Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier: 2/EWGyRLT0otYTowVw8dhS3cNI/nPwtU7o8HLqgKlX4=
Subject key identifier: 2F:92:4F:99:F9:45:2F:C1:83:95:A5:FF:5D:0B:D9:4E:D9:1A:58:A3
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 01A1702552FE6E3498BBC29557EBC44F5822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number: 10DC
Signing time: Sat 24 Oct 2026 23:00:56 +0000
Manifest this update: Sat 24 Oct 2026 23:00:56 +0000
Manifest next update: Sun 25 Oct 2026 23:00:56 +0000
Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: G2NlpyDKHqqW2KPH18/wlj8DdLqsL7L7NO5ljVkKmao=)
2: yaEEybz2NfCWEApyu2Dzx2yLpcI.roa (hash: j2pzI49xHsyv/Ol3MBefWz6almNV2xHEmt1n4qjR/Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:25:52:fe:6e:34:98:bb:c2:95:57:eb:c4:4f:58:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Oct 24 23:00:56 2026 GMT
Not After : Oct 25 23:00:56 2026 GMT
Subject: CN=2f924f99f9452fc18395a5ff5d0bd94ed91a58a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ad:d9:a1:9c:5d:f8:82:73:1c:de:cf:fd:e4:
1d:5a:49:04:b7:22:fc:14:09:4a:70:4b:11:32:bd:
27:8e:ee:af:a4:1c:a2:79:0e:3c:f5:2c:f7:fa:9c:
14:ba:ac:9b:7d:e8:83:8d:34:31:cb:58:6f:8e:45:
82:73:50:0f:1f:9b:cd:63:fe:88:aa:e3:8b:d4:93:
e1:20:dc:0c:83:f5:f4:fd:37:8e:23:3d:b5:66:e6:
2f:e8:b6:0f:eb:56:f7:67:e1:61:3a:93:3e:f5:d9:
cb:fb:00:0b:15:40:14:ab:d6:3f:5f:a0:90:46:8c:
40:97:b4:9c:6f:a9:a4:09:25:f0:a4:42:53:ea:c9:
18:ae:9b:97:86:78:82:7f:76:7f:8a:62:ab:f9:b5:
c1:d3:41:ed:43:65:76:44:51:fa:e4:a3:5b:ec:c7:
14:fa:8c:d1:30:eb:c9:6d:85:68:f1:ce:c3:c8:12:
26:84:65:3d:5e:de:65:4e:35:41:ed:b5:b8:30:af:
1b:8b:cb:9e:e7:21:c8:9c:ba:63:58:72:e6:8b:0b:
b5:61:c4:99:f5:3e:d8:6d:65:fc:77:e2:c5:4b:2d:
3e:24:39:8d:66:58:a1:86:ea:02:42:d3:96:59:a6:
58:b3:a8:51:4f:71:ff:7f:f4:42:af:88:e3:9c:ad:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:4F:99:F9:45:2F:C1:83:95:A5:FF:5D:0B:D9:4E:D9:1A:58:A3
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a3:96:95:72:0e:e5:c4:fe:b7:37:7c:92:61:78:4f:11:69:
aa:34:ac:99:19:3d:d7:9c:4c:a5:38:6d:ff:9c:a0:9c:8d:4d:
e6:7d:3a:2e:26:ed:d4:86:f8:03:0f:65:43:70:55:33:ce:fd:
8e:20:50:6f:90:fd:c4:4c:4a:38:d3:b3:8e:b7:18:ce:68:51:
ce:25:d1:f4:17:b1:cf:19:50:ac:02:43:d3:93:05:85:87:8c:
c5:18:59:6a:fb:c1:f1:82:c8:86:70:57:5f:be:46:34:38:7c:
27:b6:ac:d7:cc:e5:70:e3:55:be:c3:df:8e:23:45:4c:11:8a:
5b:ec:7e:29:1f:10:21:4f:bb:c3:06:c4:8e:1f:c0:9d:ab:b5:
b0:d2:a6:d1:a6:6a:28:08:f4:52:a0:7a:ad:08:a9:57:98:be:
38:b2:52:fb:3a:6b:ee:e0:eb:8a:d5:db:c9:74:02:a8:9e:8a:
b4:63:0e:8e:67:37:4a:d3:d4:4d:cb:75:e8:b5:37:1b:7b:06:
bf:d8:30:41:bf:fe:1f:74:26:2c:0a:5d:27:e6:6a:72:5e:c5:
a3:c2:72:fd:0c:80:99:a4:dd:ae:d0:20:08:40:65:6a:f7:a8:
1c:34:1e:97:34:d5:5a:44:4a:e7:60:f5:2f:48:d6:74:c7:de:
5a:e3:83:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFwJVL+bjSYu8KVV+vET1giMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2Y2OWNjYTJjODZlMTk0NzU0Nzg4ZWRjZDg4ZTM1MmVk
NGUxMWMwHhcNMjYxMDI0MjMwMDU2WhcNMjYxMDI1MjMwMDU2WjAzMTEwLwYDVQQD
EygyZjkyNGY5OWY5NDUyZmMxODM5NWE1ZmY1ZDBiZDk0ZWQ5MWE1OGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwK3ZoZxd+IJzHN7P/eQdWkkEtyL8
FAlKcEsRMr0nju6vpByieQ489Sz3+pwUuqybfeiDjTQxy1hvjkWCc1APH5vNY/6I
quOL1JPhINwMg/X0/TeOIz21ZuYv6LYP61b3Z+FhOpM+9dnL+wALFUAUq9Y/X6CQ
RoxAl7Scb6mkCSXwpEJT6skYrpuXhniCf3Z/imKr+bXB00HtQ2V2RFH65KNb7McU
+ozRMOvJbYVo8c7DyBImhGU9Xt5lTjVB7bW4MK8bi8ue5yHInLpjWHLmiwu1YcSZ
9T7YbWX8d+LFSy0+JDmNZlihhuoCQtOWWaZYs6hRT3H/f/RCr4jjnK0JywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+ST5n5RS/Bg5Wl/10L2U7ZGlijMB8GA1UdIwQY
MBaAFEDPacyiyG4ZR1R4jtzYjjUu1OEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQt
Y2YxYTVkOGU1ZjZkLzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQtY2YxYTVkOGU1ZjZk
LzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABaOWlXIO
5cT+tzd8kmF4TxFpqjSsmRk915xMpTht/5ygnI1N5n06Libt1Ib4Aw9lQ3BVM879
jiBQb5D9xExKONOzjrcYzmhRziXR9BexzxlQrAJD05MFhYeMxRhZavvB8YLIhnBX
X75GNDh8J7as18zlcONVvsPfjiNFTBGKW+x+KR8QIU+7wwbEjh/Anau1sNKm0aZq
KAj0UqB6rQipV5i+OLJS+zpr7uDritXbyXQCqJ6KtGMOjmc3StPUTct16LU3G3sG
v9gwQb/+H3QmLApdJ+Zqcl7Fo8Jy/QyAmaTdrtAgCEBlaveoHDQelzTVWkRK52D1
L0jWdMfeWuODYA==
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:07:05 2026 by rpki-client