Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.mft
File: QP4jqg2xC2-IOpvBujN0lE8welQ.mft (raw, json)
Hash identifier: 69AWTxhasraDs2hdvTdYfYyc/hn84aLdcEoMNSgf2y4=
Subject key identifier: 9F:3B:B7:14:DA:A8:20:38:A1:4A:5E:5B:99:E2:2D:FE:03:89:BB:EF
Authority key identifier: 40:FE:23:AA:0D:B1:0B:6F:88:3A:9B:C1:BA:33:74:94:4F:30:7A:54
Certificate issuer: /CN=40fe23aa0db10b6f883a9bc1ba3374944f307a54
Certificate serial: 01A08A8C91F1C0C07A1D6D1D8D477C5CD56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QP4jqg2xC2-IOpvBujN0lE8welQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:03 +0000
Manifest this update: Thu 10 Sep 2026 09:01:03 +0000
Manifest next update: Fri 11 Sep 2026 09:01:03 +0000
Files and hashes: 1: QP4jqg2xC2-IOpvBujN0lE8welQ.crl (hash: K8dqRy66VZlQPxX0wzH1/FyVXqIEljQdsAsZvZGb71g=)
2: d7z8TwLlS3vreU1zRMAd0zM28Bg.roa (hash: xNI8ZsYvpaH/qY+V6WC5BKC0Y6wfNmacANSCIsjTHpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QP4jqg2xC2-IOpvBujN0lE8welQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:91:f1:c0:c0:7a:1d:6d:1d:8d:47:7c:5c:d5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40fe23aa0db10b6f883a9bc1ba3374944f307a54
Validity
Not Before: Sep 10 09:01:03 2026 GMT
Not After : Sep 11 09:01:03 2026 GMT
Subject: CN=9f3bb714daa82038a14a5e5b99e22dfe0389bbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e0:7e:c7:cc:60:5d:a2:c5:54:ca:ea:b3:75:
95:52:bf:1e:4a:ed:09:69:7f:3e:35:c4:19:41:05:
b5:a0:9e:17:b1:89:c0:88:7d:7d:f8:54:e1:53:40:
32:10:90:63:5a:fe:b2:c4:42:d4:29:ce:f9:92:f1:
08:a8:17:63:e7:ee:02:57:69:bf:e1:a8:b4:81:72:
e8:f6:f1:4b:53:0d:af:92:6f:2f:25:90:43:64:9a:
15:55:51:11:3d:b1:5e:92:4a:5b:6b:cb:5c:dd:34:
af:26:48:d1:e7:e0:ea:44:88:5d:03:9d:a4:7f:96:
96:b3:f0:4b:fb:81:c4:91:8a:fe:e3:fa:b3:52:81:
3e:cf:aa:1e:e6:5e:f1:37:a8:5b:36:e0:82:b0:a0:
c8:7d:ea:cc:af:e8:9b:c8:32:4a:fd:60:ea:d8:1c:
0a:8c:52:23:26:f6:9b:e4:32:7c:08:ec:94:9d:d9:
17:43:13:fc:b0:97:df:ad:72:c6:2b:e7:92:94:77:
c0:79:af:21:be:d4:10:1d:9d:61:46:94:98:de:22:
1a:76:ca:a9:02:8d:dd:f2:b9:28:b0:5b:db:81:84:
a4:21:d1:42:e3:f2:46:2d:80:47:0f:6f:82:0d:34:
f6:f5:4f:2a:bf:a0:75:83:53:6e:2c:1c:4e:c4:34:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:B7:14:DA:A8:20:38:A1:4A:5E:5B:99:E2:2D:FE:03:89:BB:EF
X509v3 Authority Key Identifier:
keyid:40:FE:23:AA:0D:B1:0B:6F:88:3A:9B:C1:BA:33:74:94:4F:30:7A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QP4jqg2xC2-IOpvBujN0lE8welQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b205f2-8d3c-457c-a63c-5f10ee5fd100/1/QP4jqg2xC2-IOpvBujN0lE8welQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:51:54:c4:08:5f:37:59:5f:88:31:17:e4:14:8d:23:67:b9:
6b:2d:40:6e:f3:b4:5d:22:60:9f:ec:60:ee:d4:17:73:e8:d2:
da:25:e2:0d:a5:b7:62:9b:9d:85:8b:76:f6:00:69:9f:cd:09:
d5:6e:22:a7:c4:84:d3:30:dd:2b:0f:43:10:62:81:12:0c:33:
93:c0:69:52:97:15:ca:36:b8:16:81:81:f6:06:01:d1:50:f9:
8c:a4:63:9d:69:28:a9:da:f8:39:13:c6:68:c3:2a:7f:d3:8b:
da:d8:1c:7a:5c:09:21:46:ab:2f:b6:93:b8:97:73:19:cc:b4:
c3:88:91:ea:07:b4:51:29:5b:94:80:ed:19:61:15:4f:0f:d3:
4d:a9:8a:45:fb:8a:63:17:58:61:0e:a8:cf:da:a3:38:8c:10:
c6:6e:cb:4e:b3:48:e3:c0:45:12:ea:9b:97:42:21:aa:1a:ad:
94:e2:de:30:5a:83:44:5a:2d:8a:4f:34:cc:53:cf:6d:04:71:
b1:8d:f3:6f:4a:44:29:69:20:ca:b1:c3:a8:d0:28:22:20:a6:
35:97:ab:86:40:57:bf:cb:62:90:20:b7:90:4c:6d:53:b8:48:
cd:80:3d:a8:b4:bf:5a:bb:99:f4:68:20:62:a2:2a:23:67:a2:
fd:dc:37:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjJHxwMB6HW0djUd8XNVuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZmUyM2FhMGRiMTBiNmY4ODNhOWJjMWJhMzM3NDk0NGYz
MDdhNTQwHhcNMjYwOTEwMDkwMTAzWhcNMjYwOTExMDkwMTAzWjAzMTEwLwYDVQQD
Eyg5ZjNiYjcxNGRhYTgyMDM4YTE0YTVlNWI5OWUyMmRmZTAzODliYmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uB+x8xgXaLFVMrqs3WVUr8eSu0J
aX8+NcQZQQW1oJ4XsYnAiH19+FThU0AyEJBjWv6yxELUKc75kvEIqBdj5+4CV2m/
4ai0gXLo9vFLUw2vkm8vJZBDZJoVVVERPbFekkpba8tc3TSvJkjR5+DqRIhdA52k
f5aWs/BL+4HEkYr+4/qzUoE+z6oe5l7xN6hbNuCCsKDIferMr+ibyDJK/WDq2BwK
jFIjJvab5DJ8COyUndkXQxP8sJffrXLGK+eSlHfAea8hvtQQHZ1hRpSY3iIadsqp
Ao3d8rkosFvbgYSkIdFC4/JGLYBHD2+CDTT29U8qv6B1g1NuLBxOxDRm5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ87txTaqCA4oUpeW5niLf4DibvvMB8GA1UdIwQY
MBaAFED+I6oNsQtviDqbwbozdJRPMHpUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVA0anFnMnhDMi1JT3B2QnVqTjBsRTh3ZWxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9iMjA1ZjItOGQzYy00NTdjLWE2M2Mt
NWYxMGVlNWZkMTAwLzEvUVA0anFnMnhDMi1JT3B2QnVqTjBsRTh3ZWxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9iMjA1ZjItOGQzYy00NTdjLWE2M2MtNWYxMGVlNWZkMTAw
LzEvUVA0anFnMnhDMi1JT3B2QnVqTjBsRTh3ZWxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKVFUxAhf
N1lfiDEX5BSNI2e5ay1AbvO0XSJgn+xg7tQXc+jS2iXiDaW3YpudhYt29gBpn80J
1W4ip8SE0zDdKw9DEGKBEgwzk8BpUpcVyja4FoGB9gYB0VD5jKRjnWkoqdr4ORPG
aMMqf9OL2tgcelwJIUarL7aTuJdzGcy0w4iR6ge0USlblIDtGWEVTw/TTamKRfuK
YxdYYQ6oz9qjOIwQxm7LTrNI48BFEuqbl0IhqhqtlOLeMFqDRFotik80zFPPbQRx
sY3zb0pEKWkgyrHDqNAoIiCmNZerhkBXv8tikCC3kExtU7hIzYA9qLS/WruZ9Ggg
YqIqI2ei/dw3PA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:37 2026 by rpki-client