Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
File: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json)
Hash identifier: sxkpCAwQ3mDXq5Xx3u6VenJ7Dy2+ruyLvhM2ruRCD/I=
Subject key identifier: DF:94:33:21:7F:65:1B:1B:2B:99:C7:EE:B0:6B:5F:29:57:AF:1F:CB
Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Certificate issuer: /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Certificate serial: 01A08AC35D6E8E5E94E71EC72BC27F88707F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
Manifest number: 1A43
Signing time: Thu 10 Sep 2026 10:00:54 +0000
Manifest this update: Thu 10 Sep 2026 10:00:54 +0000
Manifest next update: Fri 11 Sep 2026 10:00:54 +0000
Files and hashes: 1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: AjXm1XUgsmSLXrWPxuO9C/OWaaE0YiNfqcHAbybiDyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:5d:6e:8e:5e:94:e7:1e:c7:2b:c2:7f:88:70:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Validity
Not Before: Sep 10 10:00:54 2026 GMT
Not After : Sep 11 10:00:54 2026 GMT
Subject: CN=df9433217f651b1b2b99c7eeb06b5f2957af1fcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:b0:87:4a:a9:9d:f3:32:ba:af:56:c0:37:
37:4d:94:27:cd:21:da:14:8a:f0:bc:26:87:76:2d:
00:a5:16:10:9c:ba:2a:47:1e:44:91:d1:0e:24:cb:
bb:bf:d1:15:73:b2:01:7b:b1:48:ef:bb:31:0d:d3:
9f:54:d0:16:25:17:0e:97:49:81:ac:bb:ec:31:36:
1b:da:7a:20:58:52:e1:0c:1e:84:05:21:a4:62:2a:
73:48:56:6a:ce:ab:f1:66:7b:30:68:95:47:3a:b5:
af:db:23:73:8b:b9:94:9c:a6:8e:a8:00:67:68:f1:
0a:6d:fc:0c:13:d6:e4:f2:4c:7e:5c:50:2b:8f:6c:
81:d6:d4:6e:87:d5:94:6a:4f:bb:8c:7f:3c:20:68:
82:ac:b4:ff:1d:cf:c4:18:0c:58:5b:24:7a:76:58:
a3:8e:df:94:61:dd:82:e0:1a:9a:23:3b:f0:18:61:
fb:c3:12:ca:30:03:11:87:c9:de:07:94:95:a9:61:
bf:e5:cf:df:fa:9a:25:7c:09:d4:2e:07:9a:ec:91:
36:84:f0:9f:6c:d1:29:33:eb:f4:7b:52:f1:0f:ee:
8f:b1:71:b0:b5:25:03:20:09:c6:8c:e8:e4:08:de:
48:9f:d3:2f:6c:2a:26:60:4f:25:1e:b8:33:f2:b7:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:94:33:21:7F:65:1B:1B:2B:99:C7:EE:B0:6B:5F:29:57:AF:1F:CB
X509v3 Authority Key Identifier:
keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:03:5c:aa:e9:26:8a:3e:a4:d0:b4:c8:e3:a5:2c:ae:cc:65:
ba:8b:79:76:ef:c2:57:72:d8:c2:da:4f:99:ef:ed:a2:89:74:
12:0e:10:ee:4d:bf:21:e0:6e:52:6f:f3:80:42:8d:63:d3:27:
bf:28:c1:cb:c8:02:3b:57:0f:68:33:8a:ec:fd:a7:54:5a:29:
93:59:79:b5:37:4b:c5:b2:8b:19:21:04:74:e3:cd:58:52:d3:
5f:33:bf:65:50:73:1c:41:72:0d:37:b3:e0:b8:0c:91:8b:f3:
46:a8:97:f1:0d:12:c4:18:fc:5d:ec:67:84:e6:0e:21:19:96:
f6:a5:6c:75:4f:02:91:9e:70:a9:c5:77:26:d9:53:11:94:52:
e2:6b:cc:1e:0b:38:12:a8:eb:73:6a:19:91:2d:6c:49:2e:cd:
86:0f:5b:dc:a1:62:a0:a2:0e:7e:cc:be:fc:71:24:3c:53:92:
1a:d4:27:96:7b:eb:38:02:2a:6c:a7:47:8b:d4:20:85:da:f8:
56:79:be:bc:3f:72:00:a4:3d:d2:ed:c9:20:a0:1c:a6:01:af:
75:47:2a:27:ec:0b:dd:75:ca:18:4a:de:31:b4:da:cc:ee:7c:
76:65:df:82:2d:78:92:1f:5c:15:8a:d0:f5:4e:73:ab:f7:e4:
b3:ee:bd:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKw11ujl6U5x7HK8J/iHB/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMzI0ZjI1MWI2OGZmNTQ2M2Y2YjUzNTA3ZjY2YTRiMDM0
ZGMwZTUwHhcNMjYwOTEwMTAwMDU0WhcNMjYwOTExMTAwMDU0WjAzMTEwLwYDVQQD
EyhkZjk0MzMyMTdmNjUxYjFiMmI5OWM3ZWViMDZiNWYyOTU3YWYxZmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw6wh0qpnfMyuq9WwDc3TZQnzSHa
FIrwvCaHdi0ApRYQnLoqRx5EkdEOJMu7v9EVc7IBe7FI77sxDdOfVNAWJRcOl0mB
rLvsMTYb2nogWFLhDB6EBSGkYipzSFZqzqvxZnswaJVHOrWv2yNzi7mUnKaOqABn
aPEKbfwME9bk8kx+XFArj2yB1tRuh9WUak+7jH88IGiCrLT/Hc/EGAxYWyR6dlij
jt+UYd2C4BqaIzvwGGH7wxLKMAMRh8neB5SVqWG/5c/f+polfAnULgea7JE2hPCf
bNEpM+v0e1LxD+6PsXGwtSUDIAnGjOjkCN5In9MvbComYE8lHrgz8rep9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+UMyF/ZRsbK5nH7rBrXylXrx/LMB8GA1UdIwQY
MBaAFEMyTyUbaP9UY/a1NQf2aksDTcDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXpKUEpSdG9fMVJqOXJVMUJfWnFTd05Od09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hZmVhZDUtOTM3My00ODVhLWE5M2Et
YmMzM2E1NDg5OGUwLzEvUXpKUEpSdG9fMVJqOXJVMUJfWnFTd05Od09VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hZmVhZDUtOTM3My00ODVhLWE5M2EtYmMzM2E1NDg5OGUw
LzEvUXpKUEpSdG9fMVJqOXJVMUJfWnFTd05Od09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwwNcqukm
ij6k0LTI46Usrsxluot5du/CV3LYwtpPme/tool0Eg4Q7k2/IeBuUm/zgEKNY9Mn
vyjBy8gCO1cPaDOK7P2nVFopk1l5tTdLxbKLGSEEdOPNWFLTXzO/ZVBzHEFyDTez
4LgMkYvzRqiX8Q0SxBj8XexnhOYOIRmW9qVsdU8CkZ5wqcV3JtlTEZRS4mvMHgs4
Eqjrc2oZkS1sSS7Nhg9b3KFioKIOfsy+/HEkPFOSGtQnlnvrOAIqbKdHi9Qghdr4
Vnm+vD9yAKQ90u3JIKAcpgGvdUcqJ+wL3XXKGEreMbTazO58dmXfgi14kh9cFYrQ
9U5zq/fks+69zA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:50:01 2026 by rpki-client