Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
File: QBY91EFO8-eS4AUB80786UQKnE4.mft (raw, json)
Hash identifier: HoQ5INNhLESGs2L/LFIXywPOrFm68DFp52d1T3lwOCQ=
Subject key identifier: FC:A9:DE:01:7B:AD:3A:D1:98:49:40:D7:2C:79:62:EF:90:FA:72:35
Authority key identifier: 40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
Certificate issuer: /CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Certificate serial: 01A0C77CC4EC875A8A8286BF536079CEC06C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 05:00:37 +0000
Manifest this update: Tue 22 Sep 2026 05:00:37 +0000
Manifest next update: Wed 23 Sep 2026 05:00:37 +0000
Files and hashes: 1: QBY91EFO8-eS4AUB80786UQKnE4.crl (hash: sSC8a5QZBRgP9K6ZMqXIeGH3E5pBegc/UXf4U/+jNFI=)
2: XVQmZyZgIfyuS-i9_dYYU_5CGT0.roa (hash: BPYDVshqMOmc9U1pef4+DfyaziPWsnfi+uZonkxHf4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:c4:ec:87:5a:8a:82:86:bf:53:60:79:ce:c0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Validity
Not Before: Sep 22 05:00:37 2026 GMT
Not After : Sep 23 05:00:37 2026 GMT
Subject: CN=fca9de017bad3ad1984940d72c7962ef90fa7235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c4:e6:7c:20:22:51:bf:cd:b0:73:04:38:ca:
38:d8:eb:2f:bf:b0:fa:29:97:f1:d9:8a:17:09:bb:
2b:28:5c:36:e0:aa:68:94:cd:83:ec:73:88:27:1b:
b5:94:70:ac:fa:cd:8f:2f:7c:90:dd:a6:65:ee:bb:
3b:77:0c:11:38:88:7a:3a:f1:d8:63:12:d5:8d:54:
2e:2b:dd:26:9b:0e:24:99:ba:20:94:7e:be:a5:28:
1b:f0:77:75:30:9b:99:9d:11:dd:e8:62:73:aa:06:
9f:47:c9:a2:42:aa:06:48:43:dd:3e:ed:83:66:e7:
77:88:bc:c8:b8:0d:d1:24:1b:64:4f:ed:eb:cb:fe:
11:24:bc:dd:05:76:ee:38:2e:58:ee:2b:6d:47:1d:
a8:e5:d0:be:66:19:ff:10:db:ea:82:d2:a4:6c:8c:
14:28:93:fd:c2:ed:13:28:1e:ae:1c:74:ec:5f:38:
e8:2c:98:d2:8f:30:e3:d5:42:9a:f4:79:c2:05:47:
46:cb:a3:de:97:27:ea:48:5e:50:19:c3:91:c1:82:
65:f7:d8:12:43:90:4c:91:20:1e:32:1c:49:10:62:
8d:47:4f:92:19:25:d9:7e:40:f8:0a:cd:40:a6:82:
ec:3f:da:62:60:3b:ed:44:06:b5:58:f8:0e:30:f9:
50:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A9:DE:01:7B:AD:3A:D1:98:49:40:D7:2C:79:62:EF:90:FA:72:35
X509v3 Authority Key Identifier:
keyid:40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:87:99:3a:35:92:ca:fc:85:19:07:8c:1b:80:fd:32:ec:1b:
fb:7d:74:af:96:30:01:2f:a7:f3:c5:ce:5a:2b:46:4c:60:a9:
5c:01:37:35:9c:df:04:04:46:d7:be:67:6e:45:1d:23:3c:ca:
e3:57:e8:50:dc:49:29:19:41:0e:5f:10:62:a7:9d:80:43:e8:
d8:30:95:ef:5f:0c:c2:d0:70:d4:bc:f0:20:6f:39:ba:97:73:
04:29:be:b1:7d:21:4b:18:92:cc:37:b0:fc:97:92:2a:56:d6:
df:14:45:1b:d3:7c:5a:7e:c3:da:5d:fb:96:4a:25:ef:88:a7:
22:84:62:74:62:a2:2f:e4:89:ad:9e:1d:71:a6:12:a3:7f:61:
67:0d:7c:dd:e2:cf:06:be:73:f2:5a:12:b7:3f:10:ed:4c:87:
0c:2a:f5:8c:2c:9b:f5:4d:5a:13:08:a5:1f:6b:c4:04:86:aa:
0a:4f:64:c1:f9:3b:55:76:39:26:9a:39:74:5f:14:5b:55:ab:
db:16:34:85:09:90:07:b0:42:2a:06:ad:78:de:65:ad:ee:80:
f2:a1:eb:8b:b2:23:08:f2:5a:ae:5b:63:4e:ae:37:98:0e:d6:
38:fd:fb:30:4a:9a:22:d3:62:91:05:53:19:43:22:9f:61:fd:
76:17:91:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHfMTsh1qKgoa/U2B5zsBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMTYzZGQ0NDE0ZWYzZTc5MmUwMDUwMWYzNGVmY2U5NDQw
YTljNGUwHhcNMjYwOTIyMDUwMDM3WhcNMjYwOTIzMDUwMDM3WjAzMTEwLwYDVQQD
EyhmY2E5ZGUwMTdiYWQzYWQxOTg0OTQwZDcyYzc5NjJlZjkwZmE3MjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cTmfCAiUb/NsHMEOMo42Osvv7D6
KZfx2YoXCbsrKFw24KpolM2D7HOIJxu1lHCs+s2PL3yQ3aZl7rs7dwwROIh6OvHY
YxLVjVQuK90mmw4kmboglH6+pSgb8Hd1MJuZnRHd6GJzqgafR8miQqoGSEPdPu2D
Zud3iLzIuA3RJBtkT+3ry/4RJLzdBXbuOC5Y7ittRx2o5dC+Zhn/ENvqgtKkbIwU
KJP9wu0TKB6uHHTsXzjoLJjSjzDj1UKa9HnCBUdGy6PelyfqSF5QGcORwYJl99gS
Q5BMkSAeMhxJEGKNR0+SGSXZfkD4Cs1ApoLsP9piYDvtRAa1WPgOMPlQBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyp3gF7rTrRmElA1yx5Yu+Q+nI1MB8GA1UdIwQY
MBaAFEAWPdRBTvPnkuAFAfNO/OlECpxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUJZOTFFRk84LWVTNEFVQjgwNzg2VVFLbkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81MjE0MzgtM2UwNC00ZDcyLTg4ZGUt
MzYyMmFjN2Q2NWNjLzEvUUJZOTFFRk84LWVTNEFVQjgwNzg2VVFLbkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81MjE0MzgtM2UwNC00ZDcyLTg4ZGUtMzYyMmFjN2Q2NWNj
LzEvUUJZOTFFRk84LWVTNEFVQjgwNzg2VVFLbkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmIeZOjWS
yvyFGQeMG4D9Muwb+310r5YwAS+n88XOWitGTGCpXAE3NZzfBARG175nbkUdIzzK
41foUNxJKRlBDl8QYqedgEPo2DCV718MwtBw1LzwIG85updzBCm+sX0hSxiSzDew
/JeSKlbW3xRFG9N8Wn7D2l37lkol74inIoRidGKiL+SJrZ4dcaYSo39hZw183eLP
Br5z8loStz8Q7UyHDCr1jCyb9U1aEwilH2vEBIaqCk9kwfk7VXY5Jpo5dF8UW1Wr
2xY0hQmQB7BCKgateN5lre6A8qHri7IjCPJarltjTq43mA7WOP37MEqaItNikQVT
GUMin2H9dheR/A==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:55:04 2026 by rpki-client