Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: XfukwbXeibH4KhiE2Jq41YXHO+ZBIuZc4s1gkjHsQvk=
Subject key identifier: 90:BC:97:15:C7:A3:72:27:99:5B:62:EF:9E:D1:48:E0:00:BD:81:5E
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 01A17A3B0DD5446DCAD8B1206795CA88C4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 1ACF
Signing time: Mon 26 Oct 2026 22:00:52 +0000
Manifest this update: Mon 26 Oct 2026 22:00:52 +0000
Manifest next update: Tue 27 Oct 2026 22:00:52 +0000
Files and hashes: 1: 1-ojtBFfG2H1rWqjbXk4N7WD3PpY.roa (hash: 33NVVlGbTWQg3lb1uDpxYt5Pr6SGR6CWL3Kw3mH/dfw=)
2: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: fMBaUULeUo3cQc6wZu5F8bRLXMXokNj0oRkWYgHsJFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3b:0d:d5:44:6d:ca:d8:b1:20:67:95:ca:88:c4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Oct 26 22:00:52 2026 GMT
Not After : Oct 27 22:00:52 2026 GMT
Subject: CN=90bc9715c7a37227995b62ef9ed148e000bd815e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:60:fa:98:3f:86:fd:87:3f:4e:16:06:a6:04:
0f:60:e2:d5:3e:58:0f:5c:94:c0:20:d4:5f:34:ab:
a9:73:8a:5b:33:6d:aa:cd:c7:86:04:cb:21:62:55:
d7:ec:e6:e6:c7:79:e9:b8:25:c3:80:6e:0f:b6:37:
31:01:d4:16:a6:0f:cb:cf:92:3e:64:db:01:b4:de:
84:4f:c8:fc:6d:b1:01:0d:d4:d2:a5:55:98:af:b7:
6c:61:3b:cc:35:53:d2:df:9d:0d:7c:99:b4:b4:7b:
14:ea:67:04:a4:15:c2:b7:b0:8f:83:30:08:0c:18:
66:0f:27:44:e2:f1:a8:5b:5c:4e:6d:30:d5:f8:d1:
e0:ad:bb:c7:df:88:f7:62:90:f8:43:83:96:ef:23:
ef:ce:24:67:94:bc:9e:55:81:51:5c:ca:e3:c2:8d:
98:e0:75:00:09:f3:9f:b4:91:a8:ac:bf:e3:18:65:
49:73:5f:3d:11:61:7e:b3:c3:d3:35:d0:39:b6:b2:
a1:be:04:f4:cc:af:e5:ab:90:68:8f:d5:c7:88:79:
e9:cf:ec:52:e9:76:7f:ce:b8:66:c9:9a:6e:54:70:
ee:2d:16:41:77:e0:fb:c5:3a:e1:fa:17:bf:d1:90:
17:e1:60:33:f1:cb:8f:ef:ab:32:14:38:84:81:bf:
b1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BC:97:15:C7:A3:72:27:99:5B:62:EF:9E:D1:48:E0:00:BD:81:5E
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:87:aa:ec:dc:48:fd:5c:95:1f:eb:ec:ca:03:d4:39:61:b2:
02:83:e8:7d:aa:11:d3:e7:e7:20:9b:24:d0:0d:40:bf:c2:bd:
35:56:da:9c:5a:eb:35:b1:bf:d2:cb:b4:01:da:c5:2a:0b:57:
b2:1d:25:bc:d8:a6:cb:d1:f6:9b:e0:36:9a:02:94:54:83:23:
a9:dd:58:0e:79:0f:aa:55:a9:ce:ea:99:fc:cd:7c:86:01:e0:
c1:a6:f3:3d:fa:1b:a2:c2:7b:44:93:5d:67:95:66:e3:26:2f:
bb:ca:f8:71:5b:6e:fb:6d:90:ca:7c:22:96:b1:dd:e6:3d:b5:
88:b7:38:f4:d6:f8:98:cf:36:f7:e8:e1:8d:54:81:31:1e:bb:
5f:1a:f0:67:2a:ec:c2:66:53:49:9c:91:b0:b8:db:ff:82:70:
05:27:88:a9:32:a5:b9:46:c4:30:b7:61:b8:55:81:cd:bd:78:
d0:1b:f3:ea:48:06:ad:2f:c8:67:9c:55:aa:9d:ec:b2:c4:f4:
4d:3c:67:74:20:b8:ab:03:82:81:8e:bc:5e:60:52:af:6d:20:
fc:d4:cc:c3:f1:85:0c:20:be:fd:4f:45:18:d1:2d:2e:61:31:
b5:84:78:31:83:5a:e9:ec:a7:ce:64:7f:26:ca:5d:3f:5a:8e:
58:1b:70:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6Ow3VRG3K2LEgZ5XKiMShMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDkzM2U4MjQ3NDY1MGM2YWEzZTljYmYwNTc0ZDI3Mjg2
NTkyZTcwHhcNMjYxMDI2MjIwMDUyWhcNMjYxMDI3MjIwMDUyWjAzMTEwLwYDVQQD
Eyg5MGJjOTcxNWM3YTM3MjI3OTk1YjYyZWY5ZWQxNDhlMDAwYmQ4MTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2D6mD+G/Yc/ThYGpgQPYOLVPlgP
XJTAINRfNKupc4pbM22qzceGBMshYlXX7Obmx3npuCXDgG4PtjcxAdQWpg/Lz5I+
ZNsBtN6ET8j8bbEBDdTSpVWYr7dsYTvMNVPS350NfJm0tHsU6mcEpBXCt7CPgzAI
DBhmDydE4vGoW1xObTDV+NHgrbvH34j3YpD4Q4OW7yPvziRnlLyeVYFRXMrjwo2Y
4HUACfOftJGorL/jGGVJc189EWF+s8PTNdA5trKhvgT0zK/lq5Boj9XHiHnpz+xS
6XZ/zrhmyZpuVHDuLRZBd+D7xTrh+he/0ZAX4WAz8cuP76syFDiEgb+xSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJC8lxXHo3InmVti757RSOAAvYFeMB8GA1UdIwQY
MBaAFEDZM+gkdGUMaqPpy/BXTScoZZLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3Njct
ZTY4MWViYmE0YTRhLzEvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3NjctZTY4MWViYmE0YTRh
LzEvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYeq7NxI
/VyVH+vsygPUOWGyAoPofaoR0+fnIJsk0A1Av8K9NVbanFrrNbG/0su0AdrFKgtX
sh0lvNimy9H2m+A2mgKUVIMjqd1YDnkPqlWpzuqZ/M18hgHgwabzPfobosJ7RJNd
Z5Vm4yYvu8r4cVtu+22QynwilrHd5j21iLc49Nb4mM829+jhjVSBMR67XxrwZyrs
wmZTSZyRsLjb/4JwBSeIqTKluUbEMLdhuFWBzb140Bvz6kgGrS/IZ5xVqp3sssT0
TTxndCC4qwOCgY68XmBSr20g/NTMw/GFDCC+/U9FGNEtLmExtYR4MYNa6eynzmR/
JspdP1qOWBtwVA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:53:13 2026 by rpki-client