Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: WbdLpMxSB+kiLpoTlV+jbLSP8WolJ7MqBd0GU2nph0g=
Subject key identifier: 03:0C:93:C2:2E:64:51:3F:27:11:5E:C8:08:0D:5E:5A:B3:79:FD:1D
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 01A03A4C22F78F568BC0B59CFC2BCFE02C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 154D
Signing time: Tue 25 Aug 2026 19:01:03 +0000
Manifest this update: Tue 25 Aug 2026 19:01:03 +0000
Manifest next update: Wed 26 Aug 2026 19:01:03 +0000
Files and hashes: 1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: NZuY4pJ4LtAWl7YMQIm/dyDH8s2hAU1Nx7bmJepRb0c=)
2: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (hash: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI=)
3: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (hash: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:4c:22:f7:8f:56:8b:c0:b5:9c:fc:2b:cf:e0:2c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Aug 25 19:01:03 2026 GMT
Not After : Aug 26 19:01:03 2026 GMT
Subject: CN=030c93c22e64513f27115ec8080d5e5ab379fd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:2c:81:a4:04:b2:79:98:33:6f:1c:e0:f3:
4a:56:76:97:2a:a1:0b:93:e5:76:70:f9:86:83:17:
77:97:d1:7f:06:6a:7e:88:40:c7:9c:f8:a0:32:7a:
cc:78:3b:99:5d:59:29:3d:6b:09:76:0d:9c:3f:fa:
ac:0e:d2:8f:05:35:b4:0d:71:1f:30:d7:d7:37:a9:
cc:a7:78:bb:1a:4e:ec:9a:87:d6:b3:e5:a6:1c:4c:
ea:e5:43:70:e7:31:95:f3:5b:ad:36:56:ea:1a:b9:
a1:7f:35:9b:ff:a2:49:dc:92:19:3a:86:f0:d4:f5:
e3:35:05:82:8a:70:fc:a1:41:1f:92:4e:88:5a:0a:
a5:6a:01:7e:e7:4e:2d:05:f5:39:cd:bb:bb:8f:1c:
79:ff:a2:57:41:ff:8e:74:c3:3e:6a:b1:0f:69:c7:
02:7a:6b:50:d1:e6:ee:ae:6a:e2:73:72:14:f1:40:
e0:86:23:e3:33:d2:a0:b0:a9:94:fb:32:63:57:a1:
fc:cb:02:d2:7c:c7:17:d8:70:d1:7b:e5:73:d8:63:
9b:60:52:f7:a6:e0:10:e6:9c:77:35:7f:ef:d6:e3:
b5:24:45:da:21:1f:a4:73:56:b1:97:33:b3:15:51:
28:9d:f5:93:bb:7f:e3:6f:f3:f4:3e:93:69:72:69:
b0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:0C:93:C2:2E:64:51:3F:27:11:5E:C8:08:0D:5E:5A:B3:79:FD:1D
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5f:10:5a:4e:b8:0b:41:fa:47:a0:74:90:4b:59:a8:cd:f9:
9b:f0:08:4f:81:fc:7e:27:21:ad:45:67:1b:22:0d:dd:80:ed:
26:7b:e4:f0:90:77:aa:4a:4c:fc:09:a1:3a:f2:26:eb:68:69:
c0:98:10:03:82:99:9a:ff:74:d0:93:06:a0:04:f4:e7:50:cf:
82:21:3f:1a:23:b4:1f:3b:37:72:b9:c5:11:05:ab:85:14:e0:
56:54:41:6c:77:74:45:fb:ce:11:77:b5:d1:3b:0d:90:e1:7f:
ee:47:70:15:8b:d3:c1:7d:2e:6c:21:17:e8:7c:63:fa:5d:6b:
1e:fd:4f:bb:39:2d:3b:13:50:e8:e2:0f:92:c7:8c:ec:0d:eb:
cf:dc:34:a3:78:75:5c:ff:31:9c:4e:fa:0c:76:cd:b9:f2:09:
22:45:80:62:47:ad:de:ed:a7:54:53:c4:bb:8c:2f:9d:36:9f:
2e:9f:a5:36:c1:b1:c2:66:87:08:6d:46:d1:a3:2f:c2:0f:6b:
50:fa:a7:76:ee:0f:7c:49:51:88:f9:8c:b2:13:c4:99:df:34:
14:12:8f:2c:8d:f9:73:dd:88:32:11:d8:38:60:74:96:d3:5c:
c0:66:f0:cf:4a:64:47:7f:19:db:e7:0c:cc:b7:49:bb:e9:e5:
86:2b:6a:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA6TCL3j1aLwLWc/CvP4CwbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk
OWNmYmUwHhcNMjYwODI1MTkwMTAzWhcNMjYwODI2MTkwMTAzWjAzMTEwLwYDVQQD
EygwMzBjOTNjMjJlNjQ1MTNmMjcxMTVlYzgwODBkNWU1YWIzNzlmZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyK0sgaQEsnmYM28c4PNKVnaXKqEL
k+V2cPmGgxd3l9F/Bmp+iEDHnPigMnrMeDuZXVkpPWsJdg2cP/qsDtKPBTW0DXEf
MNfXN6nMp3i7Gk7smofWs+WmHEzq5UNw5zGV81utNlbqGrmhfzWb/6JJ3JIZOobw
1PXjNQWCinD8oUEfkk6IWgqlagF+504tBfU5zbu7jxx5/6JXQf+OdMM+arEPaccC
emtQ0eburmric3IU8UDghiPjM9KgsKmU+zJjV6H8ywLSfMcX2HDRe+Vz2GObYFL3
puAQ5px3NX/v1uO1JEXaIR+kc1axlzOzFVEonfWTu3/jb/P0PpNpcmmwDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAMMk8IuZFE/JxFeyAgNXlqzef0dMB8GA1UdIwQY
MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt
Y2ZiYmMxNDY3MWEzLzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz
LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQV8QWk64
C0H6R6B0kEtZqM35m/AIT4H8fichrUVnGyIN3YDtJnvk8JB3qkpM/AmhOvIm62hp
wJgQA4KZmv900JMGoAT051DPgiE/GiO0Hzs3crnFEQWrhRTgVlRBbHd0RfvOEXe1
0TsNkOF/7kdwFYvTwX0ubCEX6Hxj+l1rHv1PuzktOxNQ6OIPkseM7A3rz9w0o3h1
XP8xnE76DHbNufIJIkWAYket3u2nVFPEu4wvnTafLp+lNsGxwmaHCG1G0aMvwg9r
UPqndu4PfElRiPmMshPEmd80FBKPLI35c92IMhHYOGB0ltNcwGbwz0pkR38Z2+cM
zLdJu+nlhitqww==
-----END CERTIFICATE-----
Generated at Wed Aug 26 00:38:04 2026 by rpki-client