Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
File: Q3DTtpmsWu_y24ily8HJ2NCccjE.mft (raw, json)
Hash identifier: vKUnR8f9wM2TsSAhMNCFsF1VCrQwY6oTGJBFdnZYIeU=
Subject key identifier: FD:82:17:B3:8F:C2:28:44:67:2B:92:35:CC:98:AF:EF:97:B7:A6:F4
Authority key identifier: 43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
Certificate issuer: /CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Certificate serial: 019FAA51062F4EB158E83C06C850F8C35DD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
Manifest number: 034A
Signing time: Tue 28 Jul 2026 20:01:04 +0000
Manifest this update: Tue 28 Jul 2026 20:01:04 +0000
Manifest next update: Wed 29 Jul 2026 20:01:04 +0000
Files and hashes: 1: KfqeRMQbo9-WE5c784VU-n3hC_I.asa (hash: l9etNGwbPXfHNmZoYUkg6QSJpv1oeeKxarGjMBX/E4Y=)
2: Q3DTtpmsWu_y24ily8HJ2NCccjE.crl (hash: GzMXz4tN2v/9nRt5aELFmvOCRZX8O2LzrmlUMMaeszg=)
3: UjLpUOdjwMQzw9SBpAhHgAxfg7U.roa (hash: 7CpWMJq8SzwdLsA8hN+1xJucf/Pqf3jlz9jzHMKTOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:51:06:2f:4e:b1:58:e8:3c:06:c8:50:f8:c3:5d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4370d3b699ac5aeff2db88a5cbc1c9d8d09c7231
Validity
Not Before: Jul 28 20:01:04 2026 GMT
Not After : Jul 29 20:01:04 2026 GMT
Subject: CN=fd8217b38fc22844672b9235cc98afef97b7a6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:33:58:00:c0:a3:c7:e3:6d:af:21:16:63:2f:
cb:75:45:eb:fc:63:31:25:40:ca:f2:f5:66:d5:58:
4e:46:8a:59:e4:cc:05:22:50:f1:89:e2:c0:c3:96:
10:7e:09:a4:69:e3:65:91:8b:7e:80:82:aa:38:74:
73:15:7e:e0:aa:18:6e:90:82:9c:98:d9:1a:6a:60:
e0:58:92:0a:8a:aa:5b:61:64:d3:1a:1f:a0:8f:bc:
64:d9:5e:53:55:b7:72:6a:b6:6c:af:36:85:8d:07:
f7:a7:06:93:59:0b:16:5f:b1:d0:80:01:32:95:41:
2c:24:f1:77:d2:81:81:00:72:be:71:ac:ef:98:54:
c0:25:92:a2:7d:00:16:2e:bd:9e:48:08:e1:b1:e5:
0c:ff:70:1a:a1:e3:9e:94:49:da:05:85:98:bb:0b:
ce:ac:71:86:b0:7c:61:e6:c1:d3:cf:b7:57:e8:22:
f8:0c:21:4a:cf:0f:83:f8:55:5f:e9:18:bd:0a:87:
fc:24:5f:27:b1:99:e2:ac:50:9b:31:62:1d:ad:e1:
f2:1b:3e:4c:48:0a:45:9f:d6:84:13:df:33:44:64:
15:4d:13:79:62:a3:ce:87:d3:43:dc:a5:56:a6:4a:
2e:8c:b8:2f:80:a4:51:76:f7:41:b6:86:65:e7:ba:
a3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:82:17:B3:8F:C2:28:44:67:2B:92:35:CC:98:AF:EF:97:B7:A6:F4
X509v3 Authority Key Identifier:
keyid:43:70:D3:B6:99:AC:5A:EF:F2:DB:88:A5:CB:C1:C9:D8:D0:9C:72:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3DTtpmsWu_y24ily8HJ2NCccjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8efed1-8f65-4fb9-8331-145a01278948/1/Q3DTtpmsWu_y24ily8HJ2NCccjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:69:43:0d:f8:a2:07:64:a9:37:8b:6f:45:16:2d:7d:af:4c:
92:af:0c:35:6e:70:71:3f:94:09:b3:8c:3f:23:b8:44:1b:29:
f5:97:26:10:da:64:f9:e1:f0:34:a0:e2:db:ca:4e:81:05:a4:
e1:5e:b6:d2:53:bf:e3:2b:bd:64:d9:1e:50:e5:f5:4d:dd:c1:
50:6e:1a:75:45:68:9d:75:42:f2:e7:f4:cc:c3:13:25:f2:de:
09:f5:f7:f9:a0:50:90:9a:13:e3:7f:91:44:86:5d:85:6e:c3:
72:18:96:d9:cc:48:44:58:d2:7e:5e:f5:7e:69:9c:2e:16:b3:
b9:7c:19:f9:fd:8d:43:9a:e2:9b:a8:3c:63:83:b1:bf:f6:25:
13:a6:97:84:2f:97:4d:c8:af:3a:ae:13:ef:9e:69:94:bf:8c:
4d:7e:77:8f:69:54:fe:ad:d7:ee:d2:bc:75:19:7d:45:c4:ca:
0a:c6:49:3b:45:18:e0:6f:8c:cf:5f:c2:41:6f:f1:14:d5:26:
fb:c8:d9:40:e7:36:b7:23:10:9c:ec:38:9c:c9:f8:9d:b4:d1:
87:e1:98:ef:a2:ef:dc:1a:85:79:fe:55:26:55:ee:81:d7:5d:
95:74:75:b9:35:b8:3f:69:d4:c3:9d:e9:c1:cf:01:db:c3:71:
d1:ad:dc:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUQYvTrFY6DwGyFD4w13VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzBkM2I2OTlhYzVhZWZmMmRiODhhNWNiYzFjOWQ4ZDA5
YzcyMzEwHhcNMjYwNzI4MjAwMTA0WhcNMjYwNzI5MjAwMTA0WjAzMTEwLwYDVQQD
EyhmZDgyMTdiMzhmYzIyODQ0NjcyYjkyMzVjYzk4YWZlZjk3YjdhNmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDNYAMCjx+NtryEWYy/LdUXr/GMx
JUDK8vVm1VhORopZ5MwFIlDxieLAw5YQfgmkaeNlkYt+gIKqOHRzFX7gqhhukIKc
mNkaamDgWJIKiqpbYWTTGh+gj7xk2V5TVbdyarZsrzaFjQf3pwaTWQsWX7HQgAEy
lUEsJPF30oGBAHK+cazvmFTAJZKifQAWLr2eSAjhseUM/3AaoeOelEnaBYWYuwvO
rHGGsHxh5sHTz7dX6CL4DCFKzw+D+FVf6Ri9Cof8JF8nsZnirFCbMWIdreHyGz5M
SApFn9aEE98zRGQVTRN5YqPOh9ND3KVWpkoujLgvgKRRdvdBtoZl57qjQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2CF7OPwihEZyuSNcyYr++Xt6b0MB8GA1UdIwQY
MBaAFENw07aZrFrv8tuIpcvBydjQnHIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEt
MTQ1YTAxMjc4OTQ4LzEvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZWZlZDEtOGY2NS00ZmI5LTgzMzEtMTQ1YTAxMjc4OTQ4
LzEvUTNEVHRwbXNXdV95MjRpbHk4SEoyTkNjY2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2lDDfii
B2SpN4tvRRYtfa9Mkq8MNW5wcT+UCbOMPyO4RBsp9ZcmENpk+eHwNKDi28pOgQWk
4V620lO/4yu9ZNkeUOX1Td3BUG4adUVonXVC8uf0zMMTJfLeCfX3+aBQkJoT43+R
RIZdhW7DchiW2cxIRFjSfl71fmmcLhazuXwZ+f2NQ5rim6g8Y4Oxv/YlE6aXhC+X
TcivOq4T755plL+MTX53j2lU/q3X7tK8dRl9RcTKCsZJO0UY4G+Mz1/CQW/xFNUm
+8jZQOc2tyMQnOw4nMn4nbTRh+GY76Lv3BqFef5VJlXugdddlXR1uTW4P2nUw53p
wc8B28Nx0a3czg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:18:52 2026 by rpki-client