Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
File: QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft (raw, json)
Hash identifier: by7PLUslJmyfyqAA4P87H/gxep1sHgtbtEsrf2/dEpg=
Subject key identifier: 14:F5:CC:C8:9E:54:3D:A3:0B:2F:E7:42:3E:9A:EB:F0:A8:CD:A8:96
Authority key identifier: 42:4B:EC:A0:1A:91:E4:49:67:6C:24:97:91:32:EA:C3:31:83:3F:54
Certificate issuer: /CN=424beca01a91e449676c24979132eac331833f54
Certificate serial: 01A0C256031EE81D6F2FF0FCB82C28D3E954
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
Manifest number: B7
Signing time: Mon 21 Sep 2026 05:00:11 +0000
Manifest this update: Mon 21 Sep 2026 05:00:11 +0000
Manifest next update: Tue 22 Sep 2026 05:00:11 +0000
Files and hashes: 1: QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl (hash: ETNo4bBQmhOr7R4u/EKOzwzWUuo8Hb1R7qapz4M/eDA=)
2: de2C8qkGD2C8WyY4VZXQCLj4xeA.roa (hash: Z2unCzdVebpB8G2PHQLt6XCekXAlV21Yon5IAjnmYi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:03:1e:e8:1d:6f:2f:f0:fc:b8:2c:28:d3:e9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424beca01a91e449676c24979132eac331833f54
Validity
Not Before: Sep 21 05:00:11 2026 GMT
Not After : Sep 22 05:00:11 2026 GMT
Subject: CN=14f5ccc89e543da30b2fe7423e9aebf0a8cda896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:da:91:c1:22:b1:72:e2:fb:3c:9b:15:8d:
70:79:02:21:be:b6:9f:68:93:3c:40:50:be:b7:43:
3b:a2:e2:a0:56:b7:0e:5e:18:40:a8:3a:5e:c1:81:
a5:8c:66:b6:77:c6:5e:d7:c5:8d:09:94:53:7f:c3:
86:7f:40:44:fc:6b:17:d0:e7:cf:c5:97:d3:8f:8f:
42:f5:29:8c:7d:f3:42:1d:e1:46:7d:f1:63:18:a3:
18:8a:eb:80:a3:29:55:f0:b2:0b:03:a6:fa:d9:89:
8b:bb:4e:4f:03:af:10:64:0f:83:f7:f4:9d:4f:7a:
74:ac:49:64:c2:b6:c6:84:43:f7:38:a5:b5:78:29:
fc:e4:bf:41:25:0b:10:af:0c:86:8e:a2:b7:ad:3c:
f6:a1:be:2c:1d:b4:7e:8b:89:4f:ed:f4:22:19:68:
52:39:90:60:23:58:02:51:d5:d3:e2:cb:77:b6:07:
f6:ee:3d:77:ca:86:da:b1:28:a5:92:06:c4:42:1a:
02:48:48:f4:d0:79:93:d9:51:08:79:ee:c5:53:05:
af:d2:0e:f3:f7:3f:e9:94:98:dd:42:fe:e5:89:8e:
24:5c:8f:43:13:ff:70:69:3f:c9:89:86:b6:f5:fe:
a8:97:33:2a:3d:cf:9c:cd:70:32:be:f0:aa:fe:f6:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:CC:C8:9E:54:3D:A3:0B:2F:E7:42:3E:9A:EB:F0:A8:CD:A8:96
X509v3 Authority Key Identifier:
keyid:42:4B:EC:A0:1A:91:E4:49:67:6C:24:97:91:32:EA:C3:31:83:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1a:20:06:21:18:80:4f:67:e3:62:02:f9:67:87:cb:28:01:
da:0b:25:ea:62:69:fd:78:51:b5:06:81:a1:b9:3e:9a:d5:57:
b1:6d:58:05:a5:ff:a2:37:5b:bb:22:88:ae:89:5d:16:e2:65:
16:6b:4b:85:99:44:dd:c0:ab:71:00:06:5c:3f:8a:21:4e:42:
21:fd:ec:af:a7:d2:c5:02:aa:41:36:71:92:be:c6:01:8f:56:
c0:a6:35:de:f8:4a:ff:9c:74:7e:68:cb:9e:10:ec:7a:47:5b:
ae:ab:2b:2a:e3:6f:90:64:52:f9:43:37:d8:c1:1b:00:ed:86:
4b:d6:2e:56:09:d3:26:c4:97:13:5e:32:2a:7e:60:dc:7f:d4:
64:ab:77:b1:70:64:34:63:87:5f:e7:40:a4:61:dd:37:1f:8b:
e0:47:b6:70:14:31:f3:d5:6d:ac:34:91:3a:c3:17:24:de:82:
c2:7a:4a:e1:b4:8c:c8:72:f2:57:33:26:28:c0:e4:37:e5:0f:
8d:9d:6b:25:b8:3d:00:f4:b7:c7:11:3a:91:57:95:f9:f8:7f:
29:51:e2:74:64:4a:7a:9e:46:7a:c0:8e:2a:f7:ce:3a:ec:fe:
e3:8b:7a:d8:84:a7:f3:ed:ff:1b:cd:95:8c:d7:b9:d7:b0:e1:
ed:bd:55:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCVgMe6B1vL/D8uCwo0+lUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGJlY2EwMWE5MWU0NDk2NzZjMjQ5NzkxMzJlYWMzMzE4
MzNmNTQwHhcNMjYwOTIxMDUwMDExWhcNMjYwOTIyMDUwMDExWjAzMTEwLwYDVQQD
EygxNGY1Y2NjODllNTQzZGEzMGIyZmU3NDIzZTlhZWJmMGE4Y2RhODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMfakcEisXLi+zybFY1weQIhvraf
aJM8QFC+t0M7ouKgVrcOXhhAqDpewYGljGa2d8Ze18WNCZRTf8OGf0BE/GsX0OfP
xZfTj49C9SmMffNCHeFGffFjGKMYiuuAoylV8LILA6b62YmLu05PA68QZA+D9/Sd
T3p0rElkwrbGhEP3OKW1eCn85L9BJQsQrwyGjqK3rTz2ob4sHbR+i4lP7fQiGWhS
OZBgI1gCUdXT4st3tgf27j13yobasSilkgbEQhoCSEj00HmT2VEIee7FUwWv0g7z
9z/plJjdQv7liY4kXI9DE/9waT/JiYa29f6olzMqPc+czXAyvvCq/va+MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBT1zMieVD2jCy/nQj6a6/CozaiWMB8GA1UdIwQY
MBaAFEJL7KAakeRJZ2wkl5Ey6sMxgz9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWt2c29CcVI1RWxuYkNTWGtUTHF3ekdEUDFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hN2Q3YjMtNzRkYS00MDYzLTg3MWMt
NWU1YzY2OGRlZWM1LzEvUWt2c29CcVI1RWxuYkNTWGtUTHF3ekdEUDFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hN2Q3YjMtNzRkYS00MDYzLTg3MWMtNWU1YzY2OGRlZWM1
LzEvUWt2c29CcVI1RWxuYkNTWGtUTHF3ekdEUDFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRogBiEY
gE9n42IC+WeHyygB2gsl6mJp/XhRtQaBobk+mtVXsW1YBaX/ojdbuyKIroldFuJl
FmtLhZlE3cCrcQAGXD+KIU5CIf3sr6fSxQKqQTZxkr7GAY9WwKY13vhK/5x0fmjL
nhDsekdbrqsrKuNvkGRS+UM32MEbAO2GS9YuVgnTJsSXE14yKn5g3H/UZKt3sXBk
NGOHX+dApGHdNx+L4Ee2cBQx89VtrDSROsMXJN6CwnpK4bSMyHLyVzMmKMDkN+UP
jZ1rJbg9APS3xxE6kVeV+fh/KVHidGRKep5GesCOKvfOOuz+44t62ISn8+3/G82V
jNe517Dh7b1VLA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:20:56 2026 by rpki-client