Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
File: qs5nJaCg3dFoBICoN4XSzVe_arA.mft (raw, json)
Hash identifier: iNZw5c0xImbpOY7M47MadwMpyjzsEWq6SVCFL2L0JXw=
Subject key identifier: 39:FC:ED:9C:74:AD:84:D8:83:03:DC:C5:F6:EB:D0:9C:C7:3F:2B:3D
Authority key identifier: AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
Certificate issuer: /CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Certificate serial: 01A0C557CA926FC8FDFF99CC40B0F4AC7C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
Manifest number: 0EA5
Signing time: Mon 21 Sep 2026 19:01:00 +0000
Manifest this update: Mon 21 Sep 2026 19:01:00 +0000
Manifest next update: Tue 22 Sep 2026 19:01:00 +0000
Files and hashes: 1: 0UTNnPCaSBRChjd-4paFJAa8mvY.roa (hash: kU7KErkztorzfF4UTYyKtoYDyMlrOJjwkRRJcXS9JCM=)
2: 3XFseKD5P1HWKROwFzTd36OyHbE.roa (hash: BIeVIxGIOa2ePH8XQOOYNOlUDe/lxUqOSdtUmx3XDZE=)
3: 9kV8fUl_KriLSLVtxrkRq6q3Ix0.roa (hash: uExdYX2548cfGCpmCeNErn/kV2y3p/D6bqfR/PH26F0=)
4: eBB5lvjqAnBclLcWqTOlF_8lA7s.roa (hash: AOzQfZTfdGMYeAqIt8a663Hmw+/xidNofnCq2r4ivkQ=)
5: qs5nJaCg3dFoBICoN4XSzVe_arA.crl (hash: eukHJFumFoDLpqgrPICvI8hq47ncvFTzt85uKzlzFSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:ca:92:6f:c8:fd:ff:99:cc:40:b0:f4:ac:7c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace6725a0a0ddd1680480a83785d2cd57bf6ab0
Validity
Not Before: Sep 21 19:01:00 2026 GMT
Not After : Sep 22 19:01:00 2026 GMT
Subject: CN=39fced9c74ad84d88303dcc5f6ebd09cc73f2b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:ec:c3:37:80:47:e5:a2:6c:43:1b:af:04:
c9:a3:af:ce:46:9d:74:02:bc:24:0c:0c:a3:e3:c3:
04:76:4b:2c:94:57:82:f1:0f:5c:e2:da:4f:07:af:
0e:b6:2b:ba:a9:fd:c2:fe:c4:98:26:b6:2d:d9:ab:
55:3a:f8:09:ad:f3:44:60:f6:a4:01:b0:56:41:a1:
09:ce:a9:01:d3:01:6d:f3:28:1b:75:e8:d4:ff:34:
59:02:83:57:4b:3f:0f:4d:5f:03:6d:74:e0:98:cd:
29:eb:a1:cc:aa:5d:81:13:01:aa:4c:b7:fc:bf:b2:
3b:07:b3:47:45:2d:39:12:77:6f:c8:7b:4f:3e:9f:
29:c7:55:d2:78:85:76:a7:9f:72:ad:9f:c1:ad:43:
d8:24:73:1f:6e:95:cf:0e:c3:a0:e6:04:f7:d1:aa:
2c:5e:4c:3f:81:a5:d2:fb:b1:79:c8:9a:64:31:c1:
9f:11:45:14:00:ae:99:d4:2e:b7:e8:0f:ce:82:66:
fb:5c:d5:9c:25:00:1d:06:78:5f:e0:40:41:f9:89:
e5:95:d0:30:f5:42:e6:b0:55:e5:49:a2:c0:a2:e0:
c1:4c:af:b0:bc:6a:f0:72:8b:78:4d:8f:e6:27:06:
ad:79:43:f2:7b:51:66:a4:45:d7:d1:6d:43:1a:7e:
df:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FC:ED:9C:74:AD:84:D8:83:03:DC:C5:F6:EB:D0:9C:C7:3F:2B:3D
X509v3 Authority Key Identifier:
keyid:AA:CE:67:25:A0:A0:DD:D1:68:04:80:A8:37:85:D2:CD:57:BF:6A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qs5nJaCg3dFoBICoN4XSzVe_arA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8112ff-b216-406f-8f59-72a082cdb182/1/qs5nJaCg3dFoBICoN4XSzVe_arA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7b:b8:ad:01:dc:d3:87:0f:fc:6f:ef:27:91:a7:29:b3:1f:
31:d7:e3:f5:fc:60:95:a3:9f:52:91:b6:7c:7d:09:b4:f0:75:
48:52:cc:ba:dd:19:99:18:d3:d7:c8:7c:46:29:93:2d:ad:08:
7d:ff:a3:be:ca:08:02:7d:f0:8c:74:8c:60:a3:20:68:77:21:
93:5a:47:1a:c4:2a:3f:54:90:17:fe:6e:7f:bc:cf:dd:a0:a8:
5b:ab:74:30:c2:b0:d7:d3:6f:ab:2a:5d:f2:76:06:bb:78:b4:
3d:ef:16:9c:ca:06:c1:5c:f8:bb:6b:24:79:df:62:07:22:fe:
81:ca:8e:0d:13:ff:d4:a4:3e:4f:f0:6d:a1:6d:b7:9c:c5:c9:
bb:c2:81:19:33:e2:93:a8:5e:08:55:89:6e:7e:61:f0:85:76:
4f:54:7d:54:3b:0c:39:39:b2:44:8a:f4:a2:57:64:97:dc:7f:
7e:c6:63:f8:a5:34:1b:41:9b:59:8a:52:4b:f2:24:4a:f8:97:
7f:5d:be:8f:43:8d:52:6e:0a:6e:85:7e:8f:0b:84:a2:d2:c5:
da:18:0b:e7:88:2f:16:12:77:8b:ce:85:ce:6c:e7:8b:1c:b9:
ab:ee:2a:87:63:19:54:d4:68:ea:09:de:9a:35:ba:f4:f0:6f:
cf:ea:b3:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDFV8qSb8j9/5nMQLD0rHxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhY2U2NzI1YTBhMGRkZDE2ODA0ODBhODM3ODVkMmNkNTdi
ZjZhYjAwHhcNMjYwOTIxMTkwMTAwWhcNMjYwOTIyMTkwMTAwWjAzMTEwLwYDVQQD
EygzOWZjZWQ5Yzc0YWQ4NGQ4ODMwM2RjYzVmNmViZDA5Y2M3M2YyYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMPswzeAR+WibEMbrwTJo6/ORp10
ArwkDAyj48MEdksslFeC8Q9c4tpPB68Otiu6qf3C/sSYJrYt2atVOvgJrfNEYPak
AbBWQaEJzqkB0wFt8ygbdejU/zRZAoNXSz8PTV8DbXTgmM0p66HMql2BEwGqTLf8
v7I7B7NHRS05EndvyHtPPp8px1XSeIV2p59yrZ/BrUPYJHMfbpXPDsOg5gT30aos
Xkw/gaXS+7F5yJpkMcGfEUUUAK6Z1C636A/Ogmb7XNWcJQAdBnhf4EBB+YnlldAw
9ULmsFXlSaLAouDBTK+wvGrwcot4TY/mJwateUPye1FmpEXX0W1DGn7f3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDn87Zx0rYTYgwPcxfbr0JzHPys9MB8GA1UdIwQY
MBaAFKrOZyWgoN3RaASAqDeF0s1Xv2qwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTkt
NzJhMDgyY2RiMTgyLzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84MTEyZmYtYjIxNi00MDZmLThmNTktNzJhMDgyY2RiMTgy
LzEvcXM1bkphQ2czZEZvQklDb040WFN6VmVfYXJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHu4rQHc
04cP/G/vJ5GnKbMfMdfj9fxglaOfUpG2fH0JtPB1SFLMut0ZmRjT18h8RimTLa0I
ff+jvsoIAn3wjHSMYKMgaHchk1pHGsQqP1SQF/5uf7zP3aCoW6t0MMKw19Nvqypd
8nYGu3i0Pe8WnMoGwVz4u2sked9iByL+gcqODRP/1KQ+T/BtoW23nMXJu8KBGTPi
k6heCFWJbn5h8IV2T1R9VDsMOTmyRIr0oldkl9x/fsZj+KU0G0GbWYpSS/IkSviX
f12+j0ONUm4KboV+jwuEotLF2hgL54gvFhJ3i86Fzmznixy5q+4qh2MZVNRo6gne
mjW69PBvz+qz1w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:45:32 2026 by rpki-client