Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft
File: Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft (raw, json)
Hash identifier: cMVuuQyKOWD0CKTW9bgFBDMwfhdpHbkfRChej5ztIGs=
Subject key identifier: D2:47:C9:80:8E:2E:71:28:FF:44:6D:7D:6A:78:EF:76:68:97:14:18
Authority key identifier: 43:BA:53:1A:F5:76:79:E0:21:1B:D6:94:1B:5C:18:8F:00:A0:C2:5A
Certificate issuer: /CN=43ba531af57679e0211bd6941b5c188f00a0c25a
Certificate serial: 01A0F568E4362EDAE457075E7756C4E26CDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft
Manifest number: 71
Signing time: Thu 01 Oct 2026 03:01:27 +0000
Manifest this update: Thu 01 Oct 2026 03:01:27 +0000
Manifest next update: Fri 02 Oct 2026 03:01:27 +0000
Files and hashes: 1: Q7pTGvV2eeAhG9aUG1wYjwCgwlo.crl (hash: 09xJdWC9xZuVmKJtFAsDejknaxrpI+envI2oTVC15RU=)
2: _rJomAVDyaUPIP51qpIHk0he1_A.roa (hash: LACdANMwb01Joa8dmiDnz13f/H7H+NN+qC4YeeakcbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:68:e4:36:2e:da:e4:57:07:5e:77:56:c4:e2:6c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ba531af57679e0211bd6941b5c188f00a0c25a
Validity
Not Before: Oct 1 03:01:27 2026 GMT
Not After : Oct 2 03:01:27 2026 GMT
Subject: CN=d247c9808e2e7128ff446d7d6a78ef7668971418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:2d:23:02:15:7c:95:0f:b5:e1:18:2e:b0:
72:1a:df:0b:44:2f:29:02:dd:44:cb:83:23:47:00:
fb:a2:24:7c:37:22:08:1c:dd:88:65:b4:bb:fd:80:
81:15:e7:23:86:d9:2b:e2:6c:02:5b:cd:5d:04:d1:
ce:07:8e:52:4b:57:59:63:0f:e5:20:0c:06:38:10:
68:f5:cc:e7:d7:8e:1e:bb:27:b9:9d:dc:ef:d5:5c:
db:3e:7e:d5:d2:81:3f:c5:37:22:c3:d8:d5:c1:f4:
c4:6b:b5:8e:72:16:51:9a:9a:99:37:cc:83:d9:4c:
b5:53:19:14:8e:67:22:28:2f:1a:48:50:59:08:2a:
18:5f:37:cd:79:e8:ee:d6:5a:60:f3:10:26:e2:29:
56:7c:5d:ce:c8:a5:bd:e8:71:71:ea:1c:07:2c:f5:
59:ba:27:16:9b:d9:af:16:c9:94:96:e9:92:04:f5:
41:99:b5:3f:df:79:7b:64:32:08:0f:1f:7f:a3:ae:
5e:7a:90:48:c2:00:f2:51:84:9f:9e:56:62:b9:a4:
23:a6:9b:9a:c5:a6:e5:b4:90:6d:aa:cc:5d:f2:0e:
0b:7b:a4:d5:97:1e:ce:ea:c4:62:ed:78:0e:54:ab:
d2:5c:4a:b4:88:b0:8b:05:45:e8:08:a8:06:de:80:
f7:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:47:C9:80:8E:2E:71:28:FF:44:6D:7D:6A:78:EF:76:68:97:14:18
X509v3 Authority Key Identifier:
keyid:43:BA:53:1A:F5:76:79:E0:21:1B:D6:94:1B:5C:18:8F:00:A0:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/05c3fa-4c01-44e8-8d88-46de61ff4cef/1/Q7pTGvV2eeAhG9aUG1wYjwCgwlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8b:06:fa:08:44:aa:7a:ae:a4:35:2f:df:95:1e:b2:d5:ab:
8d:f2:68:82:34:b5:1a:bd:b0:00:be:8b:99:99:a3:80:59:a4:
c7:a2:41:57:e1:c3:77:d6:2e:25:fe:d0:11:cc:18:8e:ae:70:
f8:42:6e:f0:9f:61:d7:d5:0b:1f:9d:72:5b:c3:bc:9c:67:a3:
1a:30:4c:b2:7f:fa:02:bd:67:fe:66:09:4e:5c:f8:c0:78:ea:
ae:6f:33:b8:0d:25:d4:13:f2:ae:1a:2f:56:ce:45:44:2a:a1:
6c:2f:58:b5:3a:28:f5:dd:ac:2b:8d:fa:22:3c:c7:02:d7:54:
74:d7:9a:91:79:ac:67:3c:5e:89:02:4b:92:3e:af:3d:e9:48:
2e:da:c0:54:36:60:ee:ca:d6:7b:e1:5b:e7:1f:51:4e:b0:47:
bb:1f:7e:0a:1f:d2:ab:a1:e4:99:41:44:19:2a:73:2f:98:10:
52:f5:ba:43:d4:c6:20:3b:66:eb:bc:50:b7:55:ea:0f:a0:c0:
0f:23:13:19:eb:25:ea:c4:de:6a:c4:24:49:c4:2d:95:ea:e2:
05:8c:3f:c4:6f:44:3a:bd:01:7b:f5:c4:a7:90:0d:f7:3f:5a:
52:3d:09:da:d5:fc:a8:9d:6b:16:3f:e0:57:93:79:d2:79:7a:
49:1e:48:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD1aOQ2LtrkVwded1bE4mzbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYmE1MzFhZjU3Njc5ZTAyMTFiZDY5NDFiNWMxODhmMDBh
MGMyNWEwHhcNMjYxMDAxMDMwMTI3WhcNMjYxMDAyMDMwMTI3WjAzMTEwLwYDVQQD
EyhkMjQ3Yzk4MDhlMmU3MTI4ZmY0NDZkN2Q2YTc4ZWY3NjY4OTcxNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjEtIwIVfJUPteEYLrByGt8LRC8p
At1Ey4MjRwD7oiR8NyIIHN2IZbS7/YCBFecjhtkr4mwCW81dBNHOB45SS1dZYw/l
IAwGOBBo9czn144euye5ndzv1VzbPn7V0oE/xTciw9jVwfTEa7WOchZRmpqZN8yD
2Uy1UxkUjmciKC8aSFBZCCoYXzfNeeju1lpg8xAm4ilWfF3OyKW96HFx6hwHLPVZ
uicWm9mvFsmUlumSBPVBmbU/33l7ZDIIDx9/o65eepBIwgDyUYSfnlZiuaQjppua
xabltJBtqsxd8g4Le6TVlx7O6sRi7XgOVKvSXEq0iLCLBUXoCKgG3oD3aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJHyYCOLnEo/0RtfWp473ZolxQYMB8GA1UdIwQY
MBaAFEO6Uxr1dnngIRvWlBtcGI8AoMJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTdwVEd2VjJlZUFoRzlhVUcxd1lqd0Nnd2xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8wNWMzZmEtNGMwMS00NGU4LThkODgt
NDZkZTYxZmY0Y2VmLzEvUTdwVEd2VjJlZUFoRzlhVUcxd1lqd0Nnd2xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8wNWMzZmEtNGMwMS00NGU4LThkODgtNDZkZTYxZmY0Y2Vm
LzEvUTdwVEd2VjJlZUFoRzlhVUcxd1lqd0Nnd2xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIsG+ghE
qnqupDUv35UestWrjfJogjS1Gr2wAL6LmZmjgFmkx6JBV+HDd9YuJf7QEcwYjq5w
+EJu8J9h19ULH51yW8O8nGejGjBMsn/6Ar1n/mYJTlz4wHjqrm8zuA0l1BPyrhov
Vs5FRCqhbC9YtToo9d2sK436IjzHAtdUdNeakXmsZzxeiQJLkj6vPelILtrAVDZg
7srWe+Fb5x9RTrBHux9+Ch/Sq6HkmUFEGSpzL5gQUvW6Q9TGIDtm67xQt1XqD6DA
DyMTGesl6sTeasQkScQtleriBYw/xG9EOr0Be/XEp5AN9z9aUj0J2tX8qJ1rFj/g
V5N50nl6SR5IjQ==
-----END CERTIFICATE-----
Generated at Thu Oct 1 15:19:45 2026 by rpki-client