Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: ffmQ+K2MKenp3HwADGxOaRU0P73U2U0n35L2BNLK+no=
Subject key identifier: 97:6A:E5:2A:F2:FA:48:CF:9C:DE:0A:76:85:41:0E:DF:C6:3F:E4:A3
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 01A1521AFDD2B5D3C7C62B0EBF9FBCBB38D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 13CD
Signing time: Mon 19 Oct 2026 03:01:02 +0000
Manifest this update: Mon 19 Oct 2026 03:01:02 +0000
Manifest next update: Tue 20 Oct 2026 03:01:02 +0000
Files and hashes: 1: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: b/XL3g+dwqQJLnngWmzHlaR5BQjlRO2nb5w2VPcyJyA=)
2: qDecB_BWF1K9skoTX1OzF0T-DQQ.roa (hash: AAPazeOH0UyI2v6icXzRiwrdFOTR+zzuLsPnN6L+as4=)
3: tPolntRW3EVoA5WCEpAsWda33Aw.roa (hash: R4nNUtjVrvsZ3qcmSOyRAEFItuX7aMB4GwPwNz7Vta4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:1a:fd:d2:b5:d3:c7:c6:2b:0e:bf:9f:bc:bb:38:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Oct 19 03:01:02 2026 GMT
Not After : Oct 20 03:01:02 2026 GMT
Subject: CN=976ae52af2fa48cf9cde0a7685410edfc63fe4a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2e:b6:08:df:aa:fb:e8:d9:b7:e8:8c:6b:62:
22:3d:c6:7c:86:64:1b:a4:cf:cb:5e:94:6a:65:87:
cb:1c:90:4b:de:82:2e:53:f3:44:46:b0:66:ee:c5:
cb:7a:aa:8a:a0:f2:c4:d8:84:4f:3e:6b:ad:7c:ad:
f5:54:c8:0b:4b:c0:e9:79:1e:83:8b:c3:eb:ab:91:
e0:1e:e3:49:98:56:50:b1:8c:d5:36:34:c6:a2:bc:
97:25:07:c8:49:2f:77:de:48:5d:b9:4c:5c:62:b3:
0f:69:56:b6:14:87:85:3d:08:a3:32:d6:6c:34:15:
ae:9a:86:8e:1a:f7:13:01:9f:30:4b:a2:f3:c3:89:
6f:29:5d:54:47:1e:05:60:6a:cc:79:ab:83:cc:dc:
96:ea:f5:b3:ce:da:8b:18:07:8e:3d:30:38:5d:9a:
6c:de:87:cd:ae:2a:e4:55:ae:a6:c9:65:62:de:78:
d1:af:11:48:37:8b:53:a2:c6:1e:ab:7b:22:d1:e6:
c4:7f:74:d2:3f:8f:6f:e7:1e:89:25:dd:4f:6b:79:
dd:b4:dd:ba:c7:12:d7:7a:d8:36:91:52:5f:b5:0b:
c5:de:ba:8e:b4:b9:1b:44:18:00:92:65:cb:eb:a3:
0f:09:07:5e:9a:28:60:37:72:24:8c:8d:67:07:f0:
b5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6A:E5:2A:F2:FA:48:CF:9C:DE:0A:76:85:41:0E:DF:C6:3F:E4:A3
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7a:f9:9d:41:dc:b0:69:f7:39:5b:c5:18:a4:c9:16:56:a4:
f2:e8:19:a2:96:8e:c6:f9:ff:f1:84:ee:72:c7:3b:e0:03:e5:
e2:1c:ad:3e:af:74:ae:8e:92:10:3b:80:d3:d0:52:44:d7:b4:
4e:e2:9e:5b:45:dc:0b:9d:d8:c6:07:ab:11:06:a2:3b:c2:e3:
72:34:7e:4d:b5:b6:7f:93:d1:e6:e4:7b:45:57:17:c7:3d:1a:
5c:9b:68:78:68:b8:c5:f0:21:4a:51:56:4c:cb:bf:c7:20:3e:
d8:72:d3:30:f8:3d:5f:c1:69:e6:3c:28:12:ef:75:2a:f0:a5:
6d:27:9f:71:6c:79:2b:15:f3:67:9e:0d:d6:30:75:a6:19:40:
43:53:e3:0c:f8:22:50:17:c8:5b:ce:da:ee:d9:99:d2:85:81:
76:7f:66:15:97:ef:f5:e0:25:12:28:cc:da:32:ba:d6:09:7e:
80:5d:3d:b8:b5:1f:84:02:4f:4e:68:c8:8d:e6:8b:f5:d4:3f:
b1:df:f5:1d:c6:3e:7a:d6:26:ce:98:3d:80:fe:8a:a0:6c:18:
3a:3d:c6:66:3c:fb:b4:f6:ca:dd:e5:91:86:0f:c7:c6:fe:03:
74:0a:a4:ee:42:25:94:1f:1c:a1:19:e1:ec:5c:1d:eb:ae:2a:
3b:ed:f6:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFSGv3StdPHxisOv5+8uzjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjdiMGMwZmU3YzA4OTM1ZTI1ODcxM2ZjZjkwZmU5NThl
ZTAzZWUwHhcNMjYxMDE5MDMwMTAyWhcNMjYxMDIwMDMwMTAyWjAzMTEwLwYDVQQD
Eyg5NzZhZTUyYWYyZmE0OGNmOWNkZTBhNzY4NTQxMGVkZmM2M2ZlNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC62CN+q++jZt+iMa2IiPcZ8hmQb
pM/LXpRqZYfLHJBL3oIuU/NERrBm7sXLeqqKoPLE2IRPPmutfK31VMgLS8DpeR6D
i8Prq5HgHuNJmFZQsYzVNjTGoryXJQfISS933khduUxcYrMPaVa2FIeFPQijMtZs
NBWumoaOGvcTAZ8wS6Lzw4lvKV1URx4FYGrMeauDzNyW6vWzztqLGAeOPTA4XZps
3ofNrirkVa6myWVi3njRrxFIN4tTosYeq3si0ebEf3TSP49v5x6JJd1Pa3ndtN26
xxLXetg2kVJftQvF3rqOtLkbRBgAkmXL66MPCQdemihgN3IkjI1nB/C1QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdq5Sry+kjPnN4KdoVBDt/GP+SjMB8GA1UdIwQY
MBaAFEEnsMD+fAiTXiWHE/z5D+lY7gPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQt
YmQxZDQ4ZDUxMmNlLzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQtYmQxZDQ4ZDUxMmNl
LzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWnr5nUHc
sGn3OVvFGKTJFlak8ugZopaOxvn/8YTucsc74APl4hytPq90ro6SEDuA09BSRNe0
TuKeW0XcC53YxgerEQaiO8LjcjR+TbW2f5PR5uR7RVcXxz0aXJtoeGi4xfAhSlFW
TMu/xyA+2HLTMPg9X8Fp5jwoEu91KvClbSefcWx5KxXzZ54N1jB1phlAQ1PjDPgi
UBfIW87a7tmZ0oWBdn9mFZfv9eAlEijM2jK61gl+gF09uLUfhAJPTmjIjeaL9dQ/
sd/1HcY+etYmzpg9gP6KoGwYOj3GZjz7tPbK3eWRhg/Hxv4DdAqk7kIllB8coRnh
7Fwd664qO+32HQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 14:26:30 2026 by rpki-client