Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
File: QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft (raw, json)
Hash identifier: yJV5gDeQRUUPUSIbAMb3MypPhgg9N9pjT937anq+jqc=
Subject key identifier: 23:3D:BC:3C:32:5F:B9:BD:DD:F5:58:F4:E3:74:B2:B7:60:17:32:0E
Authority key identifier: 40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
Certificate issuer: /CN=40e3953c5cb452f159f8e1505fc702e883657e72
Certificate serial: 01A161FBE225812B8425E5AABD73963E6A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
Manifest number: 1ABE
Signing time: Thu 22 Oct 2026 05:00:59 +0000
Manifest this update: Thu 22 Oct 2026 05:00:59 +0000
Manifest next update: Fri 23 Oct 2026 05:00:59 +0000
Files and hashes: 1: 2pkPSs8gVn643UGplZoHfvgJ4jU.roa (hash: X1hpztinQvCh1GRCCDgW40Mdj2XAHD7UuWOgieEm9aw=)
2: 5_3H5oUB0Z5mLwXi_W_cQfYMDuk.roa (hash: NEc7QIS1126HxAUD9gRMIkc83/j75nLK/QAT5XjvVaU=)
3: JzhyAViO7IK7RlS2hXx7L9AIs80.roa (hash: DNuJU3HK3yevWo0xWtq0yRqUiOXXwFV8rL1Um11rKUA=)
4: QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl (hash: qd6DxTzTjwmKlGqLz34L6/vi8jz+/Snee2yX8BZ0OmU=)
5: zdUU6xh-U_UhQuIpzwDv3G1TgNc.roa (hash: Xcmlw4uYbZey4RR44rfO/TAhXzqgGs0gxnMsef5qoaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:fb:e2:25:81:2b:84:25:e5:aa:bd:73:96:3e:6a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40e3953c5cb452f159f8e1505fc702e883657e72
Validity
Not Before: Oct 22 05:00:59 2026 GMT
Not After : Oct 23 05:00:59 2026 GMT
Subject: CN=233dbc3c325fb9bdddf558f4e374b2b76017320e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:98:91:da:2d:38:5e:70:f1:9a:59:c7:23:82:
d7:ba:47:6e:6a:34:fa:7b:48:82:be:69:96:86:76:
cb:db:ba:0f:44:d1:45:92:1a:74:48:11:1a:81:7c:
ca:ba:f5:d0:1e:f2:e2:3f:79:1d:14:b9:50:49:79:
63:5c:75:ae:35:8e:a2:21:c1:d0:c5:a3:a3:84:ef:
9d:d8:38:f2:eb:e9:40:55:e3:86:6e:09:fa:bf:35:
f7:16:e3:d1:84:70:bc:aa:a5:0e:d3:4c:fa:4a:e5:
fb:bf:48:7c:54:5d:ad:d0:af:2c:8e:bc:65:13:fe:
30:c6:03:ee:fd:4d:92:87:39:87:fe:04:90:ac:9b:
43:ef:1d:93:c4:5d:10:3b:5e:91:29:36:73:16:91:
2d:94:4b:21:8c:c2:e9:09:59:c5:4c:2e:bf:29:4f:
86:5a:ae:ff:07:5f:cd:b6:72:9c:9c:7e:11:af:dd:
e8:ed:42:27:b4:f0:d6:d8:61:7c:87:6d:9d:7d:8e:
80:35:79:85:dc:d5:d6:5a:54:8b:ea:8b:07:ea:8d:
95:03:ee:34:83:ab:94:f7:12:f0:04:aa:87:08:08:
57:10:ff:f9:a1:22:ce:48:e4:e1:18:f7:be:30:fc:
10:8a:56:88:cd:cc:46:2b:08:60:92:cd:3c:74:17:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:3D:BC:3C:32:5F:B9:BD:DD:F5:58:F4:E3:74:B2:B7:60:17:32:0E
X509v3 Authority Key Identifier:
keyid:40:E3:95:3C:5C:B4:52:F1:59:F8:E1:50:5F:C7:02:E8:83:65:7E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QOOVPFy0UvFZ-OFQX8cC6INlfnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7d8505-3899-4a9e-8cf1-fa5af38deb5e/1/QOOVPFy0UvFZ-OFQX8cC6INlfnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:7f:fa:07:15:c5:fb:34:b9:95:e7:b8:87:76:7b:ca:a0:3c:
9a:51:88:4f:37:a4:fa:b1:72:0b:81:68:c9:1b:ae:2b:7c:83:
a3:bf:58:36:13:a5:d3:ba:c0:8b:c5:0a:af:4a:83:de:18:b3:
ef:f5:ff:92:2e:ed:3b:6d:30:42:6e:79:f7:8b:ea:30:ba:0a:
df:4f:09:b4:09:a9:3d:f1:57:7a:6a:6e:c3:aa:d4:0e:3f:2e:
96:ac:91:58:28:6c:1b:ee:74:e3:7c:a9:ca:1c:88:26:b7:0e:
1b:4e:cd:fc:f6:de:6b:83:0f:3b:29:72:16:12:f2:25:de:65:
5c:b2:19:c1:b2:82:24:e4:58:a7:2e:54:fa:d2:e0:4b:df:c3:
5e:23:83:12:5d:95:35:87:cf:35:01:cc:f6:6a:d1:16:6d:42:
dd:db:89:d4:51:d6:5b:f4:44:75:81:17:0e:00:d4:31:f1:c8:
b4:f9:cb:42:78:8c:28:4c:0a:e9:ac:a4:49:ea:16:63:db:90:
b0:c8:5c:29:a2:4e:46:93:a3:b7:48:b9:8c:e9:65:c7:ba:d6:
98:58:33:d6:22:f6:1d:e0:c0:6d:aa:87:16:4f:f3:4d:7a:40:
8b:b5:2a:25:c7:ae:e8:22:55:62:d5:e8:24:22:b4:39:88:fc:
47:89:53:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFh++IlgSuEJeWqvXOWPmoOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZTM5NTNjNWNiNDUyZjE1OWY4ZTE1MDVmYzcwMmU4ODM2
NTdlNzIwHhcNMjYxMDIyMDUwMDU5WhcNMjYxMDIzMDUwMDU5WjAzMTEwLwYDVQQD
EygyMzNkYmMzYzMyNWZiOWJkZGRmNTU4ZjRlMzc0YjJiNzYwMTczMjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZiR2i04XnDxmlnHI4LXukduajT6
e0iCvmmWhnbL27oPRNFFkhp0SBEagXzKuvXQHvLiP3kdFLlQSXljXHWuNY6iIcHQ
xaOjhO+d2Djy6+lAVeOGbgn6vzX3FuPRhHC8qqUO00z6SuX7v0h8VF2t0K8sjrxl
E/4wxgPu/U2ShzmH/gSQrJtD7x2TxF0QO16RKTZzFpEtlEshjMLpCVnFTC6/KU+G
Wq7/B1/NtnKcnH4Rr93o7UIntPDW2GF8h22dfY6ANXmF3NXWWlSL6osH6o2VA+40
g6uU9xLwBKqHCAhXEP/5oSLOSOThGPe+MPwQilaIzcxGKwhgks08dBeBbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCM9vDwyX7m93fVY9ON0srdgFzIOMB8GA1UdIwQY
MBaAFEDjlTxctFLxWfjhUF/HAuiDZX5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEt
ZmE1YWYzOGRlYjVlLzEvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi83ZDg1MDUtMzg5OS00YTllLThjZjEtZmE1YWYzOGRlYjVl
LzEvUU9PVlBGeTBVdkZaLU9GUVg4Y0M2SU5sZm5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH/6BxXF
+zS5lee4h3Z7yqA8mlGITzek+rFyC4FoyRuuK3yDo79YNhOl07rAi8UKr0qD3hiz
7/X/ki7tO20wQm5594vqMLoK308JtAmpPfFXempuw6rUDj8ulqyRWChsG+5043yp
yhyIJrcOG07N/Pbea4MPOylyFhLyJd5lXLIZwbKCJORYpy5U+tLgS9/DXiODEl2V
NYfPNQHM9mrRFm1C3duJ1FHWW/REdYEXDgDUMfHItPnLQniMKEwK6aykSeoWY9uQ
sMhcKaJORpOjt0i5jOllx7rWmFgz1iL2HeDAbaqHFk/zTXpAi7UqJceu6CJVYtXo
JCK0OYj8R4lTig==
-----END CERTIFICATE-----
Generated at Thu Oct 22 11:52:40 2026 by rpki-client