Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
File: qIe76LBerQ4uRIT4HMjTzTTVJMU.mft (raw, json)
Hash identifier: gyiQaf6HuESzzh5PB/Tq0Rr1PARqbBVgFek4WtJAHnQ=
Subject key identifier: CC:5D:4D:FC:0C:51:4A:51:25:B4:67:93:35:4A:AF:00:2E:ED:19:55
Authority key identifier: A8:87:BB:E8:B0:5E:AD:0E:2E:44:84:F8:1C:C8:D3:CD:34:D5:24:C5
Certificate issuer: /CN=a887bbe8b05ead0e2e4484f81cc8d3cd34d524c5
Certificate serial: 01A0CFDB07D7CDFB5DBFA7B0956498C651C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
Manifest number: 63
Signing time: Wed 23 Sep 2026 20:00:33 +0000
Manifest this update: Wed 23 Sep 2026 20:00:33 +0000
Manifest next update: Thu 24 Sep 2026 20:00:33 +0000
Files and hashes: 1: XGU20dvPzEFLqBGtUHgnqD1uNvc.roa (hash: 0V5jjdVeq5pbW8veVvISrROlp96kJcnyw85WkEAIovA=)
2: qIe76LBerQ4uRIT4HMjTzTTVJMU.crl (hash: ETsYRXwwpnnPgQdjNZTNlARQS3SiMe9pEaQZXf4k6u8=)
3: qbLZvmNVHDw6ywTDJfp7jpRSx3Q.roa (hash: FbKNMJ+Crca/g+9TD+lTtkZskVkL4sJsLikc3sygVLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:07:d7:cd:fb:5d:bf:a7:b0:95:64:98:c6:51:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a887bbe8b05ead0e2e4484f81cc8d3cd34d524c5
Validity
Not Before: Sep 23 20:00:33 2026 GMT
Not After : Sep 24 20:00:33 2026 GMT
Subject: CN=cc5d4dfc0c514a5125b46793354aaf002eed1955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:69:70:47:64:41:39:1f:46:e1:81:44:e9:d8:
d8:53:05:27:b2:d5:45:2d:69:86:d7:95:ab:24:60:
b2:5c:d4:97:a5:7a:cb:aa:2f:06:e1:ff:ca:fb:bf:
e0:4e:dc:0b:57:a3:f6:e8:f7:fc:19:9b:6c:59:75:
1b:a7:d2:d2:66:d6:bd:4b:57:f2:6c:3d:bf:28:e6:
f6:ed:95:a9:89:ec:aa:42:f9:f5:f7:a8:3c:ab:fa:
b6:02:7a:5e:3b:44:c0:67:69:bd:0a:07:43:fa:72:
2d:a8:d5:60:57:ae:c9:5f:0d:96:d7:3f:d0:97:f8:
9e:05:32:fc:54:ce:88:2d:05:05:c4:90:f4:ac:3b:
aa:79:5d:f5:96:07:65:7d:e4:a1:64:63:4a:69:e1:
49:6f:8a:c8:30:5e:f2:c0:b6:83:10:ef:9d:fb:66:
84:d2:29:94:20:f0:c4:1c:24:20:21:d0:df:0f:84:
c8:61:69:7b:ef:b0:0f:12:62:ba:a0:a0:ac:69:78:
61:76:c6:a4:4e:c1:e8:e5:d1:e6:89:04:95:55:bd:
87:7d:75:b1:f0:96:f7:d9:f9:b2:c8:74:e8:84:b5:
3f:41:30:c9:0d:6f:c1:56:c6:00:69:89:8f:cd:80:
ed:7a:5a:99:f3:0d:05:38:00:b1:3a:9f:ca:18:54:
6f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5D:4D:FC:0C:51:4A:51:25:B4:67:93:35:4A:AF:00:2E:ED:19:55
X509v3 Authority Key Identifier:
keyid:A8:87:BB:E8:B0:5E:AD:0E:2E:44:84:F8:1C:C8:D3:CD:34:D5:24:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e1:57:96:a0:38:fa:9b:ac:fb:bc:e3:7c:5b:5f:63:86:37:
a4:41:26:fa:35:f0:a6:ce:95:77:1b:5d:a3:55:d6:db:ac:c6:
fd:74:be:5d:00:2c:a8:a8:ad:47:de:b4:7e:b1:2b:7d:c0:22:
f9:67:b5:c1:5b:35:2a:7a:5b:60:bf:ae:ee:55:13:6a:b8:0c:
4c:2e:1c:ab:47:70:89:52:92:0b:36:66:46:fa:a7:46:13:59:
2e:a1:ea:1d:c5:9b:9d:b2:a7:35:d2:35:fa:ee:e6:44:56:0f:
0e:6f:22:db:37:68:e2:48:db:e8:b3:8a:93:5f:61:5e:36:29:
69:54:5d:5b:67:c7:b4:cf:b6:0c:ae:10:4d:49:7e:39:55:33:
78:50:55:40:af:ee:a5:09:92:2b:c9:dd:1f:8a:8f:17:35:0a:
e4:ec:22:28:3f:ca:fa:87:c6:18:75:62:77:1d:6d:7a:25:f4:
25:9d:89:84:84:53:b3:e8:17:89:7a:77:bf:09:c0:f1:81:57:
19:30:61:c8:2a:23:10:21:30:02:64:f8:7d:dd:96:fc:c8:ad:
21:06:b5:1b:27:db:d6:6c:af:c0:39:c3:88:f4:6a:6b:5b:8f:
5f:f6:40:95:2e:12:f1:26:83:f7:ea:aa:67:01:75:42:aa:f7:
b7:17:59:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2wfXzftdv6ewlWSYxlHEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4ODdiYmU4YjA1ZWFkMGUyZTQ0ODRmODFjYzhkM2NkMzRk
NTI0YzUwHhcNMjYwOTIzMjAwMDMzWhcNMjYwOTI0MjAwMDMzWjAzMTEwLwYDVQQD
EyhjYzVkNGRmYzBjNTE0YTUxMjViNDY3OTMzNTRhYWYwMDJlZWQxOTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWlwR2RBOR9G4YFE6djYUwUnstVF
LWmG15WrJGCyXNSXpXrLqi8G4f/K+7/gTtwLV6P26Pf8GZtsWXUbp9LSZta9S1fy
bD2/KOb27ZWpieyqQvn196g8q/q2AnpeO0TAZ2m9CgdD+nItqNVgV67JXw2W1z/Q
l/ieBTL8VM6ILQUFxJD0rDuqeV31lgdlfeShZGNKaeFJb4rIMF7ywLaDEO+d+2aE
0imUIPDEHCQgIdDfD4TIYWl777APEmK6oKCsaXhhdsakTsHo5dHmiQSVVb2HfXWx
8Jb32fmyyHTohLU/QTDJDW/BVsYAaYmPzYDtelqZ8w0FOACxOp/KGFRvXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxdTfwMUUpRJbRnkzVKrwAu7RlVMB8GA1UdIwQY
MBaAFKiHu+iwXq0OLkSE+BzI08001STFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUllNzZMQmVyUTR1UklUNEhNalR6VFRWSk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zNTk2YmUtNTJmZi00MGEzLWIwZDct
YzE2NzExN2Y4NjQ1LzEvcUllNzZMQmVyUTR1UklUNEhNalR6VFRWSk1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zNTk2YmUtNTJmZi00MGEzLWIwZDctYzE2NzExN2Y4NjQ1
LzEvcUllNzZMQmVyUTR1UklUNEhNalR6VFRWSk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+FXlqA4
+pus+7zjfFtfY4Y3pEEm+jXwps6Vdxtdo1XW26zG/XS+XQAsqKitR960frErfcAi
+We1wVs1KnpbYL+u7lUTargMTC4cq0dwiVKSCzZmRvqnRhNZLqHqHcWbnbKnNdI1
+u7mRFYPDm8i2zdo4kjb6LOKk19hXjYpaVRdW2fHtM+2DK4QTUl+OVUzeFBVQK/u
pQmSK8ndH4qPFzUK5OwiKD/K+ofGGHVidx1teiX0JZ2JhIRTs+gXiXp3vwnA8YFX
GTBhyCojECEwAmT4fd2W/MitIQa1Gyfb1myvwDnDiPRqa1uPX/ZAlS4S8SaD9+qq
ZwF1Qqr3txdZLA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:54:38 2026 by rpki-client