Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
File: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft (raw, json)
Hash identifier: CMEtYVUOhsRp+OFFlGHegfHyOdFQB73mLROiOQWVIVE=
Subject key identifier: ED:CE:AE:1F:67:0E:6A:D9:58:F3:2C:93:4E:42:94:CC:DE:14:A1:79
Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Certificate serial: 01A08A8D2FD4ECAA5E0D7B5C0916CF450BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
Manifest number: 1A53
Signing time: Thu 10 Sep 2026 09:01:43 +0000
Manifest this update: Thu 10 Sep 2026 09:01:43 +0000
Manifest next update: Fri 11 Sep 2026 09:01:43 +0000
Files and hashes: 1: AiWXq7LSht7A_MnSyp89YenB8cw.roa (hash: 45UyOYI/2cnOSoCsRxhe2ejFq6iuR/grbSDOO+lRuP8=)
2: qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl (hash: 7gRZOIVGl4lu4262M0qHzu/8i3IWx0Af7NsjzxI+Goo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:2f:d4:ec:aa:5e:0d:7b:5c:09:16:cf:45:0b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b
Validity
Not Before: Sep 10 09:01:43 2026 GMT
Not After : Sep 11 09:01:43 2026 GMT
Subject: CN=edceae1f670e6ad958f32c934e4294ccde14a179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:55:f5:f9:38:dd:a1:ad:7f:da:73:48:cb:
f7:dc:ff:23:0c:20:3d:a7:ad:c5:e2:fc:d7:60:69:
d0:d3:f0:63:31:89:73:e4:f8:1a:83:90:e7:68:b8:
9c:28:70:de:08:26:cc:29:96:c1:5f:a1:af:d2:b8:
7c:18:8d:c2:9c:3b:4f:0e:14:a3:df:58:c5:d1:41:
fc:21:a2:2b:a9:40:ae:d0:2b:c2:3f:32:33:ee:86:
17:eb:fb:81:49:f2:8d:56:08:a7:4c:7f:64:3e:08:
e9:a8:ba:19:ef:e4:d1:ba:a5:28:10:4a:bf:f1:ca:
7a:78:65:ff:90:f7:81:38:a4:51:4b:ac:02:25:94:
95:4b:40:d2:63:e4:f2:c2:c8:d8:1d:ea:fd:53:6b:
0c:70:44:07:56:77:57:ac:fc:63:6d:e7:d4:4f:ec:
d1:c5:dc:17:fa:4b:ef:14:fd:c2:5c:64:61:2d:0b:
26:24:f4:4f:71:f1:24:41:e0:b1:59:8c:87:e3:96:
58:b7:57:2c:19:11:26:79:36:e3:e0:3f:ca:10:92:
09:1d:63:27:d3:51:1e:c0:9c:4e:95:aa:b7:a8:c7:
c6:8e:d0:d7:de:55:0a:9f:49:b2:23:d0:03:be:d1:
f0:bd:5e:5b:4a:21:51:84:0f:96:44:cb:aa:a4:cb:
86:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:CE:AE:1F:67:0E:6A:D9:58:F3:2C:93:4E:42:94:CC:DE:14:A1:79
X509v3 Authority Key Identifier:
keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:82:b4:17:bd:ec:b7:94:23:f1:0c:30:38:e4:9e:6f:c5:a6:
f0:18:6c:55:65:76:11:e7:fe:a9:01:02:09:38:8a:9f:71:ec:
e0:78:19:c1:af:e2:38:11:8d:e1:9b:eb:6a:eb:95:3a:d7:25:
c1:6c:e5:7a:04:db:38:19:42:0e:2e:d3:ea:dc:af:d4:c9:09:
12:b0:2b:eb:18:32:71:8e:a2:f4:f5:f9:28:c2:85:79:44:5c:
ee:25:a7:d4:67:53:87:ad:e8:f4:25:d2:f5:b4:39:eb:54:50:
0f:ad:49:f9:cf:da:1c:8f:ff:9a:da:63:34:fa:bd:33:2b:e4:
45:1b:e4:25:6c:29:18:60:8b:2d:98:79:14:37:c9:61:1d:ba:
00:fa:ea:2d:b8:8a:34:b1:16:22:32:45:79:19:b0:2a:be:48:
43:38:e3:bf:38:60:87:61:d8:8c:c8:6b:2f:d4:fa:3f:4c:27:
8a:08:c2:cc:c8:71:52:09:6c:ec:2c:16:e3:ea:9a:cb:57:aa:
1d:99:10:66:7e:2d:9f:06:90:cd:59:b1:75:95:f8:1f:a3:f0:
17:7c:bf:6a:b1:6a:6c:ee:72:e5:c9:14:fa:84:5f:3f:ee:ea:
57:7a:40:8a:c9:61:c6:0d:24:f2:07:4a:e4:22:80:1f:39:1c:
ec:cd:06:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjS/U7KpeDXtcCRbPRQvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YjVmZTY3YzIwNzk3ZDM5NDE1NTU1NTRmOGM5ODhjYTJm
N2MxN2IwHhcNMjYwOTEwMDkwMTQzWhcNMjYwOTExMDkwMTQzWjAzMTEwLwYDVQQD
EyhlZGNlYWUxZjY3MGU2YWQ5NThmMzJjOTM0ZTQyOTRjY2RlMTRhMTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzj9V9fk43aGtf9pzSMv33P8jDCA9
p63F4vzXYGnQ0/BjMYlz5Pgag5DnaLicKHDeCCbMKZbBX6Gv0rh8GI3CnDtPDhSj
31jF0UH8IaIrqUCu0CvCPzIz7oYX6/uBSfKNVginTH9kPgjpqLoZ7+TRuqUoEEq/
8cp6eGX/kPeBOKRRS6wCJZSVS0DSY+TywsjYHer9U2sMcEQHVndXrPxjbefUT+zR
xdwX+kvvFP3CXGRhLQsmJPRPcfEkQeCxWYyH45ZYt1csGREmeTbj4D/KEJIJHWMn
01EewJxOlaq3qMfGjtDX3lUKn0myI9ADvtHwvV5bSiFRhA+WRMuqpMuGrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO3Orh9nDmrZWPMsk05ClMzeFKF5MB8GA1UdIwQY
MBaAFKi1/mfCB5fTlBVVVU+MmIyi98F7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQt
MWNjNjE5MTk3NTUxLzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQtMWNjNjE5MTk3NTUx
LzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYK0F73s
t5Qj8QwwOOSeb8Wm8BhsVWV2Eef+qQECCTiKn3Hs4HgZwa/iOBGN4ZvrauuVOtcl
wWzlegTbOBlCDi7T6tyv1MkJErAr6xgycY6i9PX5KMKFeURc7iWn1GdTh63o9CXS
9bQ561RQD61J+c/aHI//mtpjNPq9MyvkRRvkJWwpGGCLLZh5FDfJYR26APrqLbiK
NLEWIjJFeRmwKr5IQzjjvzhgh2HYjMhrL9T6P0wnigjCzMhxUgls7CwW4+qay1eq
HZkQZn4tnwaQzVmxdZX4H6PwF3y/arFqbO5y5ckU+oRfP+7qV3pAislhxg0k8gdK
5CKAHzkc7M0Gmw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:07:45 2026 by rpki-client