Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
File: QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft (raw, json)
Hash identifier: 8ZXgtCbmcboMN5grThFpuhu8k3Cs2ygPvcligjh2uxw=
Subject key identifier: 41:80:9B:F5:D3:C0:48:2D:8C:E2:DB:0F:84:00:0D:2E:27:58:ED:D9
Authority key identifier: 40:0B:BC:1C:65:4F:D8:8E:04:0A:0F:A7:94:8C:6C:3F:3D:D9:16:D9
Certificate issuer: /CN=400bbc1c654fd88e040a0fa7948c6c3f3dd916d9
Certificate serial: 01A058C427BED7ABFDBCF825ADA9B65BC845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
Manifest number: 15
Signing time: Mon 31 Aug 2026 17:00:45 +0000
Manifest this update: Mon 31 Aug 2026 17:00:45 +0000
Manifest next update: Tue 01 Sep 2026 17:00:45 +0000
Files and hashes: 1: QAu8HGVP2I4ECg-nlIxsPz3ZFtk.crl (hash: e5a9Y98jKtsqQy6IttJJikgh850rqsTUlj+by7S1XDo=)
2: eaoDxQJvrJYu6cYms8T0nP0nQww.roa (hash: pSWhtvDnivm9h8nEKPtzE2ztIFwGkPLz2VOJgQFEu/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:c4:27:be:d7:ab:fd:bc:f8:25:ad:a9:b6:5b:c8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400bbc1c654fd88e040a0fa7948c6c3f3dd916d9
Validity
Not Before: Aug 31 17:00:45 2026 GMT
Not After : Sep 1 17:00:45 2026 GMT
Subject: CN=41809bf5d3c0482d8ce2db0f84000d2e2758edd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:25:ae:f5:18:16:eb:63:a1:7e:71:9d:06:18:
52:29:8a:7d:90:0e:57:0c:bb:9c:27:80:99:61:b9:
f1:66:a8:b5:74:d3:78:04:10:44:e0:84:a2:12:86:
26:fc:90:6c:b8:71:d9:c4:e5:c1:51:4c:e8:cf:1b:
71:e6:cc:d6:31:bb:2d:10:2c:28:2d:eb:d4:3e:d1:
0d:52:84:29:0c:70:3a:c0:4d:44:81:6f:97:f9:9a:
c4:ae:7e:67:3d:02:e2:72:9d:a8:a2:25:f6:8f:b4:
f2:07:44:ee:47:f0:70:00:ac:48:15:9a:06:8b:cc:
71:af:5d:c7:47:85:c0:f0:75:6b:ff:4c:67:72:5c:
c3:a9:0f:23:fd:b5:7a:b2:44:3f:80:b7:0c:18:5a:
a2:78:62:74:1f:44:c7:22:6d:d7:2b:2a:0f:09:c6:
3a:e4:bd:01:c0:61:9a:01:e4:39:5f:19:37:4f:90:
01:76:82:17:63:e7:31:bc:b6:9c:5a:12:30:6b:57:
5a:c9:c3:4c:22:5d:3e:61:63:4b:49:ae:98:cf:44:
dd:eb:2e:2d:56:7b:8c:df:5a:ea:8d:d1:c4:24:b6:
3c:a0:06:14:7d:58:35:33:01:3c:05:ba:1b:f4:ba:
a3:57:ad:d4:b9:b4:a6:0d:70:37:de:9a:1a:e1:4d:
87:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:80:9B:F5:D3:C0:48:2D:8C:E2:DB:0F:84:00:0D:2E:27:58:ED:D9
X509v3 Authority Key Identifier:
keyid:40:0B:BC:1C:65:4F:D8:8E:04:0A:0F:A7:94:8C:6C:3F:3D:D9:16:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:eb:28:0f:be:a9:61:40:76:64:46:b5:6d:30:6d:6e:b9:22:
88:c7:d2:57:b0:da:17:20:fd:ef:5a:3c:d1:2a:df:34:a3:ab:
10:66:db:4f:26:75:ce:f1:4d:5c:fa:38:11:55:39:65:29:2f:
d1:e0:c6:0c:06:62:95:72:43:2f:f2:5a:a2:08:3e:72:6b:b3:
c5:b2:af:64:fc:46:3e:d3:c2:c9:51:ee:b7:e5:51:b8:b1:e2:
00:d0:32:cb:5c:95:48:56:21:8e:df:c6:07:91:d0:ab:aa:b9:
96:10:87:5a:47:6b:c8:ac:38:e1:b9:08:3e:31:f5:56:6d:03:
16:c6:bf:37:b8:4d:6d:83:e0:be:63:d3:46:0f:02:de:25:ce:
b7:16:d1:42:37:19:fc:c1:9b:c5:f3:2b:f9:8c:f2:ad:c3:ed:
d1:c6:13:a9:bf:87:91:79:e6:8b:26:f5:eb:e4:45:42:6d:41:
6a:fb:c6:a0:c8:80:63:d8:00:f6:56:3f:d5:2b:fa:7a:24:ac:
95:d7:23:ae:23:d8:9d:79:cd:65:be:0a:3f:6a:7f:d2:ee:af:
2a:37:bf:db:28:72:4e:0c:7c:69:ce:4c:e7:b8:88:63:fe:41:
4c:cc:f9:79:cf:49:e5:05:97:e8:ef:ff:70:aa:e6:e8:dd:da:
2f:57:76:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBYxCe+16v9vPglram2W8hFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMGJiYzFjNjU0ZmQ4OGUwNDBhMGZhNzk0OGM2YzNmM2Rk
OTE2ZDkwHhcNMjYwODMxMTcwMDQ1WhcNMjYwOTAxMTcwMDQ1WjAzMTEwLwYDVQQD
Eyg0MTgwOWJmNWQzYzA0ODJkOGNlMmRiMGY4NDAwMGQyZTI3NThlZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiWu9RgW62OhfnGdBhhSKYp9kA5X
DLucJ4CZYbnxZqi1dNN4BBBE4ISiEoYm/JBsuHHZxOXBUUzozxtx5szWMbstECwo
LevUPtENUoQpDHA6wE1EgW+X+ZrErn5nPQLicp2ooiX2j7TyB0TuR/BwAKxIFZoG
i8xxr13HR4XA8HVr/0xnclzDqQ8j/bV6skQ/gLcMGFqieGJ0H0THIm3XKyoPCcY6
5L0BwGGaAeQ5Xxk3T5ABdoIXY+cxvLacWhIwa1daycNMIl0+YWNLSa6Yz0Td6y4t
VnuM31rqjdHEJLY8oAYUfVg1MwE8Bbob9LqjV63UubSmDXA33poa4U2HOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGAm/XTwEgtjOLbD4QADS4nWO3ZMB8GA1UdIwQY
MBaAFEALvBxlT9iOBAoPp5SMbD892RbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUF1OEhHVlAySTRFQ2ctbmxJeHNQejNaRnRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xNjU3MjMtODI0Yy00N2I0LTk3NjAt
Mjk0NTkyNDg4YzIzLzEvUUF1OEhHVlAySTRFQ2ctbmxJeHNQejNaRnRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xNjU3MjMtODI0Yy00N2I0LTk3NjAtMjk0NTkyNDg4YzIz
LzEvUUF1OEhHVlAySTRFQ2ctbmxJeHNQejNaRnRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjesoD76p
YUB2ZEa1bTBtbrkiiMfSV7DaFyD971o80SrfNKOrEGbbTyZ1zvFNXPo4EVU5ZSkv
0eDGDAZilXJDL/Jaogg+cmuzxbKvZPxGPtPCyVHut+VRuLHiANAyy1yVSFYhjt/G
B5HQq6q5lhCHWkdryKw44bkIPjH1Vm0DFsa/N7hNbYPgvmPTRg8C3iXOtxbRQjcZ
/MGbxfMr+YzyrcPt0cYTqb+HkXnmiyb16+RFQm1BavvGoMiAY9gA9lY/1Sv6eiSs
ldcjriPYnXnNZb4KP2p/0u6vKje/2yhyTgx8ac5M57iIY/5BTMz5ec9J5QWX6O//
cKrm6N3aL1d2+g==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:27:23 2026 by rpki-client