Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
File: QfpvoAiYrTXuZ_taWhkQXbbB0es.mft (raw, json)
Hash identifier: IU5VzlmS+V1fjm5TwrQZV7n2i1o0zYHVZb01SEh1CWg=
Subject key identifier: 65:16:1F:F0:07:18:9A:8C:87:EC:A4:8D:BB:D4:E8:B5:39:81:DB:86
Authority key identifier: 41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
Certificate issuer: /CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Certificate serial: 01A0C5FCD1788EC59771024DB7202F03AF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
Manifest number: 0253
Signing time: Mon 21 Sep 2026 22:01:15 +0000
Manifest this update: Mon 21 Sep 2026 22:01:15 +0000
Manifest next update: Tue 22 Sep 2026 22:01:15 +0000
Files and hashes: 1: QfpvoAiYrTXuZ_taWhkQXbbB0es.crl (hash: EO6bEMRzFpaYvi5uFHcUe5JZchX2GV0wfrc6hzsQGeE=)
2: tUgLrvuas3A8ffagzPey3XzQQXM.roa (hash: nldIcz0O0+/Bm3m2OMxGodFkGt2Ggg8SRrnW6hRBtug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:d1:78:8e:c5:97:71:02:4d:b7:20:2f:03:af:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Validity
Not Before: Sep 21 22:01:15 2026 GMT
Not After : Sep 22 22:01:15 2026 GMT
Subject: CN=65161ff007189a8c87eca48dbbd4e8b53981db86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:87:84:ab:4d:69:86:b3:3f:f2:26:49:f8:
2d:f8:e9:7a:1d:1f:03:12:8a:56:ec:d5:4e:90:3b:
52:67:e5:3a:d2:81:fd:96:4a:ae:07:e0:73:3a:d3:
df:d0:b0:fb:8c:c0:6a:6e:7b:98:d6:6b:89:ee:db:
75:f5:2c:2c:6f:7f:09:f4:0c:c7:ba:ae:59:4b:c4:
09:57:79:3f:30:71:6c:ed:ce:d6:84:2d:62:80:db:
df:c8:67:92:1f:05:4c:84:4b:1c:c7:31:af:cf:7b:
1c:b0:95:24:65:74:38:e1:3a:79:7f:91:79:71:93:
86:8e:1f:75:b3:f1:b5:dc:f6:74:5a:7f:2f:40:58:
cc:4d:b6:7e:ef:28:84:7a:6a:27:ec:90:c4:71:22:
f4:d6:c8:47:ee:bb:fe:91:c6:65:64:aa:4f:59:7c:
8d:0e:67:42:1c:67:91:93:44:3a:f1:d3:ae:42:0e:
dd:86:5b:48:86:09:e0:58:e3:e1:7e:49:51:9f:81:
ad:4c:a8:82:e9:89:9e:ac:d6:a2:54:79:36:55:c3:
dc:b0:e1:99:5c:ba:97:ac:fb:21:51:d4:53:c6:9b:
8d:35:80:38:8c:41:00:f8:c4:b2:36:96:cc:e0:41:
6e:94:6a:5f:c2:ef:e0:e7:0e:9c:c1:d2:01:70:36:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:16:1F:F0:07:18:9A:8C:87:EC:A4:8D:BB:D4:E8:B5:39:81:DB:86
X509v3 Authority Key Identifier:
keyid:41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:93:b8:b9:17:03:3c:62:6c:ea:ac:26:57:bd:9a:92:4b:d5:
58:01:94:7a:32:58:3d:72:18:38:9c:5c:65:e7:39:96:d4:d3:
f2:2e:34:16:08:c3:30:9b:a5:5b:5a:63:2c:cf:4d:29:e4:41:
14:e7:57:ab:23:60:65:61:fb:05:d0:55:35:23:dc:4c:ac:03:
1f:a9:d4:3a:41:00:c5:c5:25:fe:68:1a:b1:b1:c0:62:44:a0:
61:4c:21:1a:ec:28:41:b1:d7:66:64:a9:7c:6b:63:f5:a8:ab:
1b:bd:b9:40:1c:d0:f3:7a:78:7a:d7:46:7c:3d:96:8f:1d:ef:
4a:e4:e2:7b:d2:25:8d:b3:d2:e8:bc:37:41:01:e1:2a:df:0c:
79:1b:0a:99:39:0c:3c:f7:59:53:ff:c2:0b:06:d1:13:74:ba:
a9:1d:20:61:fd:c6:ff:a5:4d:24:6b:55:64:4c:bc:9b:d8:11:
a8:67:16:13:c3:ca:05:e0:f6:3c:00:87:49:74:47:54:16:8a:
09:20:53:2d:cf:b0:d3:a0:4f:7e:05:a1:da:f2:0c:7d:22:28:
bc:3e:03:b6:bf:d0:34:cc:ec:bb:4f:c3:b1:39:1a:dc:c0:ad:
61:04:3d:73:51:42:81:ef:7f:99:aa:00:0e:12:43:8f:78:93:
cd:78:5c:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF/NF4jsWXcQJNtyAvA6+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmE2ZmEwMDg5OGFkMzVlZTY3ZmI1YTVhMTkxMDVkYjZj
MWQxZWIwHhcNMjYwOTIxMjIwMTE1WhcNMjYwOTIyMjIwMTE1WjAzMTEwLwYDVQQD
Eyg2NTE2MWZmMDA3MTg5YThjODdlY2E0OGRiYmQ0ZThiNTM5ODFkYjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra+HhKtNaYazP/ImSfgt+Ol6HR8D
EopW7NVOkDtSZ+U60oH9lkquB+BzOtPf0LD7jMBqbnuY1muJ7tt19Swsb38J9AzH
uq5ZS8QJV3k/MHFs7c7WhC1igNvfyGeSHwVMhEscxzGvz3scsJUkZXQ44Tp5f5F5
cZOGjh91s/G13PZ0Wn8vQFjMTbZ+7yiEemon7JDEcSL01shH7rv+kcZlZKpPWXyN
DmdCHGeRk0Q68dOuQg7dhltIhgngWOPhfklRn4GtTKiC6YmerNaiVHk2VcPcsOGZ
XLqXrPshUdRTxpuNNYA4jEEA+MSyNpbM4EFulGpfwu/g5w6cwdIBcDZLJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUWH/AHGJqMh+ykjbvU6LU5gduGMB8GA1UdIwQY
MBaAFEH6b6AImK017mf7WloZEF22wdHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jZTg5NDMtMGVhNC00NmEzLTk1ZmMt
YWQ3YTAyZjE5NDZhLzEvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jZTg5NDMtMGVhNC00NmEzLTk1ZmMtYWQ3YTAyZjE5NDZh
LzEvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZO4uRcD
PGJs6qwmV72akkvVWAGUejJYPXIYOJxcZec5ltTT8i40FgjDMJulW1pjLM9NKeRB
FOdXqyNgZWH7BdBVNSPcTKwDH6nUOkEAxcUl/mgasbHAYkSgYUwhGuwoQbHXZmSp
fGtj9airG725QBzQ83p4etdGfD2Wjx3vSuTie9IljbPS6Lw3QQHhKt8MeRsKmTkM
PPdZU//CCwbRE3S6qR0gYf3G/6VNJGtVZEy8m9gRqGcWE8PKBeD2PACHSXRHVBaK
CSBTLc+w06BPfgWh2vIMfSIovD4Dtr/QNMzsu0/DsTka3MCtYQQ9c1FCge9/maoA
DhJDj3iTzXhctw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 05:18:50 2026 by rpki-client