Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: 4D9qHcbNjrJSrMbSaQvTvRw3EtQTieMd02uzrklYXCA=
Subject key identifier: 3C:4A:CE:47:1F:22:D2:30:10:C7:33:98:36:72:2F:B0:FC:00:F3:04
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 019FAC08E7D382B7BB1F32491D55D5C021A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 1929
Signing time: Wed 29 Jul 2026 04:01:32 +0000
Manifest this update: Wed 29 Jul 2026 04:01:32 +0000
Manifest next update: Thu 30 Jul 2026 04:01:32 +0000
Files and hashes: 1: 4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa (hash: b9MP0rdkmPkjLsxKnX60/w1PVwahqRg3qlsqfmJHgCk=)
2: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: Gyg0Uir9gQj9L/rk8/fsz9mqUdUktnowiY57gqFMTrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:e7:d3:82:b7:bb:1f:32:49:1d:55:d5:c0:21:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Jul 29 04:01:32 2026 GMT
Not After : Jul 30 04:01:32 2026 GMT
Subject: CN=3c4ace471f22d23010c7339836722fb0fc00f304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:55:ff:62:b5:2b:56:99:4b:c3:1e:82:9b:a1:
e9:f5:b9:cd:60:50:3e:7a:2b:15:84:88:7a:5a:e3:
20:51:0c:29:b1:8d:44:e0:9b:0f:6e:44:42:b3:75:
4f:f8:da:ab:28:c2:20:73:ad:4b:ca:17:2c:ff:80:
ef:88:03:21:04:31:7f:df:26:1b:c1:c2:05:51:d3:
e4:a3:b8:27:97:83:f4:cc:da:cf:60:fb:2f:b6:52:
62:e6:07:34:75:40:8e:b0:0d:d9:fc:05:1e:6f:4b:
d3:3e:57:bd:be:0e:47:6b:b5:2a:17:84:d7:5c:0c:
ce:18:f8:04:1b:b3:5d:59:de:82:73:f3:59:b6:7d:
23:2f:4e:f1:91:6d:1c:de:50:14:66:33:0f:5a:8f:
f1:bc:ea:35:bd:b0:2c:6b:16:8b:c6:d7:ae:86:00:
f9:e9:e4:bb:06:71:ca:95:79:26:5f:eb:5f:8a:b3:
7f:51:f9:c9:a8:af:79:a5:ec:44:12:68:23:a1:6d:
5d:5d:bb:3f:f0:dd:7a:4a:a1:d0:24:01:6b:cd:51:
53:90:b8:7c:94:f9:e5:76:09:46:04:a8:c7:26:e8:
4d:7c:1c:84:9e:a6:17:fc:4a:28:8d:b8:e9:d5:04:
21:e9:72:3c:9c:3e:3d:13:9c:ea:c1:c1:81:9c:39:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4A:CE:47:1F:22:D2:30:10:C7:33:98:36:72:2F:B0:FC:00:F3:04
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b4:4e:22:ed:9c:c9:41:a2:0e:c1:7a:d5:1b:ec:f0:90:a8:
44:06:55:83:bc:78:9f:f0:9e:35:0d:c4:8e:c5:83:02:8b:49:
d7:15:c0:4a:dd:08:cf:b2:3f:aa:88:ff:d0:eb:30:32:b0:ea:
1e:54:16:4b:9b:c3:41:91:74:cc:43:cf:8e:cd:3b:3f:60:a8:
54:05:c3:a0:1e:dd:e9:c9:3b:2f:ef:c4:23:18:a9:39:ef:bc:
36:54:f6:35:43:4c:08:a9:df:10:ec:a3:29:1a:53:ba:a5:6b:
96:ff:be:40:1a:8d:c5:71:58:91:06:ee:47:2c:4d:b9:69:8a:
2b:96:51:e1:26:a6:69:29:72:2a:e5:4f:bd:32:41:8e:48:93:
be:35:17:7f:14:37:6c:86:e2:3b:c6:46:57:8b:9c:c6:49:b8:
a4:47:b5:2b:0c:6e:aa:80:f2:65:cb:d9:3b:26:27:fd:64:57:
7e:13:21:d3:53:9a:a6:0a:11:57:88:58:61:62:31:d8:b1:93:
51:02:d4:bf:87:c8:6f:e3:d1:c2:86:32:73:62:1c:8d:10:8f:
fb:2c:79:fb:d5:9a:40:6a:8b:3b:2b:84:d3:5a:84:9d:b9:75:
d1:3b:25:d1:ec:e5:09:e9:b2:29:26:5c:ff:17:12:d8:61:4d:
6c:50:0e:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCOfTgre7HzJJHVXVwCGiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMGYyZWExNTdiYmI1M2FiMDI2MDExYWNlNWNkMTM2MGVm
MmY3N2QwHhcNMjYwNzI5MDQwMTMyWhcNMjYwNzMwMDQwMTMyWjAzMTEwLwYDVQQD
EygzYzRhY2U0NzFmMjJkMjMwMTBjNzMzOTgzNjcyMmZiMGZjMDBmMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlX/YrUrVplLwx6Cm6Hp9bnNYFA+
eisVhIh6WuMgUQwpsY1E4JsPbkRCs3VP+NqrKMIgc61Lyhcs/4DviAMhBDF/3yYb
wcIFUdPko7gnl4P0zNrPYPsvtlJi5gc0dUCOsA3Z/AUeb0vTPle9vg5Ha7UqF4TX
XAzOGPgEG7NdWd6Cc/NZtn0jL07xkW0c3lAUZjMPWo/xvOo1vbAsaxaLxteuhgD5
6eS7BnHKlXkmX+tfirN/UfnJqK95pexEEmgjoW1dXbs/8N16SqHQJAFrzVFTkLh8
lPnldglGBKjHJuhNfByEnqYX/Eoojbjp1QQh6XI8nD49E5zqwcGBnDlhNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxKzkcfItIwEMczmDZyL7D8APMEMB8GA1UdIwQY
MBaAFEAPLqFXu7U6sCYBGs5c0TYO8vd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQt
ZDc5NzFmMWU1OTlkLzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQtZDc5NzFmMWU1OTlk
LzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobROIu2c
yUGiDsF61Rvs8JCoRAZVg7x4n/CeNQ3EjsWDAotJ1xXASt0Iz7I/qoj/0OswMrDq
HlQWS5vDQZF0zEPPjs07P2CoVAXDoB7d6ck7L+/EIxipOe+8NlT2NUNMCKnfEOyj
KRpTuqVrlv++QBqNxXFYkQbuRyxNuWmKK5ZR4SamaSlyKuVPvTJBjkiTvjUXfxQ3
bIbiO8ZGV4ucxkm4pEe1KwxuqoDyZcvZOyYn/WRXfhMh01OapgoRV4hYYWIx2LGT
UQLUv4fIb+PRwoYyc2IcjRCP+yx5+9WaQGqLOyuE01qEnbl10Tsl0ezlCemyKSZc
/xcS2GFNbFAOgg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:41:55 2026 by rpki-client