Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: ZUmO3sNnC15hN5IDAxJa0SQDUKOS9sUd93Nj2tojqQ4=
Subject key identifier: 5E:7E:08:65:57:FA:6C:96:2C:CC:FB:EC:2A:16:61:7D:6B:E4:7C:0D
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 01A08CB22031B17734992AB34D6BA9C02A2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 1A54
Signing time: Thu 10 Sep 2026 19:01:18 +0000
Manifest this update: Thu 10 Sep 2026 19:01:18 +0000
Manifest next update: Fri 11 Sep 2026 19:01:18 +0000
Files and hashes: 1: 1-ojtBFfG2H1rWqjbXk4N7WD3PpY.roa (hash: 33NVVlGbTWQg3lb1uDpxYt5Pr6SGR6CWL3Kw3mH/dfw=)
2: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: xY6H/f6fqBk3T74+qP7rdZGgOFTa7TGcAVCg/2859UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b2:20:31:b1:77:34:99:2a:b3:4d:6b:a9:c0:2a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Sep 10 19:01:18 2026 GMT
Not After : Sep 11 19:01:18 2026 GMT
Subject: CN=5e7e086557fa6c962cccfbec2a16617d6be47c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4d:83:17:b5:92:17:91:c5:b5:3c:00:1c:b4:
b9:a4:cd:b0:8e:45:24:0f:51:90:ab:5f:4b:c6:30:
d2:b6:d0:46:af:9f:d8:85:50:41:54:0b:11:03:6a:
9c:34:cf:e4:61:34:40:8a:4e:15:93:0f:df:a0:7b:
12:8e:94:e3:26:bc:a0:e0:53:db:d9:49:2a:7d:3f:
65:d3:11:1b:11:31:e4:d9:ac:7c:a4:4b:01:e0:a7:
63:c2:26:21:dc:1d:51:3a:6c:8e:05:a1:19:2e:c5:
48:d1:66:22:df:9d:02:93:0f:f9:ed:12:9a:3b:24:
cd:11:28:5b:c4:d7:2d:c2:0f:67:25:57:c6:1c:d4:
28:34:d5:e1:a8:1f:91:4f:12:3a:e7:c0:ae:b1:c5:
4e:3b:c8:fc:ac:7b:3a:47:da:36:36:85:0e:80:59:
bb:bd:d8:41:3a:59:e0:41:40:c5:8d:95:33:fd:64:
6c:60:49:b5:d3:25:43:85:37:33:8d:c2:e8:46:6b:
d4:ee:43:7d:9c:37:e6:e4:34:65:8e:fb:63:4d:90:
76:c4:6f:25:9f:eb:b2:d4:cd:06:06:59:d2:88:aa:
d6:77:ec:47:0d:b7:26:43:58:c1:e8:a2:a6:19:7f:
9e:b3:4c:5f:84:5f:5c:ab:e9:e9:5c:3a:44:59:24:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7E:08:65:57:FA:6C:96:2C:CC:FB:EC:2A:16:61:7D:6B:E4:7C:0D
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:bd:c9:f5:b8:6e:2b:65:2d:66:c1:d0:d6:d8:f8:8e:bf:4f:
0f:e5:5c:4b:38:6a:a2:b3:f0:7b:0b:1a:03:81:c2:37:7e:00:
5f:65:dc:a0:7f:a6:94:1e:96:04:33:81:cf:6a:39:38:b1:70:
cb:bd:b6:82:c3:49:0a:72:66:1f:f6:69:4e:02:26:2c:00:dd:
5f:11:d2:f8:6b:96:bb:82:6f:dd:a3:fe:3f:16:39:db:32:ac:
87:5c:56:14:3c:fa:fc:3e:4d:25:a5:4e:d3:67:0a:89:01:0c:
44:de:86:5c:85:85:38:04:66:e5:17:16:89:4b:47:54:68:44:
42:56:25:dc:4c:9b:d6:55:58:ec:0c:60:de:62:b7:36:d6:58:
2e:ed:e5:17:b2:9b:5b:cc:d6:3f:97:ff:ef:ad:75:53:3e:12:
c0:33:d8:cf:63:8b:b8:ef:64:b7:cf:e8:86:0d:f1:22:e7:23:
1e:91:d7:ec:ee:b2:1c:41:8a:4d:3e:b9:45:78:26:cb:03:a9:
e8:f7:00:bb:44:09:9a:b0:9d:05:af:e5:e0:b5:c2:5a:ae:89:
de:85:88:5b:ff:c2:1e:1e:ae:97:10:f1:58:8e:25:5e:25:99:
b7:5d:f6:1a:5e:18:fe:17:2f:38:fe:32:18:cb:54:77:52:bf:
5c:43:8f:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMsiAxsXc0mSqzTWupwCorMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDkzM2U4MjQ3NDY1MGM2YWEzZTljYmYwNTc0ZDI3Mjg2
NTkyZTcwHhcNMjYwOTEwMTkwMTE4WhcNMjYwOTExMTkwMTE4WjAzMTEwLwYDVQQD
Eyg1ZTdlMDg2NTU3ZmE2Yzk2MmNjY2ZiZWMyYTE2NjE3ZDZiZTQ3YzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU2DF7WSF5HFtTwAHLS5pM2wjkUk
D1GQq19LxjDSttBGr5/YhVBBVAsRA2qcNM/kYTRAik4Vkw/foHsSjpTjJryg4FPb
2UkqfT9l0xEbETHk2ax8pEsB4KdjwiYh3B1ROmyOBaEZLsVI0WYi350Ckw/57RKa
OyTNEShbxNctwg9nJVfGHNQoNNXhqB+RTxI658CuscVOO8j8rHs6R9o2NoUOgFm7
vdhBOlngQUDFjZUz/WRsYEm10yVDhTczjcLoRmvU7kN9nDfm5DRljvtjTZB2xG8l
n+uy1M0GBlnSiKrWd+xHDbcmQ1jB6KKmGX+es0xfhF9cq+npXDpEWSSnDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5+CGVX+myWLMz77CoWYX1r5HwNMB8GA1UdIwQY
MBaAFEDZM+gkdGUMaqPpy/BXTScoZZLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3Njct
ZTY4MWViYmE0YTRhLzEvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zODc5ZGQtZWY5NS00NWU2LTg3NjctZTY4MWViYmE0YTRh
LzEvUU5rejZDUjBaUXhxby1uTDhGZE5KeWhsa3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALr3J9bhu
K2UtZsHQ1tj4jr9PD+VcSzhqorPwewsaA4HCN34AX2XcoH+mlB6WBDOBz2o5OLFw
y722gsNJCnJmH/ZpTgImLADdXxHS+GuWu4Jv3aP+PxY52zKsh1xWFDz6/D5NJaVO
02cKiQEMRN6GXIWFOARm5RcWiUtHVGhEQlYl3Eyb1lVY7Axg3mK3NtZYLu3lF7Kb
W8zWP5f/7611Uz4SwDPYz2OLuO9kt8/ohg3xIucjHpHX7O6yHEGKTT65RXgmywOp
6PcAu0QJmrCdBa/l4LXCWq6J3oWIW//CHh6ulxDxWI4lXiWZt132Gl4Y/hcvOP4y
GMtUd1K/XEOPIw==
-----END CERTIFICATE-----
Generated at Fri Sep 11 01:48:21 2026 by rpki-client