Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: pcnlRmHwq9oMJSj+UAoJh67rxSi4rZAFQi+iUM9n69s=
Subject key identifier: 7E:7C:82:17:CE:9E:CB:D6:E1:D4:38:1E:F4:C6:D5:14:3E:6B:A1:39
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 01A03B27AD3D378D30A0BDC286034579229F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 1A21
Signing time: Tue 25 Aug 2026 23:00:50 +0000
Manifest this update: Tue 25 Aug 2026 23:00:50 +0000
Manifest next update: Wed 26 Aug 2026 23:00:50 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: HwQNMNyQ2k3xH/fz+4pYANS2h3ChEKrOrWk+XvEM6oU=)
2: Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa (hash: 1LS6QFZFhpfMUxXS4QP7dupHPq2LjjbAwscSCeUJDT8=)
3: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (hash: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:27:ad:3d:37:8d:30:a0:bd:c2:86:03:45:79:22:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Aug 25 23:00:50 2026 GMT
Not After : Aug 26 23:00:50 2026 GMT
Subject: CN=7e7c8217ce9ecbd6e1d4381ef4c6d5143e6ba139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:05:a2:ae:04:d9:49:cf:31:ea:41:67:72:cc:
25:9e:dc:86:e2:75:94:a7:fc:96:a6:89:0c:b0:24:
00:4b:7e:ca:92:9a:b9:43:69:16:43:17:0b:cd:03:
8e:e8:34:35:91:bb:f7:d7:e7:3e:84:8f:d6:fa:47:
5c:28:a8:83:6a:a3:b8:12:ee:49:6f:5c:a9:da:d0:
d0:43:e5:d6:02:df:af:7e:f8:75:c0:bd:33:7f:79:
3a:97:52:40:75:0d:4d:44:23:90:76:84:4f:1b:f1:
04:d9:fb:c9:0f:23:f1:9d:ee:ca:3a:92:f4:b3:3c:
76:87:83:4c:e4:56:9b:3b:06:78:6b:33:a8:ea:f2:
cd:f4:98:25:be:9f:e7:eb:72:7d:5b:80:c7:de:6a:
ff:5a:95:64:88:48:68:fb:ad:8a:59:a7:81:d2:9d:
7e:62:8e:5a:4f:94:47:d6:81:f8:18:f5:ea:c9:77:
58:0c:0d:9c:1d:e2:4b:27:a8:c9:99:90:40:39:47:
69:de:75:12:dc:07:9b:ff:43:31:f2:7b:78:89:fd:
47:e2:57:00:ea:62:cb:ac:0c:a5:70:31:d9:38:01:
21:f6:8f:18:34:ea:64:95:3c:d9:81:a1:19:6e:7a:
a1:64:c9:f9:f9:d9:33:92:08:e6:73:ea:7c:dc:58:
a6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7C:82:17:CE:9E:CB:D6:E1:D4:38:1E:F4:C6:D5:14:3E:6B:A1:39
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4d:8f:b2:c7:e2:fa:31:a9:45:45:cd:27:17:cf:ee:1c:bc:
c7:56:02:0c:5f:3d:bc:86:33:d4:4e:c4:fa:07:67:42:2e:24:
8c:4f:7a:54:6b:33:b1:2a:f9:42:f5:67:13:ee:4e:fe:ab:c0:
34:75:53:b6:3a:9a:ed:83:11:5a:65:65:77:bc:89:c0:20:e9:
06:b9:c4:bc:02:2a:cb:01:da:3e:28:98:23:2f:1a:12:a1:9f:
06:37:da:e0:ef:bb:27:28:ff:29:1c:29:f1:7c:86:81:e2:19:
94:65:aa:19:3a:c8:50:08:5d:9c:1e:90:52:31:a1:48:1d:86:
04:9e:b9:4f:c6:9d:02:a0:34:e7:97:90:05:77:97:55:b9:f1:
0e:3d:0d:12:9f:c9:38:94:54:57:d1:c0:33:0c:7f:f2:8a:24:
9a:a8:1f:31:a7:09:8a:b8:c7:29:57:e5:ef:c5:a4:af:f2:02:
e2:78:14:ac:e4:ca:95:cc:c5:5a:40:9d:b7:5f:8d:46:cf:58:
80:20:81:96:31:8d:b6:07:2a:dd:6b:07:8d:a9:20:4d:97:62:
5b:be:fe:32:a4:30:de:c7:00:e0:e3:90:ef:da:a9:44:81:89:
d3:24:fa:74:c4:c1:10:ac:9c:d6:46:31:0e:89:4e:cf:29:65:
86:dd:eb:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA7J609N40woL3ChgNFeSKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDRlMzNiZTcxZDMzOWYzYmMwY2M2ZGFlNjVlODc5MmZm
NGQ1ZGMwHhcNMjYwODI1MjMwMDUwWhcNMjYwODI2MjMwMDUwWjAzMTEwLwYDVQQD
Eyg3ZTdjODIxN2NlOWVjYmQ2ZTFkNDM4MWVmNGM2ZDUxNDNlNmJhMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQWirgTZSc8x6kFncswlntyG4nWU
p/yWpokMsCQAS37Kkpq5Q2kWQxcLzQOO6DQ1kbv31+c+hI/W+kdcKKiDaqO4Eu5J
b1yp2tDQQ+XWAt+vfvh1wL0zf3k6l1JAdQ1NRCOQdoRPG/EE2fvJDyPxne7KOpL0
szx2h4NM5FabOwZ4azOo6vLN9Jglvp/n63J9W4DH3mr/WpVkiEho+62KWaeB0p1+
Yo5aT5RH1oH4GPXqyXdYDA2cHeJLJ6jJmZBAOUdp3nUS3Aeb/0Mx8nt4if1H4lcA
6mLLrAylcDHZOAEh9o8YNOpklTzZgaEZbnqhZMn5+dkzkgjmc+p83FimuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH58ghfOnsvW4dQ4HvTG1RQ+a6E5MB8GA1UdIwQY
MBaAFEDU4zvnHTOfO8DMba5l6Hkv9NXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgt
MDIzM2I3YjI2ZDVkLzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgtMDIzM2I3YjI2ZDVk
LzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWk2Pssfi
+jGpRUXNJxfP7hy8x1YCDF89vIYz1E7E+gdnQi4kjE96VGszsSr5QvVnE+5O/qvA
NHVTtjqa7YMRWmVld7yJwCDpBrnEvAIqywHaPiiYIy8aEqGfBjfa4O+7Jyj/KRwp
8XyGgeIZlGWqGTrIUAhdnB6QUjGhSB2GBJ65T8adAqA055eQBXeXVbnxDj0NEp/J
OJRUV9HAMwx/8ookmqgfMacJirjHKVfl78Wkr/IC4ngUrOTKlczFWkCdt1+NRs9Y
gCCBljGNtgcq3WsHjakgTZdiW77+MqQw3scA4OOQ79qpRIGJ0yT6dMTBEKyc1kYx
DolOzyllht3rPA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 05:23:25 2026 by rpki-client