Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
File: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft (raw, json)
Hash identifier: N63dNoMnVot8C6epGkLtsUjnxmBpkMhQR8EyV8LumuU=
Subject key identifier: E0:7B:65:FB:AE:4F:F7:E4:10:5A:A9:67:16:47:39:7F:97:E2:8D:D2
Authority key identifier: 43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
Certificate issuer: /CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Certificate serial: 019FD082CEF216D13928B327B3E6EADF5E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
Manifest number: 0ECE
Signing time: Wed 05 Aug 2026 06:01:00 +0000
Manifest this update: Wed 05 Aug 2026 06:01:00 +0000
Manifest next update: Thu 06 Aug 2026 06:01:00 +0000
Files and hashes: 1: ICnXf_-P4YXpOb6ZjyXTZ_msN-k.roa (hash: 3D4zEGy/FsPIqxHMTFOVIKU0MUectvNEvVPQNjn9vUM=)
2: Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl (hash: bdFXtr6Kac4ooLIPNreK1iYt65LT8q3ewKEiwhYvXww=)
3: uIHF2AQ7vp5Pre5Cme0Crtl9d0U.roa (hash: ubz0GfoUcPQy67DfcRHCrIrq2GX41LDxGEaEZ6xFYHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d0:82:ce:f2:16:d1:39:28:b3:27:b3:e6:ea:df:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ca7f3f65d2947af94f398bb3c7c9c320019084
Validity
Not Before: Aug 5 06:01:00 2026 GMT
Not After : Aug 6 06:01:00 2026 GMT
Subject: CN=e07b65fbae4ff7e4105aa9671647397f97e28dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:81:8e:f4:f7:43:0a:66:03:82:ce:18:67:
fb:22:11:cb:07:fc:6e:69:67:53:e5:1e:4f:04:c0:
45:3b:3a:7f:37:33:1d:bc:4f:a6:0e:37:4f:e3:8f:
95:fa:bc:72:ef:d0:ef:c5:cb:22:80:b5:46:5b:5a:
d4:fe:a9:f6:15:42:2f:66:c7:4b:52:e7:57:e1:cd:
59:b5:f2:18:fb:59:bc:52:ab:a1:aa:97:7f:6a:4c:
ed:9c:d7:8b:c7:28:47:ac:f4:54:30:91:24:86:9c:
87:04:41:3b:73:c4:86:6d:63:9c:30:f8:07:f5:09:
f3:fb:a7:46:c5:fb:e5:97:67:37:59:9b:64:62:22:
af:28:96:e0:60:71:ff:09:ca:a5:7d:d5:eb:6f:5d:
25:84:2b:5b:f3:89:33:f9:d5:f8:d0:58:f1:d5:a7:
85:28:25:e5:2a:53:5c:b3:31:ab:7c:57:7d:bd:ea:
b4:19:72:fe:60:18:97:e8:ed:47:af:51:3b:71:69:
b0:6d:ee:dc:d7:d8:b0:19:82:e9:b4:b5:e6:e7:8f:
56:45:2c:82:3b:32:ae:1f:80:cd:92:46:29:08:c2:
dd:bf:05:e5:32:8f:9d:6b:6a:5e:90:84:17:63:fc:
92:32:4e:99:a1:37:99:0a:7e:84:b8:da:dc:b6:19:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:7B:65:FB:AE:4F:F7:E4:10:5A:A9:67:16:47:39:7F:97:E2:8D:D2
X509v3 Authority Key Identifier:
keyid:43:CA:7F:3F:65:D2:94:7A:F9:4F:39:8B:B3:C7:C9:C3:20:01:90:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f6cf44-66d3-4f0b-8132-d53811fbd7b0/1/Q8p_P2XSlHr5TzmLs8fJwyABkIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:18:55:39:dd:00:a2:88:70:76:6a:c7:83:a7:8b:42:18:4b:
8f:f8:99:9c:bd:f8:d7:5b:08:bb:59:83:79:0a:dc:33:15:08:
ca:9b:80:4d:52:9e:ad:39:ed:d9:a3:c8:90:fa:10:5f:a8:0a:
cd:05:0d:a1:6b:de:5c:c8:05:48:f4:77:87:45:73:f7:cb:c6:
80:e2:65:0e:8d:06:02:aa:1e:ec:16:b0:21:a1:df:64:c7:91:
8f:bf:dc:63:67:82:c5:3b:cc:fb:96:6d:38:34:fd:07:04:33:
9e:36:99:cc:b0:13:a9:b3:c3:a8:ee:ea:90:f4:3b:76:ee:72:
85:ad:f3:77:08:34:37:02:80:f2:ae:e1:51:33:dc:4b:a7:7c:
3e:5b:f4:4d:f1:84:1b:e5:d0:b6:00:e0:93:83:ed:e6:e8:e5:
09:c3:13:3c:0f:43:63:8e:cf:4b:5d:12:df:6e:2c:0c:73:67:
89:c1:e7:40:f3:5f:c6:40:d7:01:d8:91:69:3f:8f:f6:3d:7f:
18:9f:16:fc:61:f2:45:ff:66:2d:26:6e:f1:99:43:01:71:d9:
8a:94:0f:5f:67:6d:94:b5:11:06:1a:a3:15:34:07:c5:45:d6:
05:f4:62:47:f4:33:87:e6:3b:da:fc:88:2a:ed:c7:ea:3e:ed:
da:1d:47:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/Qgs7yFtE5KLMns+bq314pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzY2E3ZjNmNjVkMjk0N2FmOTRmMzk4YmIzYzdjOWMzMjAw
MTkwODQwHhcNMjYwODA1MDYwMTAwWhcNMjYwODA2MDYwMTAwWjAzMTEwLwYDVQQD
EyhlMDdiNjVmYmFlNGZmN2U0MTA1YWE5NjcxNjQ3Mzk3Zjk3ZTI4ZGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy6BjvT3QwpmA4LOGGf7IhHLB/xu
aWdT5R5PBMBFOzp/NzMdvE+mDjdP44+V+rxy79DvxcsigLVGW1rU/qn2FUIvZsdL
UudX4c1ZtfIY+1m8Uquhqpd/akztnNeLxyhHrPRUMJEkhpyHBEE7c8SGbWOcMPgH
9Qnz+6dGxfvll2c3WZtkYiKvKJbgYHH/CcqlfdXrb10lhCtb84kz+dX40Fjx1aeF
KCXlKlNcszGrfFd9veq0GXL+YBiX6O1Hr1E7cWmwbe7c19iwGYLptLXm549WRSyC
OzKuH4DNkkYpCMLdvwXlMo+da2pekIQXY/ySMk6ZoTeZCn6EuNrcthkASQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOB7ZfuuT/fkEFqpZxZHOX+X4o3SMB8GA1UdIwQY
MBaAFEPKfz9l0pR6+U85i7PHycMgAZCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzIt
ZDUzODExZmJkN2IwLzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9mNmNmNDQtNjZkMy00ZjBiLTgxMzItZDUzODExZmJkN2Iw
LzEvUThwX1AyWFNsSHI1VHptTHM4Zkp3eUFCa0lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxhVOd0A
oohwdmrHg6eLQhhLj/iZnL3411sIu1mDeQrcMxUIypuATVKerTnt2aPIkPoQX6gK
zQUNoWveXMgFSPR3h0Vz98vGgOJlDo0GAqoe7BawIaHfZMeRj7/cY2eCxTvM+5Zt
ODT9BwQznjaZzLATqbPDqO7qkPQ7du5yha3zdwg0NwKA8q7hUTPcS6d8Plv0TfGE
G+XQtgDgk4Pt5ujlCcMTPA9DY47PS10S324sDHNnicHnQPNfxkDXAdiRaT+P9j1/
GJ8W/GHyRf9mLSZu8ZlDAXHZipQPX2dtlLURBhqjFTQHxUXWBfRiR/Qzh+Y72vyI
Ku3H6j7t2h1Hbw==
-----END CERTIFICATE-----
Generated at Wed Aug 5 16:02:11 2026 by rpki-client