Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
File: QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft (raw, json)
Hash identifier: 9nKhyDuo1vPjJUSdqbJV2nq2UyeliCYwrOpXKDXsb+Q=
Subject key identifier: 87:BE:5B:3C:3A:61:3E:10:63:57:5D:8A:0C:79:70:C8:C1:CD:D8:9F
Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Certificate serial: 01A08979FE23E69AE6C7C70B8FE123FE01AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
Manifest number: 032E
Signing time: Thu 10 Sep 2026 04:01:08 +0000
Manifest this update: Thu 10 Sep 2026 04:01:08 +0000
Manifest next update: Fri 11 Sep 2026 04:01:08 +0000
Files and hashes: 1: QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl (hash: I/uZPPfs2JX5FgXeFMyGnM38lqyIFwbgVHRm78znSrA=)
2: ym0w1cReqBylheC3xkqexBP3tgU.roa (hash: zFKUp71k5SpR7ghjnbVLoDMDBWhAa4PbF+krqnsksRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:fe:23:e6:9a:e6:c7:c7:0b:8f:e1:23:fe:01:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Validity
Not Before: Sep 10 04:01:08 2026 GMT
Not After : Sep 11 04:01:08 2026 GMT
Subject: CN=87be5b3c3a613e1063575d8a0c7970c8c1cdd89f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:3f:ef:a7:2d:ce:60:7a:19:00:f2:dd:a1:
b9:8f:48:59:fd:ef:4a:8f:92:ec:1c:c4:2c:22:90:
ca:4d:e9:c6:a6:19:35:b3:71:ae:7e:4d:a8:95:fe:
2b:b4:93:ee:b1:cc:1f:a6:a7:fc:34:cc:e8:94:95:
9d:44:63:20:1e:23:a6:09:52:b6:56:55:47:37:71:
44:cc:ed:2f:cc:c6:64:50:d0:57:c6:6b:bf:85:c0:
46:8f:d4:44:a9:56:84:d6:27:04:5f:be:d1:55:3c:
59:d8:9f:83:05:3a:38:a5:fc:20:9c:24:e8:8e:62:
52:c0:65:9f:04:ad:00:3b:ee:c8:b4:54:87:df:f3:
bd:a1:7c:7c:81:79:6f:6d:97:d6:30:be:3f:a4:1c:
3f:a2:2f:59:31:9b:08:bc:e1:de:56:79:52:5a:95:
57:15:b3:d5:e9:86:ff:5a:f1:f2:99:6e:6a:a4:b4:
a4:b6:f6:9a:ed:6a:15:fd:29:f0:57:be:7f:3c:e8:
c3:a9:11:51:73:ef:96:61:d1:d2:41:4a:d1:08:2e:
3c:d8:00:fe:a9:3e:a7:71:54:05:ab:72:96:e5:8e:
e2:21:e6:63:e8:00:c5:9d:1e:1f:11:0b:af:f5:07:
dd:c5:83:fe:89:f4:42:25:d1:9c:09:19:f2:55:9b:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BE:5B:3C:3A:61:3E:10:63:57:5D:8A:0C:79:70:C8:C1:CD:D8:9F
X509v3 Authority Key Identifier:
keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fa:e5:52:6d:20:da:1e:b5:56:a8:69:fb:c9:63:b9:61:2f:
ad:8f:70:66:3c:eb:83:21:05:ed:6b:37:45:a9:7e:20:0c:32:
e4:f0:cc:ae:ec:75:81:8e:0e:5d:98:1a:69:d3:2a:37:81:92:
56:1b:94:59:f3:72:94:31:93:8d:83:9c:6e:55:67:ee:76:45:
26:bb:cb:2c:10:07:87:db:ce:32:e7:a4:36:20:43:4f:b3:b4:
33:ec:59:a0:9e:2a:35:13:45:f9:e5:fc:87:e7:73:9e:00:7a:
17:f1:4e:7f:57:50:b1:55:4a:ff:93:7c:a5:79:55:71:fc:0d:
64:84:41:8a:d5:5c:90:5a:0c:57:87:34:e5:2c:86:5a:31:9a:
9c:f3:1a:96:8b:44:2a:4a:84:d8:24:67:58:6e:c6:aa:ac:62:
f4:f1:7f:3b:25:10:a0:0c:0e:dc:40:26:8d:cb:68:bc:17:b2:
9f:7d:30:19:70:a2:c9:55:54:f5:15:78:62:a7:03:44:3e:55:
21:89:bf:76:64:d3:63:cb:0e:2c:56:cf:13:89:f3:e4:35:84:
f9:6f:e7:a1:57:63:70:64:99:4a:d0:bd:ee:75:25:a8:f0:1d:
db:ef:6d:77:e0:b6:ad:42:ff:0f:d4:d5:64:98:77:0c:01:10:
62:c4:f7:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJef4j5prmx8cLj+Ej/gGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMjA2YzNlNTY4ZGI3OGE3NmNiYWIxNDJlMGU1YmY0ZjY4
MmVmZTYwHhcNMjYwOTEwMDQwMTA4WhcNMjYwOTExMDQwMTA4WjAzMTEwLwYDVQQD
Eyg4N2JlNWIzYzNhNjEzZTEwNjM1NzVkOGEwYzc5NzBjOGMxY2RkODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXw/76ctzmB6GQDy3aG5j0hZ/e9K
j5LsHMQsIpDKTenGphk1s3Gufk2olf4rtJPuscwfpqf8NMzolJWdRGMgHiOmCVK2
VlVHN3FEzO0vzMZkUNBXxmu/hcBGj9REqVaE1icEX77RVTxZ2J+DBTo4pfwgnCTo
jmJSwGWfBK0AO+7ItFSH3/O9oXx8gXlvbZfWML4/pBw/oi9ZMZsIvOHeVnlSWpVX
FbPV6Yb/WvHymW5qpLSktvaa7WoV/SnwV75/POjDqRFRc++WYdHSQUrRCC482AD+
qT6ncVQFq3KW5Y7iIeZj6ADFnR4fEQuv9QfdxYP+ifRCJdGcCRnyVZtjMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIe+Wzw6YT4QY1ddigx5cMjBzdifMB8GA1UdIwQY
MBaAFEMgbD5WjbeKdsurFC4OW/T2gu/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQt
YjMyZmRiYTE4ZTFjLzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny82MzM4M2ItYzgyNC00MTViLTk2ZmQtYjMyZmRiYTE4ZTFj
LzEvUXlCc1BsYU50NHAyeTZzVUxnNWI5UGFDNy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPrlUm0g
2h61Vqhp+8ljuWEvrY9wZjzrgyEF7Ws3Ral+IAwy5PDMrux1gY4OXZgaadMqN4GS
VhuUWfNylDGTjYOcblVn7nZFJrvLLBAHh9vOMuekNiBDT7O0M+xZoJ4qNRNF+eX8
h+dzngB6F/FOf1dQsVVK/5N8pXlVcfwNZIRBitVckFoMV4c05SyGWjGanPMalotE
KkqE2CRnWG7Gqqxi9PF/OyUQoAwO3EAmjctovBeyn30wGXCiyVVU9RV4YqcDRD5V
IYm/dmTTY8sOLFbPE4nz5DWE+W/noVdjcGSZStC97nUlqPAd2+9td+C2rUL/D9TV
ZJh3DAEQYsT3Dw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:11:42 2026 by rpki-client