Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: OawOHDgTizGdoY6mAmz+Xcrvz7hUEdtFzOPfX5rQwjk=
Subject key identifier: C4:2E:F4:A0:B8:19:D4:6F:08:59:29:BE:B6:3A:B1:F5:4A:6C:CE:FF
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 01A0C7EAC4E279792A8AB803D4223D25BD3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 0717
Signing time: Tue 22 Sep 2026 07:00:46 +0000
Manifest this update: Tue 22 Sep 2026 07:00:46 +0000
Manifest next update: Wed 23 Sep 2026 07:00:46 +0000
Files and hashes: 1: 1V2N8PP3W6pg2dn86MMXMCFavbg.roa (hash: 6GyZmIlJdg5hYdJcaopJTcDcXE9f3YbiakWtgZ82HCg=)
2: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: pgWvhucUclY67KIddJo/FNHHBWP8o3w9Jo0OCxhfGKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:c4:e2:79:79:2a:8a:b8:03:d4:22:3d:25:bd:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Sep 22 07:00:46 2026 GMT
Not After : Sep 23 07:00:46 2026 GMT
Subject: CN=c42ef4a0b819d46f085929beb63ab1f54a6cceff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:b0:e1:eb:2b:d3:5c:f3:45:4e:ea:f2:89:
7c:d8:8b:d9:eb:75:d6:21:8f:0e:d6:49:e1:cc:1d:
8c:dc:14:d2:4b:ba:9c:d5:6a:a7:0d:67:df:3d:14:
90:a5:86:6f:cc:94:93:59:bd:14:c7:77:a2:c6:a4:
f9:97:08:73:6d:c0:d7:02:96:f0:07:20:61:ac:c3:
34:4f:4a:79:b6:af:5f:16:3b:a8:69:9c:da:2e:41:
50:be:82:10:c5:bb:8d:9d:70:5e:2f:cb:fd:d2:00:
77:fd:b0:b5:80:b8:29:ed:4f:4d:d6:42:00:be:a3:
39:7b:31:a8:38:c9:f3:4d:ed:01:4b:89:c8:9d:22:
73:7d:b0:ae:34:b1:22:be:5f:68:7a:49:ac:4b:be:
fe:a9:a8:6b:dd:3a:27:2e:ad:4f:52:11:1f:21:27:
48:d2:bf:31:c7:4e:ec:e3:69:84:ff:35:bf:fd:56:
0e:95:43:33:90:d5:81:30:71:e3:5f:fc:c4:36:9d:
6d:ca:49:e0:b1:8e:72:83:20:1d:4d:9b:50:99:2f:
11:04:e1:3a:80:51:90:53:c3:df:ef:10:20:d8:68:
30:9e:e6:cd:bd:6b:00:5f:e9:1f:51:40:be:d2:74:
b2:b5:9e:66:0c:6b:92:c8:97:0a:d0:7d:13:13:51:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2E:F4:A0:B8:19:D4:6F:08:59:29:BE:B6:3A:B1:F5:4A:6C:CE:FF
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:20:8e:3b:08:6d:92:f0:a9:31:96:c0:69:b8:a4:80:89:14:
3b:66:c9:d9:03:09:3d:cf:37:04:4f:fc:8a:78:46:96:80:b4:
84:9a:42:53:3d:7c:f8:6d:34:bb:cd:f0:3f:a6:4f:0a:71:72:
8b:1b:17:87:bd:98:8f:5e:67:7d:01:ce:62:87:f9:8d:a8:cf:
ef:9b:6d:22:99:d5:0e:f4:dd:bb:1f:fa:48:b0:85:57:3b:b3:
a9:0a:8b:9f:9d:02:37:19:6d:5c:ac:ac:fc:b6:51:69:b4:1b:
bd:07:6c:26:fa:20:9d:10:06:5b:d3:f5:ae:f3:67:cb:6f:cf:
93:12:cd:d6:9d:74:fc:be:b7:01:35:d5:c4:e4:05:9d:82:e3:
c0:5f:1d:cc:4c:de:4f:83:88:ea:57:65:a2:46:b5:2a:70:77:
57:56:7e:fa:2e:c6:ad:56:67:7b:47:0d:42:df:a8:91:08:e9:
c3:5b:13:32:73:ce:f8:3b:13:90:90:db:40:eb:ae:f9:65:78:
79:c1:8a:4f:00:a2:f9:90:af:f7:25:3b:81:68:00:7d:4f:09:
55:24:b2:c8:51:c5:cc:80:dc:e7:0d:e7:bc:6a:3f:f0:07:ec:
b6:55:8e:3e:fe:fc:21:dd:fd:3a:0e:73:6a:67:9f:84:8a:97:
c5:5c:7c:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDH6sTieXkqirgD1CI9Jb09MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNDMyYTMxOWY1NGIwNTgzNzJmZDMyNTI4ZWFlNTFmYzkw
YzE1YjIwHhcNMjYwOTIyMDcwMDQ2WhcNMjYwOTIzMDcwMDQ2WjAzMTEwLwYDVQQD
EyhjNDJlZjRhMGI4MTlkNDZmMDg1OTI5YmViNjNhYjFmNTRhNmNjZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF2w4esr01zzRU7q8ol82IvZ63XW
IY8O1knhzB2M3BTSS7qc1WqnDWffPRSQpYZvzJSTWb0Ux3eixqT5lwhzbcDXApbw
ByBhrMM0T0p5tq9fFjuoaZzaLkFQvoIQxbuNnXBeL8v90gB3/bC1gLgp7U9N1kIA
vqM5ezGoOMnzTe0BS4nInSJzfbCuNLEivl9oekmsS77+qahr3TonLq1PUhEfISdI
0r8xx07s42mE/zW//VYOlUMzkNWBMHHjX/zENp1tykngsY5ygyAdTZtQmS8RBOE6
gFGQU8Pf7xAg2GgwnubNvWsAX+kfUUC+0nSytZ5mDGuSyJcK0H0TE1G1dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQu9KC4GdRvCFkpvrY6sfVKbM7/MB8GA1UdIwQY
MBaAFEJDKjGfVLBYNy/TJSjq5R/JDBWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMt
MTMxZGMyYmEyZWM4LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMtMTMxZGMyYmEyZWM4
LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiCOOwht
kvCpMZbAabikgIkUO2bJ2QMJPc83BE/8inhGloC0hJpCUz18+G00u83wP6ZPCnFy
ixsXh72Yj15nfQHOYof5jajP75ttIpnVDvTdux/6SLCFVzuzqQqLn50CNxltXKys
/LZRabQbvQdsJvognRAGW9P1rvNny2/PkxLN1p10/L63ATXVxOQFnYLjwF8dzEze
T4OI6ldloka1KnB3V1Z++i7GrVZne0cNQt+okQjpw1sTMnPO+DsTkJDbQOuu+WV4
ecGKTwCi+ZCv9yU7gWgAfU8JVSSyyFHFzIDc5w3nvGo/8AfstlWOPv78Id39Og5z
amefhIqXxVx8bA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:18:58 2026 by rpki-client