupCpCidHxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYTk2MzllMDIzZGZjODkzZWM2OWRhNzE2Yjg0YWI1ZDY0
ZWE1OWMwHhcNMjYwNzI5MDQwMTIwWhcNMjYwNzMwMDQwMTIwWjAzMTEwLwYDVQQD
EyhiODRmOWEzMzY4MWU0ZjI3Njg4NDQ1MTE3YzI4ZjVlMDMwZDM4Nzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS74OXFgprbck6k3vyHXQcHqdn0G
RljwJKFIf2Fup7Fn5GKzyxyXeETDNemeZVS5zRVUXHe7kqoQbCJDzxr7NvKOno0P
sdpkNhBsFhC7HCoZdJJ6BD/d7z0H+8IfF7SxPZ/7JRgoxJEN9seeLokzjfA0b2hm
56/YGwm+LwVOLm0CW7aFv/aiewfQr8k9ufa3l9lJSRVCCrhXFNUjSDUfG7ZzvhNZ
GCJ1Tx6a/OJXP2gF50mAY2y+cuFu2n4NFGN1f+4QbUAL1J03BMzLMOiZS+Edmcjs
HAMZeee/M1c49EDCWILD0z44xEJIeMdeI/8WY+lM8FUtHJFLsfaEun/aBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhPmjNoHk8naIRFEXwo9eAw04eUMB8GA1UdIwQY
MBaAFECpY54CPfyJPsadpxa4SrXWTqWcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtsam5nSTlfSWsteHAybkZyaEt0ZFpPcFp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS83MDIzMGYtNWMwYi00MzA4LWFiNGUt
N2FmNjI4MmMyY2U4LzEvUUtsam5nSTlfSWsteHAybkZyaEt0ZFpPcFp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS83MDIzMGYtNWMwYi00MzA4LWFiNGUtN2FmNjI4MmMyY2U4
LzEvUUtsam5nSTlfSWsteHAybkZyaEt0ZFpPcFp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAplKeFzGW
GPs1TnmXErmtVCISwtHTtxjZzf7CXJ57Mtx9pLT7HiozDzcmlOzkNI9yUDwO5hTh
KdCfkW+fWXHw8/eZCpU6Lp3eU9lcyd8o36cJp0IHCdDfAB/dwnJ9ScCyCHrRwxDB
eNS3Am3WpsL3Y6NfYZE5LLGY4ZY3sJOfcgsu+MkvEdKPtDpGNMJzrVxUrkiKLXkF
30giIandq89WKKztDnuL2f1Hpwu96yVmzJ0uYJqqi2NYfAGWChEumcbXs1jkNukm
Ecb5QP872E/XH5HLgXRS1bPAnWlRaNg6Y5LuP54VgaksyWXF9MoelItSQFO351vh
lggXYijQp4pL5g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:06:44 2026 by rpki-client