Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
File: 1-QN586_ZTA8mtn__o01ulGwp1iQ.mft (raw, json)
Hash identifier: nXKHzXeLWaEvXQDpcmzeOZUZfRACf/EyCa3A1kqsTCw=
Subject key identifier: 40:A5:BB:15:93:A6:D7:F9:94:BF:9A:91:CF:9B:BD:FD:0D:9B:0B:16
Authority key identifier: F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
Certificate issuer: /CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Certificate serial: 01A18074430200E7FB5D36D483D8FC97F3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
Manifest number: 17F6
Signing time: Wed 28 Oct 2026 03:01:05 +0000
Manifest this update: Wed 28 Oct 2026 03:01:05 +0000
Manifest next update: Thu 29 Oct 2026 03:01:05 +0000
Files and hashes: 1: 1-QN586_ZTA8mtn__o01ulGwp1iQ.crl (hash: XhSecuGpcowMyR8+lTIGQ8rIPfA0VXP86dAs46cvJNY=)
2: B6niRvNOCA4Qn9gjdIongaiMTD4.roa (hash: z0N2FgYAwlcdBtKR3hMtzvunINWt5dfi0sM4cewXH/8=)
3: Kxp8sRrLmuxZpgHOo9XGbn4leYo.roa (hash: OqyOjTridS0E6ePLP3GD9AlCuTY0Y4K+aUKgmZHZocI=)
4: TA3ugb2OVcgcyipK0FPCh6-9pgA.roa (hash: V31PsTSAJkcRm4mvoJ3kmIGO6ltT79h5TcyN76h+w+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:43:02:00:e7:fb:5d:36:d4:83:d8:fc:97:f3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90379f3afd94c0f26b67fffa34d6e946c29d624
Validity
Not Before: Oct 28 03:01:05 2026 GMT
Not After : Oct 29 03:01:05 2026 GMT
Subject: CN=40a5bb1593a6d7f994bf9a91cf9bbdfd0d9b0b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:63:f6:d4:a2:86:af:a4:07:3a:ac:e6:c1:42:
c1:6f:5b:83:41:b4:74:ee:d6:6f:a2:e6:72:f6:c7:
03:9b:0a:b3:36:9f:3d:3c:4e:26:80:73:17:06:8b:
46:4d:bf:bc:fb:11:41:9c:33:27:18:f7:d6:0c:68:
d6:22:e8:45:1c:f4:82:f8:62:32:69:4d:f9:11:b6:
66:f8:8f:ef:18:6f:de:fd:fd:b0:78:43:1d:87:f6:
05:03:96:45:7f:ea:78:82:d0:68:40:21:e5:eb:51:
34:40:58:20:e3:5e:ac:9b:b3:d5:2f:6c:36:34:f2:
61:e4:16:50:15:ab:1c:c0:15:5b:6a:41:78:48:03:
91:0d:d8:dc:65:29:63:57:95:fc:b4:84:22:3c:5b:
55:a9:b2:32:5e:22:30:43:cc:70:6c:99:ec:2c:3d:
e7:ff:96:d6:a2:88:18:fd:e7:3e:11:1c:52:64:fd:
d2:09:ac:cd:19:2f:2c:bd:dc:ed:21:94:c6:45:2a:
81:b6:06:a1:5a:f6:29:40:7f:44:3b:f2:22:78:1f:
3c:50:b3:21:d1:46:07:d2:92:93:91:54:2d:2f:17:
e5:92:33:5e:4d:ad:cd:4a:f2:5f:34:d9:cf:35:0e:
84:fd:32:78:28:2d:a7:c7:18:96:db:e7:26:f0:9a:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:BB:15:93:A6:D7:F9:94:BF:9A:91:CF:9B:BD:FD:0D:9B:0B:16
X509v3 Authority Key Identifier:
keyid:F9:03:79:F3:AF:D9:4C:0F:26:B6:7F:FF:A3:4D:6E:94:6C:29:D6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QN586_ZTA8mtn__o01ulGwp1iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/de7ef6-bdae-4717-b061-6f207951c4b2/1/1-QN586_ZTA8mtn__o01ulGwp1iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ea:15:9a:53:a0:10:32:ca:65:f1:a3:6c:f6:bf:1a:14:c5:
90:a3:0a:f2:a9:08:f7:f2:e1:26:fd:9d:20:f5:9a:3d:71:d3:
7a:15:cf:75:1b:1d:65:62:7b:21:f6:57:a6:c5:6a:db:46:d0:
71:5c:30:ff:72:cd:d1:4f:1b:ce:ef:f6:d8:15:5f:e8:77:22:
eb:34:24:c2:88:c7:78:b9:53:0d:53:c8:49:77:a8:b4:a6:2f:
43:c1:e5:24:60:fb:03:4f:02:7f:03:45:59:85:61:37:83:f7:
9c:04:c2:3d:6a:88:20:6b:2b:87:81:5e:68:09:66:b4:dd:89:
69:43:af:23:a0:22:7e:6d:19:75:ce:b7:bb:c1:73:c9:1b:27:
06:7f:9a:e2:81:96:f9:9e:43:17:da:a6:88:1a:46:58:06:e2:
36:bf:a6:d6:43:30:7f:d0:42:62:09:db:4a:b1:ec:d6:da:de:
5c:93:3e:06:29:56:f3:ee:6b:08:63:3f:b3:71:d7:27:10:a8:
d0:47:3f:d4:9a:b6:46:b2:45:41:f1:d1:3a:f9:34:b4:82:88:
75:e4:1e:70:a0:ac:61:96:a2:24:8d:00:46:00:76:c4:18:e7:
16:d1:cb:74:a7:c7:cb:2f:19:dd:fa:7c:af:5d:4a:b0:98:4e:
4c:2c:25:9a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaGAdEMCAOf7XTbUg9j8l/PnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MDM3OWYzYWZkOTRjMGYyNmI2N2ZmZmEzNGQ2ZTk0NmMy
OWQ2MjQwHhcNMjYxMDI4MDMwMTA1WhcNMjYxMDI5MDMwMTA1WjAzMTEwLwYDVQQD
Eyg0MGE1YmIxNTkzYTZkN2Y5OTRiZjlhOTFjZjliYmRmZDBkOWIwYjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomP21KKGr6QHOqzmwULBb1uDQbR0
7tZvouZy9scDmwqzNp89PE4mgHMXBotGTb+8+xFBnDMnGPfWDGjWIuhFHPSC+GIy
aU35EbZm+I/vGG/e/f2weEMdh/YFA5ZFf+p4gtBoQCHl61E0QFgg416sm7PVL2w2
NPJh5BZQFascwBVbakF4SAORDdjcZSljV5X8tIQiPFtVqbIyXiIwQ8xwbJnsLD3n
/5bWoogY/ec+ERxSZP3SCazNGS8svdztIZTGRSqBtgahWvYpQH9EO/IieB88ULMh
0UYH0pKTkVQtLxflkjNeTa3NSvJfNNnPNQ6E/TJ4KC2nxxiW2+cm8Joc1wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFECluxWTptf5lL+akc+bvf0NmwsWMB8GA1UdIwQY
MBaAFPkDefOv2UwPJrZ//6NNbpRsKdYkMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1RTjU4Nl9aVEE4bXRuX19vMDF1bEd3cDFpUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDYvZGU3ZWY2LWJkYWUtNDcxNy1iMDYx
LTZmMjA3OTUxYzRiMi8xLzEtUU41ODZfWlRBOG10bl9fbzAxdWxHd3AxaVEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ2L2RlN2VmNi1iZGFlLTQ3MTctYjA2MS02ZjIwNzk1MWM0
YjIvMS8xLVFONTg2X1pUQThtdG5fX28wMXVsR3dwMWlRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeoV
mlOgEDLKZfGjbPa/GhTFkKMK8qkI9/LhJv2dIPWaPXHTehXPdRsdZWJ7IfZXpsVq
20bQcVww/3LN0U8bzu/22BVf6Hci6zQkwojHeLlTDVPISXeotKYvQ8HlJGD7A08C
fwNFWYVhN4P3nATCPWqIIGsrh4FeaAlmtN2JaUOvI6Aifm0Zdc63u8FzyRsnBn+a
4oGW+Z5DF9qmiBpGWAbiNr+m1kMwf9BCYgnbSrHs1treXJM+BilW8+5rCGM/s3HX
JxCo0Ec/1Jq2RrJFQfHROvk0tIKIdeQecKCsYZaiJI0ARgB2xBjnFtHLdKfHyy8Z
3fp8r11KsJhOTCwlmg==
-----END CERTIFICATE-----
Generated at Wed Oct 28 07:22:10 2026 by rpki-client