Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: Afqp3glkiKMHsGMThjD7MT9Rbq98U+0Qm9QvNgcIk0c=
Subject key identifier: D0:1F:B8:37:40:9E:DC:C0:1C:0C:BE:AF:34:6A:DB:5C:73:F3:EF:DF
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 01A179CC7D4562BC5794659D3680780E2417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 139B
Signing time: Mon 26 Oct 2026 20:00:06 +0000
Manifest this update: Mon 26 Oct 2026 20:00:06 +0000
Manifest next update: Tue 27 Oct 2026 20:00:06 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: Vn36+tGEBBQ0EHPSwfnDfpiTc6siMq9+GkgiJyu4vzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:cc:7d:45:62:bc:57:94:65:9d:36:80:78:0e:24:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Oct 26 20:00:06 2026 GMT
Not After : Oct 27 20:00:06 2026 GMT
Subject: CN=d01fb837409edcc01c0cbeaf346adb5c73f3efdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:19:24:26:96:96:2c:d9:92:f1:da:e5:f9:
8a:08:6d:0b:aa:1e:60:1b:d7:d5:53:9b:37:7c:b7:
2b:a7:fd:ad:8d:31:db:e0:58:24:13:6e:c0:64:50:
f8:04:c6:b7:d2:13:f2:ec:13:16:67:16:19:bd:89:
17:a7:ec:2f:a3:8a:b8:85:c9:cf:94:99:d8:9c:e1:
48:d0:37:bd:45:df:ca:48:ce:b5:d6:2e:1b:02:df:
53:5f:96:d2:cf:b6:3c:e2:2e:37:cd:01:10:de:18:
83:fe:be:cd:54:92:ab:9e:ed:c8:17:23:c6:37:6c:
c3:db:f5:58:18:c6:df:1c:bb:9c:0b:0d:bc:58:10:
1b:3c:0f:86:d2:6a:d6:45:9f:3d:a4:88:88:9c:37:
9b:b3:31:18:42:c0:99:d8:e2:c4:a3:6c:be:b6:ee:
a2:4b:b8:63:33:5c:64:ba:97:46:d4:a6:2c:39:44:
a7:07:a1:8e:a5:a3:d7:91:14:08:ce:91:ba:7a:d7:
69:7c:bf:fe:f4:92:40:e3:40:dc:d5:e1:cd:b4:3c:
72:37:01:ea:63:f2:4b:83:12:0f:fe:5f:79:86:64:
80:5e:9c:4b:bd:30:7c:30:30:69:36:27:ae:5a:33:
1c:60:10:74:4b:6d:cb:e6:e3:ab:6d:5f:03:42:19:
94:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1F:B8:37:40:9E:DC:C0:1C:0C:BE:AF:34:6A:DB:5C:73:F3:EF:DF
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:55:4f:5a:90:36:65:8a:23:8c:04:78:b4:01:54:70:3a:26:
35:d1:09:56:62:3e:05:a0:63:06:ef:ac:89:d4:8b:4a:d1:53:
82:b0:73:b6:ba:95:cb:89:02:99:f7:1b:e1:72:a7:8c:96:55:
5d:da:4a:c7:68:7b:20:af:f7:06:ee:9c:8e:06:e7:cc:f3:a1:
6e:70:9d:ea:c3:cd:c7:f5:04:9b:b0:7d:2c:87:b9:a6:6f:6b:
0f:ad:fa:fb:e2:43:f3:7b:df:71:44:db:98:e2:05:b1:c2:59:
e3:52:18:f0:1a:44:d6:ba:b1:a7:49:a5:02:1a:57:f9:98:fb:
9b:a5:0a:3a:a3:5d:8f:2d:a4:61:02:80:fd:ea:07:bc:cc:5d:
c1:2c:6f:6c:0e:71:9e:70:e1:3f:c1:1b:91:da:36:99:68:6c:
03:be:f3:94:ee:8d:4b:df:54:67:bb:d7:5b:08:08:88:e4:69:
bd:e5:62:4d:89:20:f6:f7:28:85:de:7f:e4:41:0d:ca:90:dc:
d5:2b:87:88:93:e1:24:54:f1:de:f4:04:e4:20:f4:ed:ac:0b:
57:e7:37:db:b0:c2:03:77:1c:16:0f:44:d2:81:97:00:0f:5c:
4c:5e:ff:81:96:48:a2:28:ed:01:8f:b9:a4:18:ea:60:15:1d:
7c:90:2f:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5zH1FYrxXlGWdNoB4DiQXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZjg3MmU0Y2RiMDdkNjgzOTE0N2U0M2E0YTQxOWJjODRi
YTMyMTQwHhcNMjYxMDI2MjAwMDA2WhcNMjYxMDI3MjAwMDA2WjAzMTEwLwYDVQQD
EyhkMDFmYjgzNzQwOWVkY2MwMWMwY2JlYWYzNDZhZGI1YzczZjNlZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvawZJCaWlizZkvHa5fmKCG0Lqh5g
G9fVU5s3fLcrp/2tjTHb4FgkE27AZFD4BMa30hPy7BMWZxYZvYkXp+wvo4q4hcnP
lJnYnOFI0De9Rd/KSM611i4bAt9TX5bSz7Y84i43zQEQ3hiD/r7NVJKrnu3IFyPG
N2zD2/VYGMbfHLucCw28WBAbPA+G0mrWRZ89pIiInDebszEYQsCZ2OLEo2y+tu6i
S7hjM1xkupdG1KYsOUSnB6GOpaPXkRQIzpG6etdpfL/+9JJA40Dc1eHNtDxyNwHq
Y/JLgxIP/l95hmSAXpxLvTB8MDBpNieuWjMcYBB0S23L5uOrbV8DQhmUlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAfuDdAntzAHAy+rzRq21xz8+/fMB8GA1UdIwQY
MBaAFED4cuTNsH1oORR+Q6SkGbyEujIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTkt
ZGExMzhhZGUyMjJiLzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC81YzkyZDUtYTdlYi00OTI5LWFlMTktZGExMzhhZGUyMjJi
LzEvUVBoeTVNMndmV2c1Rkg1RHBLUVp2SVM2TWhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVVPWpA2
ZYojjAR4tAFUcDomNdEJVmI+BaBjBu+sidSLStFTgrBztrqVy4kCmfcb4XKnjJZV
XdpKx2h7IK/3Bu6cjgbnzPOhbnCd6sPNx/UEm7B9LIe5pm9rD636++JD83vfcUTb
mOIFscJZ41IY8BpE1rqxp0mlAhpX+Zj7m6UKOqNdjy2kYQKA/eoHvMxdwSxvbA5x
nnDhP8Ebkdo2mWhsA77zlO6NS99UZ7vXWwgIiORpveViTYkg9vcohd5/5EENypDc
1SuHiJPhJFTx3vQE5CD07awLV+c327DCA3ccFg9E0oGXAA9cTF7/gZZIoijtAY+5
pBjqYBUdfJAvFw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:07:16 2026 by rpki-client