Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: KyptsmIIhGHJwzhDPVtkr+aeQKXw36F7g2dwmIKy1jE=
Subject key identifier: 1F:45:BC:08:6A:E1:51:70:F9:B8:52:B3:00:76:77:0D:04:22:0C:CC
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 01A084C174CB2B992A265C3ADD1B2738F61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 1A47
Signing time: Wed 09 Sep 2026 06:01:05 +0000
Manifest this update: Wed 09 Sep 2026 06:01:05 +0000
Manifest next update: Thu 10 Sep 2026 06:01:05 +0000
Files and hashes: 1: MQeTf0MYRPYw_402BYO3IY08ZTI.roa (hash: ubuWvtB27a2rNunPzQvBhMbVlyiCsPYMuMsDZ/GM8W0=)
2: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
3: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: jd+51i9AJfnnphQXGTNAVrH341rSQW1fegas4QJqVSw=)
4: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:84:c1:74:cb:2b:99:2a:26:5c:3a:dd:1b:27:38:f6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Sep 9 06:01:05 2026 GMT
Not After : Sep 10 06:01:05 2026 GMT
Subject: CN=1f45bc086ae15170f9b852b30076770d04220ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:86:fe:2d:c4:98:ec:e1:9e:5d:86:52:d5:
9d:ce:82:7c:19:c2:d8:fa:d6:f5:7d:68:b9:86:d7:
60:de:f2:12:5c:1c:47:83:e9:d4:2d:ab:29:c8:45:
03:b6:77:56:01:a3:8a:e2:24:21:ec:c3:56:f6:23:
4f:f7:2e:33:29:cf:93:12:ce:2f:d3:b5:0a:0a:9b:
5c:16:d0:7c:0b:ea:ba:a3:ab:d0:e6:a2:52:36:3c:
0f:ed:67:7f:24:39:bd:3f:bb:ba:94:d4:51:0d:6a:
71:9a:af:2b:74:7d:49:1b:34:92:22:93:07:9e:4d:
14:b5:51:01:19:65:1a:53:d4:d8:3e:5b:e5:dc:d2:
7a:3b:06:d5:b9:9e:d7:26:e0:fb:eb:3f:5d:6b:4e:
89:18:c1:09:c0:ad:4b:47:65:1e:fe:ba:ee:a3:e9:
18:f7:0a:3b:db:5f:29:67:09:7b:77:ce:fd:13:5d:
0e:eb:c1:93:a1:91:56:8c:0f:84:1a:17:56:06:88:
87:c9:fa:29:55:34:a5:a7:38:d9:ce:00:d6:d9:f2:
ee:30:4f:bf:99:6a:58:6f:fc:61:a1:38:a5:0b:38:
4d:9c:b9:d1:bc:5e:39:c9:32:4a:20:d4:98:91:b0:
6e:af:f3:b9:f3:12:d7:a3:be:ba:55:7d:0b:c2:d2:
51:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:45:BC:08:6A:E1:51:70:F9:B8:52:B3:00:76:77:0D:04:22:0C:CC
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:22:6e:82:f8:fd:b6:42:dc:e1:88:5e:62:3f:6e:f2:48:4d:
85:50:49:3c:f2:ca:78:85:c7:df:cc:96:83:d9:a7:93:21:fd:
b9:00:c8:82:e0:74:5f:08:20:91:20:13:7f:10:39:bf:df:74:
8c:5c:c3:09:2d:dc:72:20:b0:51:91:ab:a8:84:96:60:b4:01:
b2:9e:7f:c1:de:0f:95:ed:e4:b2:84:85:a0:b3:43:d7:65:b1:
68:25:42:6b:7c:76:3a:67:b4:98:4d:d3:cb:de:3d:be:63:fb:
99:8d:fe:d9:3e:70:fe:4b:e9:45:1d:2a:f0:7f:06:38:97:10:
87:b9:2b:68:b5:60:03:c3:e7:71:51:f6:5f:10:e9:07:6d:09:
03:86:44:83:56:06:96:09:8f:1c:3a:bc:17:98:97:77:ae:b2:
65:b8:fb:da:f0:ef:26:ce:84:97:74:07:6f:cf:59:cc:77:a3:
29:9c:6b:1c:c3:37:fd:1a:aa:12:51:a4:7a:88:35:c0:99:2e:
b9:ae:c2:91:d5:0b:8b:3d:7e:7b:b3:81:04:66:e2:bd:51:06:
85:e8:fa:c4:7a:0f:23:b6:22:76:3c:ce:e8:3c:97:4d:82:11:
c9:0d:f8:ff:bc:09:f9:f7:e0:ea:c9:a1:de:93:2a:68:81:18:
4f:4e:c2:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCEwXTLK5kqJlw63RsnOPYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzQyNzIzYzFmNzViYTBiZTg5MzVjNzJmNjFiZmU1YzVm
NGNlM2MwHhcNMjYwOTA5MDYwMTA1WhcNMjYwOTEwMDYwMTA1WjAzMTEwLwYDVQQD
EygxZjQ1YmMwODZhZTE1MTcwZjliODUyYjMwMDc2NzcwZDA0MjIwY2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKaG/i3EmOzhnl2GUtWdzoJ8GcLY
+tb1fWi5htdg3vISXBxHg+nULaspyEUDtndWAaOK4iQh7MNW9iNP9y4zKc+TEs4v
07UKCptcFtB8C+q6o6vQ5qJSNjwP7Wd/JDm9P7u6lNRRDWpxmq8rdH1JGzSSIpMH
nk0UtVEBGWUaU9TYPlvl3NJ6OwbVuZ7XJuD76z9da06JGMEJwK1LR2Ue/rruo+kY
9wo7218pZwl7d879E10O68GToZFWjA+EGhdWBoiHyfopVTSlpzjZzgDW2fLuME+/
mWpYb/xhoTilCzhNnLnRvF45yTJKINSYkbBur/O58xLXo766VX0LwtJRrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9FvAhq4VFw+bhSswB2dw0EIgzMMB8GA1UdIwQY
MBaAFELEJyPB91ugvok1xy9hv+XF9M48MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAt
Yjk4YTY5MDFlYTEwLzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jNTY0MTgtZDFkNi00YjQzLWFlYzAtYjk4YTY5MDFlYTEw
LzEvUXNRbkk4SDNXNkMtaVRYSEwyR181Y1gwemp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiJugvj9
tkLc4YheYj9u8khNhVBJPPLKeIXH38yWg9mnkyH9uQDIguB0XwggkSATfxA5v990
jFzDCS3cciCwUZGrqISWYLQBsp5/wd4Ple3ksoSFoLND12WxaCVCa3x2Ome0mE3T
y949vmP7mY3+2T5w/kvpRR0q8H8GOJcQh7kraLVgA8PncVH2XxDpB20JA4ZEg1YG
lgmPHDq8F5iXd66yZbj72vDvJs6El3QHb89ZzHejKZxrHMM3/RqqElGkeog1wJku
ua7CkdULiz1+e7OBBGbivVEGhej6xHoPI7YidjzO6DyXTYIRyQ34/7wJ+ffg6smh
3pMqaIEYT07Cng==
-----END CERTIFICATE-----
Generated at Wed Sep 9 10:19:54 2026 by rpki-client