Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
File: QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft (raw, json)
Hash identifier: LxcDmmxbi8fem1CHSvprChs/rBMhTBGbhU92rGbX4v0=
Subject key identifier: 25:FF:99:97:DF:8D:62:7B:49:86:13:22:0B:ED:2B:B6:D4:B8:7C:7F
Authority key identifier: 40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
Certificate issuer: /CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Certificate serial: 019DFA96238FFAFAF3FE4E7FA2FB3C6F4187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
Manifest number: 49
Signing time: Wed 06 May 2026 00:00:36 +0000
Manifest this update: Wed 06 May 2026 00:00:36 +0000
Manifest next update: Thu 07 May 2026 00:00:36 +0000
Files and hashes: 1: QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl (hash: YiQcgpxZfWRSqFN8GClHVX8WhXNqyaULda3TLNi4xr4=)
2: bc_rDqdFLWG9EqOE3XpdCbzci7A.roa (hash: QX2e7Tpj37ujdBJf37YYj5ilDYHQsrFIORHYzhmx2Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fa:96:23:8f:fa:fa:f3:fe:4e:7f:a2:fb:3c:6f:41:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Validity
Not Before: May 6 00:00:36 2026 GMT
Not After : May 7 00:00:36 2026 GMT
Subject: CN=25ff9997df8d627b498613220bed2bb6d4b87c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:89:31:d8:33:79:7e:6c:c3:9d:a1:ad:c0:c3:
e1:b2:ff:2d:db:09:63:3f:39:93:fe:6c:18:b8:3a:
cd:64:01:96:0a:fb:66:1c:8b:f5:20:fb:13:0d:e4:
e7:cc:21:66:fc:2a:7f:2c:7c:20:09:dc:0a:f6:ab:
87:df:c8:e5:02:bc:e1:a2:6e:1d:7b:69:1d:93:73:
06:51:de:f3:6b:79:19:f3:d5:3d:f3:8a:3b:f4:d7:
55:f0:0e:be:fc:ef:b5:20:36:ee:fc:24:0a:c9:25:
29:21:50:c4:3c:49:2f:01:47:95:e7:e4:fd:e8:40:
d5:e5:22:16:cd:fe:1c:93:f8:d5:75:1d:8c:cd:96:
39:a7:7a:35:ec:cb:87:34:e0:3c:29:14:05:de:7d:
6b:cc:2b:b6:9a:59:db:0b:6e:19:c6:4b:9d:e2:c9:
da:d1:d5:60:7b:81:1f:84:6e:89:17:83:9a:3e:dc:
51:d8:02:fe:fd:99:db:6d:7d:76:0b:5e:32:f8:b8:
c7:14:7e:1e:a4:f4:43:40:61:b9:1b:c3:4c:5b:62:
6f:77:39:a3:44:9e:b0:ec:ee:ad:8a:6e:d0:6c:8a:
4a:61:53:7f:58:bf:aa:46:c5:db:51:79:e1:7b:7c:
d5:9b:8c:1e:bb:72:61:26:42:99:6f:5e:60:9a:df:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FF:99:97:DF:8D:62:7B:49:86:13:22:0B:ED:2B:B6:D4:B8:7C:7F
X509v3 Authority Key Identifier:
keyid:40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d4:1b:33:a4:5d:c3:27:4d:31:8a:25:c1:b1:94:56:07:80:
2d:ac:54:cf:66:8e:df:fd:e7:7b:ef:85:23:2f:3d:87:08:88:
ab:21:11:50:6a:4f:ae:62:dc:86:75:45:d0:20:13:90:19:86:
17:9a:60:b8:dd:ee:c1:a1:a0:89:cd:8b:b6:78:3b:f2:18:04:
48:49:1d:47:1a:a6:8a:7e:86:c0:b8:28:b5:c9:6f:a2:73:0e:
30:92:9e:de:e7:3b:dc:87:c7:34:a8:82:d7:e3:8e:e3:90:0c:
46:71:7b:06:37:89:a3:0c:ec:f7:75:dc:57:d3:dc:4d:1c:c4:
23:30:6d:21:e7:54:d8:48:ab:1e:47:2e:fd:6c:59:2a:4f:f9:
ac:61:af:23:57:e3:3a:2c:a4:3e:76:8a:fe:bd:ab:67:1b:c9:
f5:ed:b6:9d:d6:cd:ff:04:67:aa:36:43:69:2f:d7:68:6a:2d:
51:5e:67:55:0b:a5:67:5a:b5:9e:12:3c:1b:08:b7:05:d8:58:
50:f3:48:ba:f2:e3:97:92:14:42:7b:de:5a:80:bc:bd:cf:a4:
73:9b:b7:71:5c:f4:f8:49:0f:9c:af:f8:8a:f9:02:10:c8:a2:
be:c3:e5:bd:f6:ba:7e:e5:3c:94:2d:d3:50:11:ec:c3:17:b5:
cc:a4:a7:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ36liOP+vrz/k5/ovs8b0GHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmVmMThmNThmNWFkMTgwNGU5YjZjNWFlZjZlMjMyY2Ni
OGExZTIwHhcNMjYwNTA2MDAwMDM2WhcNMjYwNTA3MDAwMDM2WjAzMTEwLwYDVQQD
EygyNWZmOTk5N2RmOGQ2MjdiNDk4NjEzMjIwYmVkMmJiNmQ0Yjg3YzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYkx2DN5fmzDnaGtwMPhsv8t2wlj
PzmT/mwYuDrNZAGWCvtmHIv1IPsTDeTnzCFm/Cp/LHwgCdwK9quH38jlArzhom4d
e2kdk3MGUd7za3kZ89U984o79NdV8A6+/O+1IDbu/CQKySUpIVDEPEkvAUeV5+T9
6EDV5SIWzf4ck/jVdR2MzZY5p3o17MuHNOA8KRQF3n1rzCu2mlnbC24Zxkud4sna
0dVge4EfhG6JF4OaPtxR2AL+/ZnbbX12C14y+LjHFH4epPRDQGG5G8NMW2Jvdzmj
RJ6w7O6tim7QbIpKYVN/WL+qRsXbUXnhe3zVm4weu3JhJkKZb15gmt8oRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCX/mZffjWJ7SYYTIgvtK7bUuHx/MB8GA1UdIwQY
MBaAFEBu8Y9Y9a0YBOm2xa724jLMuKHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUc3eGoxajFyUmdFNmJiRnJ2YmlNc3k0b2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNzFmMTEtNjQ1Ny00M2UwLTk0MWYt
ZTc2NjE2MzdlZWJkLzEvUUc3eGoxajFyUmdFNmJiRnJ2YmlNc3k0b2VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8zNzFmMTEtNjQ1Ny00M2UwLTk0MWYtZTc2NjE2MzdlZWJk
LzEvUUc3eGoxajFyUmdFNmJiRnJ2YmlNc3k0b2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtQbM6Rd
wydNMYolwbGUVgeALaxUz2aO3/3ne++FIy89hwiIqyERUGpPrmLchnVF0CATkBmG
F5pguN3uwaGgic2Ltng78hgESEkdRxqmin6GwLgotclvonMOMJKe3uc73IfHNKiC
1+OO45AMRnF7BjeJowzs93XcV9PcTRzEIzBtIedU2EirHkcu/WxZKk/5rGGvI1fj
OiykPnaK/r2rZxvJ9e22ndbN/wRnqjZDaS/XaGotUV5nVQulZ1q1nhI8Gwi3BdhY
UPNIuvLjl5IUQnveWoC8vc+kc5u3cVz0+EkPnK/4ivkCEMiivsPlvfa6fuU8lC3T
UBHswxe1zKSnkg==
-----END CERTIFICATE-----
Generated at Wed May 6 10:00:06 2026 by rpki-client