Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: bEQ8qUuirFbqnxH7Jz8xbaozC2YbfCf3YIa5lQDBK4s=
Subject key identifier: E9:41:D8:3D:03:C9:17:38:F8:D0:37:EA:83:E0:4A:CD:C7:9F:55:FF
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 01A1826292CB51447698EC02234519B08212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 19F9
Signing time: Wed 28 Oct 2026 12:01:00 +0000
Manifest this update: Wed 28 Oct 2026 12:01:00 +0000
Manifest next update: Thu 29 Oct 2026 12:01:00 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: JdFBW2f5Nt7UbagEgbMk7rZOqkaDkS/dUQk4Ut2N/1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:92:cb:51:44:76:98:ec:02:23:45:19:b0:82:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Oct 28 12:01:00 2026 GMT
Not After : Oct 29 12:01:00 2026 GMT
Subject: CN=e941d83d03c91738f8d037ea83e04acdc79f55ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:79:d4:b7:f7:98:98:08:ed:ad:3e:d7:f5:94:
aa:c0:70:d4:35:82:13:fb:f7:4c:cc:c5:5f:ec:88:
ba:34:51:93:47:d7:ad:5e:33:af:46:e8:57:b2:26:
7f:f3:2c:35:0a:23:89:b5:97:87:84:ba:f1:30:18:
52:e5:1e:f7:be:81:f5:85:8b:d2:21:60:da:4e:55:
be:23:c7:99:98:5b:df:20:21:22:e2:97:d1:63:59:
2b:d8:95:f1:90:b5:63:be:12:1d:8a:16:81:7c:c7:
b0:4b:7a:65:d9:1d:e0:ba:a2:f6:a5:df:2a:0c:b0:
d0:45:b1:6b:c7:1f:cd:08:fe:fe:1e:85:78:81:5c:
c9:66:b4:7b:31:65:25:f3:ac:3d:8e:4f:3d:b0:fe:
f3:8e:8b:40:ca:08:fe:69:75:af:6a:a8:52:ac:14:
09:7d:d1:d1:f8:2b:de:38:5c:a0:18:6b:4c:8c:19:
32:b2:f5:ff:c4:09:3a:7c:12:8a:0f:18:25:cd:1f:
0b:c3:65:a6:42:b2:21:51:bf:ec:49:d5:57:5f:88:
5d:00:eb:6c:55:d7:6a:99:46:d4:20:d5:06:76:e6:
93:79:e7:62:ee:a2:bb:cd:bc:08:af:e3:da:fc:2e:
ff:b7:35:42:ea:82:44:17:3b:09:2b:26:d6:9f:1d:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:41:D8:3D:03:C9:17:38:F8:D0:37:EA:83:E0:4A:CD:C7:9F:55:FF
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5b:23:0c:a5:83:fe:e9:13:2e:f0:2f:ac:a7:10:f1:81:8e:
6f:e9:9c:d7:4b:bc:c0:76:b8:b4:ed:0f:4e:5f:55:71:39:41:
24:d9:6c:0e:fe:68:3e:82:a3:90:8a:24:3a:43:2b:70:bb:53:
c3:2f:a2:6e:61:4c:e4:cb:69:50:80:8d:29:56:9c:73:ba:ad:
68:44:44:75:de:de:d5:43:7a:ba:e8:fd:41:be:5e:3a:c8:ad:
c9:74:ac:17:43:89:9d:fb:83:19:e4:77:f5:d2:9f:23:19:8d:
ee:71:19:ec:57:03:c3:64:d4:f5:2f:04:0e:b0:73:db:85:87:
3f:af:56:f4:3a:5d:38:9f:3d:07:3b:e4:6f:f8:7a:61:d9:96:
dc:6b:a9:1e:9c:17:bc:5c:fd:b6:d9:da:3a:9c:cd:6c:22:76:
2f:2e:1e:a5:81:70:1a:cf:74:b1:1e:7c:e4:ab:85:be:8f:66:
76:b2:1e:24:bf:fc:7c:1c:04:5f:52:5d:a2:c4:30:e9:60:35:
0d:b1:ae:2a:af:56:e7:46:91:ef:d4:44:96:d2:39:a3:fe:aa:
d5:4c:61:e7:85:0e:b9:66:62:26:0b:03:07:ed:05:ef:44:f0:
0a:4e:4b:7f:4b:b2:b7:0e:81:b3:32:61:da:0b:98:53:a6:a0:
40:fa:65:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGCYpLLUUR2mOwCI0UZsIISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2Q2M2IzMmU3MWMxYzE2OTI0M2VmZGI2ZDU2ZWQ1Y2E2
YjgyNGUwHhcNMjYxMDI4MTIwMTAwWhcNMjYxMDI5MTIwMTAwWjAzMTEwLwYDVQQD
EyhlOTQxZDgzZDAzYzkxNzM4ZjhkMDM3ZWE4M2UwNGFjZGM3OWY1NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXnUt/eYmAjtrT7X9ZSqwHDUNYIT
+/dMzMVf7Ii6NFGTR9etXjOvRuhXsiZ/8yw1CiOJtZeHhLrxMBhS5R73voH1hYvS
IWDaTlW+I8eZmFvfICEi4pfRY1kr2JXxkLVjvhIdihaBfMewS3pl2R3guqL2pd8q
DLDQRbFrxx/NCP7+HoV4gVzJZrR7MWUl86w9jk89sP7zjotAygj+aXWvaqhSrBQJ
fdHR+CveOFygGGtMjBkysvX/xAk6fBKKDxglzR8Lw2WmQrIhUb/sSdVXX4hdAOts
VddqmUbUINUGduaTeedi7qK7zbwIr+Pa/C7/tzVC6oJEFzsJKybWnx2wEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlB2D0DyRc4+NA36oPgSs3Hn1X/MB8GA1UdIwQY
MBaAFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYt
YjM1NGMwMzkzNzVhLzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYtYjM1NGMwMzkzNzVh
LzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFsjDKWD
/ukTLvAvrKcQ8YGOb+mc10u8wHa4tO0PTl9VcTlBJNlsDv5oPoKjkIokOkMrcLtT
wy+ibmFM5MtpUICNKVacc7qtaEREdd7e1UN6uuj9Qb5eOsityXSsF0OJnfuDGeR3
9dKfIxmN7nEZ7FcDw2TU9S8EDrBz24WHP69W9DpdOJ89Bzvkb/h6YdmW3GupHpwX
vFz9ttnaOpzNbCJ2Ly4epYFwGs90sR585KuFvo9mdrIeJL/8fBwEX1JdosQw6WA1
DbGuKq9W50aR79REltI5o/6q1Uxh54UOuWZiJgsDB+0F70TwCk5Lf0uytw6BszJh
2guYU6agQPplLw==
-----END CERTIFICATE-----
Generated at Wed Oct 28 14:36:43 2026 by rpki-client