Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: e1cY0/n6z0QMlJ7y0MiHN6qWZLq4Rxwtb1TGMHI3Vdk=
Subject key identifier: 4B:24:4F:2E:47:83:A1:A1:20:07:E4:B4:03:F3:4A:D9:7C:7B:55:06
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 01A06F4C999071003CF5AE41405328BF0B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 1311
Signing time: Sat 05 Sep 2026 02:01:26 +0000
Manifest this update: Sat 05 Sep 2026 02:01:26 +0000
Manifest next update: Sun 06 Sep 2026 02:01:26 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: aI5q6DWULrerb4RDCKzXH0yz/iARSiuyeYgSZEqnV38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:99:90:71:00:3c:f5:ae:41:40:53:28:bf:0b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Sep 5 02:01:26 2026 GMT
Not After : Sep 6 02:01:26 2026 GMT
Subject: CN=4b244f2e4783a1a12007e4b403f34ad97c7b5506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:06:80:58:b0:40:b7:d0:6d:0e:95:ef:37:
88:34:38:4e:5b:31:0f:f6:fe:fe:38:73:97:0f:3a:
6e:65:a2:bb:0e:67:4b:13:88:74:14:91:d1:25:1f:
ef:89:99:d6:62:80:a3:04:4a:31:35:68:76:7b:c4:
92:31:ee:c6:ab:a1:3f:ab:a2:72:2c:43:b0:24:d9:
be:b3:5f:a2:d1:08:bf:e4:c4:82:02:2a:c7:3c:94:
ad:6c:52:d0:14:41:8c:bf:e4:f1:73:b7:6a:d3:30:
d7:b2:38:c0:42:e2:8e:3c:3e:17:17:9f:2d:d7:7f:
94:1d:9c:2f:1e:1f:b1:a9:fb:08:b1:3e:fe:23:63:
bb:0f:4d:d9:22:1e:7c:b2:df:04:6b:b3:2f:bc:4b:
d6:1f:5a:f5:a4:c1:37:1a:c4:f4:e3:36:a6:40:cc:
cd:64:a9:90:d5:6f:a9:44:87:6e:1e:13:a1:62:61:
85:d9:8a:09:21:c6:ef:c0:10:c1:7d:f9:35:75:73:
f8:1f:02:bf:07:ce:92:4b:1f:64:da:ad:df:ce:11:
00:17:d0:42:71:68:20:be:64:54:90:aa:3c:0f:51:
e7:34:43:93:5f:bc:97:80:b4:d9:8b:21:2a:5e:bb:
9a:06:64:6a:51:a4:4d:f4:9c:e6:6e:a0:96:a8:e8:
09:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:24:4F:2E:47:83:A1:A1:20:07:E4:B4:03:F3:4A:D9:7C:7B:55:06
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e4:67:02:4f:1f:d2:58:f1:67:65:bd:a3:49:78:92:09:be:c0:
7b:40:4b:45:17:e2:b4:b0:1b:aa:31:45:5f:b1:a8:c1:2c:d1:
e7:25:18:cf:b7:a6:59:ff:b3:98:67:b8:10:f4:9f:9f:d7:79:
1d:93:d7:c8:e7:89:30:7c:7d:76:d8:e9:17:7f:a2:de:22:4d:
bc:ee:45:55:40:76:2f:3b:fb:4c:33:c7:a0:a7:bc:d4:0d:4e:
ff:91:e0:1c:d1:f5:14:21:0f:dc:a6:a6:0a:b8:8c:79:1a:92:
15:a0:09:31:d4:b4:61:3d:75:38:5c:82:f7:fc:6a:af:7a:0f:
69:f0:45:d1:c4:09:e0:93:71:fb:df:08:78:b8:7b:c8:35:97:
b6:5d:99:6c:46:eb:84:34:c1:1b:8c:c1:95:c4:59:8c:33:a5:
fd:96:b2:ab:86:12:f2:38:d6:dd:89:54:3c:92:14:da:ee:42:
99:22:13:e2:b7:fe:b4:78:e5:31:1d:2e:00:6d:cc:81:d9:38:
53:2e:58:1b:85:32:7f:5d:7b:53:b5:a6:5f:73:07:fa:b0:2a:
a2:60:b7:5d:b7:eb:01:e4:b4:f6:c0:36:e5:a0:69:f8:86:92:
3f:54:0c:4b:a3:df:dc:89:db:f7:1c:ae:f1:89:b2:38:13:d4:
92:bb:c7:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvTJmQcQA89a5BQFMovwt0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjg3MmU0Y2RiMDdkNjgzOTE0N2U0M2E0YTQxOWJjODRi
YTMyMTQwHhcNMjYwOTA1MDIwMTI2WhcNMjYwOTA2MDIwMTI2WjAzMTEwLwYDVQQD
Eyg0YjI0NGYyZTQ3ODNhMWExMjAwN2U0YjQwM2YzNGFkOTdjN2I1NTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL0GgFiwQLfQbQ6V7zeINDhOWzEP
9v7+OHOXDzpuZaK7DmdLE4h0FJHRJR/viZnWYoCjBEoxNWh2e8SSMe7Gq6E/q6Jy
LEOwJNm+s1+i0Qi/5MSCAirHPJStbFLQFEGMv+Txc7dq0zDXsjjAQuKOPD4XF58t
13+UHZwvHh+xqfsIsT7+I2O7D03ZIh58st8Ea7MvvEvWH1r1pME3GsT04zamQMzN
ZKmQ1W+pRIduHhOhYmGF2YoJIcbvwBDBffk1dXP4HwK/B86SSx9k2q3fzhEAF9BC
cWggvmRUkKo8D1HnNEOTX7yXgLTZiyEqXruaBmRqUaRN9JzmbqCWqOgJ8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEskTy5Hg6GhIAfktAPzStl8e1UGMB8GA1UdIwQY
MBaAFED4cuTNsH1oORR+Q6SkGbyEujIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTkt
ZGExMzhhZGUyMjJiLzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTktZGExMzhhZGUyMjJi
LzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5GcCTx/S
WPFnZb2jSXiSCb7Ae0BLRRfitLAbqjFFX7GowSzR5yUYz7emWf+zmGe4EPSfn9d5
HZPXyOeJMHx9dtjpF3+i3iJNvO5FVUB2Lzv7TDPHoKe81A1O/5HgHNH1FCEP3Kam
CriMeRqSFaAJMdS0YT11OFyC9/xqr3oPafBF0cQJ4JNx+98IeLh7yDWXtl2ZbEbr
hDTBG4zBlcRZjDOl/Zayq4YS8jjW3YlUPJIU2u5CmSIT4rf+tHjlMR0uAG3Mgdk4
Uy5YG4Uyf117U7WmX3MH+rAqomC3XbfrAeS09sA25aBp+IaSP1QMS6Pf3Inb9xyu
8YmyOBPUkrvHsQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:23:09 2026 by rpki-client