Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: 2ROuI28fJVNQOiFwLTgPldJge8F5wpiG6CvBOxYbg4c=
Subject key identifier: C3:9B:82:43:2C:E3:3A:63:C7:49:71:10:8B:EB:97:DD:49:23:6A:0D
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 01A1287A930F463D1BCCB1FB330FFE9FBD4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 19EE
Signing time: Sun 11 Oct 2026 01:01:23 +0000
Manifest this update: Sun 11 Oct 2026 01:01:23 +0000
Manifest next update: Mon 12 Oct 2026 01:01:23 +0000
Files and hashes: 1: 4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa (hash: b9MP0rdkmPkjLsxKnX60/w1PVwahqRg3qlsqfmJHgCk=)
2: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: tpqyXQKJcvlLjLrTKJO4EjGIk4i4xplVMZdBd3UqkFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:7a:93:0f:46:3d:1b:cc:b1:fb:33:0f:fe:9f:bd:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Oct 11 01:01:23 2026 GMT
Not After : Oct 12 01:01:23 2026 GMT
Subject: CN=c39b82432ce33a63c74971108beb97dd49236a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:54:6a:a1:df:c8:07:17:ed:db:0d:de:05:45:
e1:80:e7:b5:a6:8a:3c:d2:3d:df:ef:37:98:4a:62:
0c:3a:72:da:08:36:7b:59:10:5b:45:e3:e8:8d:4c:
de:48:de:bb:87:80:69:fc:ae:32:36:26:2f:d1:fd:
5d:55:41:b3:28:4f:52:62:e7:d2:c4:8a:1a:84:9c:
fc:4f:b9:b3:c7:82:ae:5b:4d:3c:13:96:29:57:72:
b3:f8:d6:25:7f:54:b8:37:24:9d:85:49:e9:24:b4:
20:d6:51:42:3d:3b:ce:a1:70:29:33:d3:68:6b:fb:
c6:39:e9:2e:50:d3:54:2e:36:de:7c:de:89:6c:4a:
32:c3:51:ec:d8:29:7b:53:71:0a:6f:df:e2:fd:c5:
b0:ab:e5:e0:fa:24:7b:44:01:85:c9:29:52:0c:d9:
bc:2f:1d:bc:61:26:d8:14:bb:52:2b:4d:90:68:08:
21:15:28:18:cc:72:21:f8:c7:c1:29:a5:c6:d7:c7:
ef:7d:4f:aa:ee:8e:46:3d:cf:9b:d2:9d:40:11:e6:
79:7e:e6:bd:67:f1:a1:c1:75:12:b8:ba:aa:f6:ca:
db:d4:68:ff:03:35:7d:86:62:a1:6b:17:18:e3:44:
bd:5d:e0:e4:66:a3:60:bd:9e:39:3a:5d:27:1b:2e:
53:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9B:82:43:2C:E3:3A:63:C7:49:71:10:8B:EB:97:DD:49:23:6A:0D
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3b:b0:1c:46:51:f7:e8:01:ff:6f:59:7a:d8:ad:ac:99:0e:
23:ad:ed:da:7f:33:c5:a9:44:cf:c9:e8:df:2a:a7:8f:98:89:
b4:38:04:ca:80:41:0e:56:33:47:89:74:f5:6d:e2:48:8b:51:
c8:d9:22:d5:c6:0f:87:35:fe:15:cd:09:bf:cb:c3:b3:fd:c6:
5d:65:bf:de:57:c8:1e:8a:22:9d:38:1e:87:78:59:f5:c8:cb:
9c:44:1c:57:b6:31:39:9d:77:90:bf:99:1c:1f:7e:eb:3d:c5:
b2:02:35:8f:88:cc:fc:99:08:c9:d1:92:51:06:e8:5f:16:69:
5b:6b:c9:cf:a5:41:35:d7:2f:39:ac:68:2f:45:7a:dd:04:ea:
28:ef:a8:c0:22:54:2c:09:19:4d:92:3a:7a:eb:58:ff:a2:33:
59:b9:70:24:c8:40:8b:f0:b5:a8:9e:bd:c1:f0:da:f0:04:2d:
1a:36:2c:99:ed:66:31:8d:de:ec:87:81:ca:d4:89:b2:0a:e5:
39:57:88:71:17:8c:78:45:d2:97:af:be:51:91:4b:3d:ac:eb:
19:00:9f:21:d5:eb:cf:d1:47:fd:9c:41:63:7b:a4:8a:e9:85:
05:66:78:53:48:fd:4b:71:b1:5d:39:0f:bb:d6:7a:d4:7e:50:
c7:74:f9:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEoepMPRj0bzLH7Mw/+n71NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMGYyZWExNTdiYmI1M2FiMDI2MDExYWNlNWNkMTM2MGVm
MmY3N2QwHhcNMjYxMDExMDEwMTIzWhcNMjYxMDEyMDEwMTIzWjAzMTEwLwYDVQQD
EyhjMzliODI0MzJjZTMzYTYzYzc0OTcxMTA4YmViOTdkZDQ5MjM2YTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1Rqod/IBxft2w3eBUXhgOe1poo8
0j3f7zeYSmIMOnLaCDZ7WRBbRePojUzeSN67h4Bp/K4yNiYv0f1dVUGzKE9SYufS
xIoahJz8T7mzx4KuW008E5YpV3Kz+NYlf1S4NySdhUnpJLQg1lFCPTvOoXApM9No
a/vGOekuUNNULjbefN6JbEoyw1Hs2Cl7U3EKb9/i/cWwq+Xg+iR7RAGFySlSDNm8
Lx28YSbYFLtSK02QaAghFSgYzHIh+MfBKaXG18fvfU+q7o5GPc+b0p1AEeZ5fua9
Z/GhwXUSuLqq9srb1Gj/AzV9hmKhaxcY40S9XeDkZqNgvZ45Ol0nGy5TBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMObgkMs4zpjx0lxEIvrl91JI2oNMB8GA1UdIwQY
MBaAFEAPLqFXu7U6sCYBGs5c0TYO8vd9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQt
ZDc5NzFmMWU1OTlkLzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80YmZkNTYtODgwZC00OTliLTg3MjQtZDc5NzFmMWU1OTlk
LzEvUUE4dW9WZTd0VHF3SmdFYXpselJOZzd5OTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTuwHEZR
9+gB/29ZetitrJkOI63t2n8zxalEz8no3yqnj5iJtDgEyoBBDlYzR4l09W3iSItR
yNki1cYPhzX+Fc0Jv8vDs/3GXWW/3lfIHooinTgeh3hZ9cjLnEQcV7YxOZ13kL+Z
HB9+6z3FsgI1j4jM/JkIydGSUQboXxZpW2vJz6VBNdcvOaxoL0V63QTqKO+owCJU
LAkZTZI6eutY/6IzWblwJMhAi/C1qJ69wfDa8AQtGjYsme1mMY3e7IeBytSJsgrl
OVeIcReMeEXSl6++UZFLPazrGQCfIdXrz9FH/ZxBY3ukiumFBWZ4U0j9S3GxXTkP
u9Z61H5Qx3T5xg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:44:36 2026 by rpki-client