Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: IHqSzszLEZ23Q3r3sE84O8bjWbGkumWzuo2JlXKZqoQ=
Subject key identifier: 53:D3:F1:9C:89:E2:06:7F:DF:D6:09:84:B7:AA:FB:2E:31:0E:B8:D6
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 019FA3E10D3CF5706E1663A8D263017780D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 1689
Signing time: Mon 27 Jul 2026 14:01:02 +0000
Manifest this update: Mon 27 Jul 2026 14:01:02 +0000
Manifest next update: Tue 28 Jul 2026 14:01:02 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: EflUeVy0F1ZUxw7ZDnmGGlSYAIpPh84kUlT5g999zVE=)
2: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (hash: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:e1:0d:3c:f5:70:6e:16:63:a8:d2:63:01:77:80:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Jul 27 14:01:02 2026 GMT
Not After : Jul 28 14:01:02 2026 GMT
Subject: CN=53d3f19c89e2067fdfd60984b7aafb2e310eb8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a5:65:e1:41:74:50:26:99:ec:e1:81:1f:ac:
bb:88:ed:bf:36:87:19:31:0f:26:46:64:2c:4e:c6:
e1:48:6a:59:be:97:15:4c:12:af:28:96:0f:84:a6:
d1:76:93:e2:ca:4e:0f:f7:45:cb:98:97:9e:73:ff:
21:17:4c:7b:15:45:6b:8d:b8:90:c4:b5:2f:b0:1b:
92:f6:35:31:a9:03:20:2e:6c:f2:ec:c2:11:d4:4b:
73:2e:3b:53:95:8f:63:2a:c7:be:76:99:97:c3:0a:
df:05:07:26:c5:0c:af:2b:8f:3b:be:5c:37:03:e7:
0b:af:96:19:c9:10:87:c7:79:bb:35:ec:82:cf:77:
e6:1b:ff:fe:c4:3a:07:41:d6:a4:73:48:8d:68:52:
76:87:53:a6:9d:4d:9a:a4:1d:51:77:24:0a:b7:c1:
60:9b:87:07:0d:9f:1c:88:13:05:51:3b:26:02:a6:
10:4b:62:db:09:a4:fe:9a:15:1c:93:03:ec:dd:ab:
54:16:12:f1:bf:c6:98:a0:d3:54:50:31:07:7d:64:
56:cd:0f:0f:69:be:77:59:7d:b6:54:1d:7b:5f:81:
9d:1f:44:45:4d:0e:3e:2b:b5:a5:6b:7f:b5:e3:9d:
ed:90:07:2f:05:1d:e4:b0:2c:2f:d2:d6:e8:cb:e4:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D3:F1:9C:89:E2:06:7F:DF:D6:09:84:B7:AA:FB:2E:31:0E:B8:D6
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:5e:c5:4b:7b:dd:79:eb:ef:88:46:d8:1e:29:03:9d:84:0f:
59:5c:38:ff:4c:80:36:4e:8a:71:37:20:a9:de:33:64:77:40:
10:42:1b:83:10:72:33:e6:9e:f8:94:46:5e:1b:05:76:0f:23:
a7:f2:2c:4a:1f:50:73:55:6e:02:62:8b:fe:0f:fa:0a:eb:a4:
ff:83:d0:00:09:a0:f1:7e:1f:fb:f2:44:99:17:a4:30:59:53:
97:8d:ee:94:9f:53:b4:ce:a4:2a:26:b0:e7:b7:a7:a5:ef:52:
11:74:16:ac:0c:3e:63:89:63:08:ff:12:10:ed:69:cf:79:ea:
8a:e5:c1:95:62:47:0c:ea:fd:98:d4:86:d9:1c:d4:ae:96:e0:
45:4a:37:4e:54:05:6e:60:a5:1f:46:82:c7:47:62:17:67:09:
10:4a:97:79:da:07:34:b3:18:55:ee:32:4b:7e:ec:e8:6a:93:
ac:96:d4:0f:2f:1c:69:f5:8f:3d:ac:32:f6:13:54:3d:14:2f:
c9:2e:14:b5:7b:d9:85:ea:37:18:a3:9a:82:34:55:bc:df:5b:
68:23:82:0e:b1:fe:39:35:f8:7a:35:04:af:cc:22:d1:f5:73:
f6:b3:02:07:fa:dc:28:5e:2b:7f:19:16:bc:87:e9:ee:85:4f:
db:db:28:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+j4Q089XBuFmOo0mMBd4DTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwODU2MmUyYjg5NjFiMjJlMjljNzYyZDZjOTkwMzMxYmEz
NjY2NmYwHhcNMjYwNzI3MTQwMTAyWhcNMjYwNzI4MTQwMTAyWjAzMTEwLwYDVQQD
Eyg1M2QzZjE5Yzg5ZTIwNjdmZGZkNjA5ODRiN2FhZmIyZTMxMGViOGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqVl4UF0UCaZ7OGBH6y7iO2/NocZ
MQ8mRmQsTsbhSGpZvpcVTBKvKJYPhKbRdpPiyk4P90XLmJeec/8hF0x7FUVrjbiQ
xLUvsBuS9jUxqQMgLmzy7MIR1EtzLjtTlY9jKse+dpmXwwrfBQcmxQyvK487vlw3
A+cLr5YZyRCHx3m7NeyCz3fmG//+xDoHQdakc0iNaFJ2h1OmnU2apB1RdyQKt8Fg
m4cHDZ8ciBMFUTsmAqYQS2LbCaT+mhUckwPs3atUFhLxv8aYoNNUUDEHfWRWzQ8P
ab53WX22VB17X4GdH0RFTQ4+K7Wla3+1453tkAcvBR3ksCwv0tboy+SZkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPT8ZyJ4gZ/39YJhLeq+y4xDrjWMB8GA1UdIwQY
MBaAFECFYuK4lhsi4px2LWyZAzG6NmZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzct
Y2ZkZmNkNGVlMGYyLzEvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny81MmE2ZGUtNzIzMi00OWIxLTkxYzctY2ZkZmNkNGVlMGYy
LzEvUUlWaTRyaVdHeUxpbkhZdGJKa0RNYm8yWm04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXV7FS3vd
eevviEbYHikDnYQPWVw4/0yANk6KcTcgqd4zZHdAEEIbgxByM+ae+JRGXhsFdg8j
p/IsSh9Qc1VuAmKL/g/6Cuuk/4PQAAmg8X4f+/JEmRekMFlTl43ulJ9TtM6kKiaw
57enpe9SEXQWrAw+Y4ljCP8SEO1pz3nqiuXBlWJHDOr9mNSG2RzUrpbgRUo3TlQF
bmClH0aCx0diF2cJEEqXedoHNLMYVe4yS37s6GqTrJbUDy8cafWPPawy9hNUPRQv
yS4UtXvZheo3GKOagjRVvN9baCOCDrH+OTX4ejUEr8wi0fVz9rMCB/rcKF4rfxkW
vIfp7oVP29soew==
-----END CERTIFICATE-----
Generated at Mon Jul 27 17:16:30 2026 by rpki-client