Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
File: QfpvoAiYrTXuZ_taWhkQXbbB0es.mft (raw, json)
Hash identifier: Vn3UPMPrIeA6iG5+MWc5ayG0QLQzDzj7nX3gqIm4X2Y=
Subject key identifier: 31:D3:CF:84:F6:FA:D6:A3:69:40:87:2E:EE:57:1E:D8:72:75:DC:88
Authority key identifier: 41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
Certificate issuer: /CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Certificate serial: 019F8569227260D41CDAE9F2AA0449B25ACE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
Manifest number: 01AD
Signing time: Tue 21 Jul 2026 16:01:27 +0000
Manifest this update: Tue 21 Jul 2026 16:01:27 +0000
Manifest next update: Wed 22 Jul 2026 16:01:27 +0000
Files and hashes: 1: QfpvoAiYrTXuZ_taWhkQXbbB0es.crl (hash: hk9/PnrUZKfM9Nue9rWBe1fXao4kUHE63UtZVEFNXgA=)
2: tUgLrvuas3A8ffagzPey3XzQQXM.roa (hash: nldIcz0O0+/Bm3m2OMxGodFkGt2Ggg8SRrnW6hRBtug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:69:22:72:60:d4:1c:da:e9:f2:aa:04:49:b2:5a:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Validity
Not Before: Jul 21 16:01:27 2026 GMT
Not After : Jul 22 16:01:27 2026 GMT
Subject: CN=31d3cf84f6fad6a36940872eee571ed87275dc88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:9a:da:89:64:84:5a:fe:72:b1:c8:18:da:
40:36:02:c4:54:07:cd:eb:9c:43:48:28:03:36:80:
24:40:0d:20:1e:3f:38:74:93:80:63:c0:78:0e:14:
a1:b9:4b:f3:d7:bf:b1:d1:6c:ed:91:03:3a:b3:c7:
da:dd:06:08:8e:50:82:e1:08:58:ed:e1:e3:eb:b9:
97:88:0a:d4:c9:8c:aa:07:bc:af:3f:e7:9d:92:8c:
00:84:67:38:1b:34:3d:0c:8f:62:54:6b:50:a0:0e:
39:d0:00:9d:32:55:58:5c:2a:fe:03:fd:88:48:ca:
2d:56:03:7c:e3:9b:ae:cb:f6:44:88:aa:b3:cd:d8:
bc:18:f7:30:7e:7b:27:a9:c5:90:82:07:91:5d:d6:
35:5e:72:45:89:e0:28:df:b2:32:13:fc:25:1d:15:
f8:f3:11:27:f9:ca:b6:72:5a:fa:2b:29:47:fb:d4:
68:e0:4b:51:72:dd:6c:d4:a4:62:3c:0a:b9:83:0e:
64:6c:0e:1b:10:18:ff:88:c8:82:b9:b1:6a:24:d5:
a2:9d:f1:28:0c:15:28:8e:db:82:51:74:ef:10:f2:
e0:5f:e3:0e:aa:65:3c:a9:18:fa:be:58:f6:6d:6d:
e2:ab:88:f9:7f:88:51:ad:89:22:58:8b:d9:4d:d0:
94:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D3:CF:84:F6:FA:D6:A3:69:40:87:2E:EE:57:1E:D8:72:75:DC:88
X509v3 Authority Key Identifier:
keyid:41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:86:38:18:55:7f:73:49:0f:2b:41:a4:b0:f7:b6:43:39:8b:
46:4a:e3:d2:5d:fe:16:ef:61:e4:84:84:c6:bb:af:46:1e:32:
c9:0d:4b:06:27:2b:82:4d:0c:33:16:c2:c7:2b:f8:1b:f6:d9:
8d:32:25:0a:e2:7c:2a:f3:ad:b6:02:3a:c9:11:ac:42:a9:69:
7f:5e:bf:44:87:d0:f5:80:6b:30:0f:35:29:97:17:2d:6b:f9:
8e:1e:21:a1:34:b7:b1:a1:47:c0:be:78:49:8b:5d:fc:eb:8a:
4c:b4:d0:61:46:15:0d:c4:99:c0:1c:b3:9a:15:86:e6:f4:26:
71:67:fa:b8:59:73:12:ec:d6:cf:9e:62:3a:49:bc:65:1a:13:
b0:ef:69:90:b5:5f:76:16:74:aa:7b:d8:ec:d1:79:02:97:9b:
cc:9b:8c:41:71:53:68:ab:00:52:76:ad:0b:e2:32:9e:52:6b:
88:66:5c:e3:3d:39:28:c3:c0:9a:1f:50:a5:2f:ed:95:56:df:
76:a3:75:5f:d5:57:0b:83:45:8c:4e:69:f1:cb:6e:b9:25:cf:
28:a7:13:fc:a3:f6:c7:56:e4:50:9d:62:b1:49:d3:02:11:68:
73:b9:af:c0:07:79:c8:7b:70:82:56:cb:79:d4:ef:e9:07:9f:
00:cc:fc:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaSJyYNQc2unyqgRJslrOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmE2ZmEwMDg5OGFkMzVlZTY3ZmI1YTVhMTkxMDVkYjZj
MWQxZWIwHhcNMjYwNzIxMTYwMTI3WhcNMjYwNzIyMTYwMTI3WjAzMTEwLwYDVQQD
EygzMWQzY2Y4NGY2ZmFkNmEzNjk0MDg3MmVlZTU3MWVkODcyNzVkYzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuKa2olkhFr+crHIGNpANgLEVAfN
65xDSCgDNoAkQA0gHj84dJOAY8B4DhShuUvz17+x0WztkQM6s8fa3QYIjlCC4QhY
7eHj67mXiArUyYyqB7yvP+edkowAhGc4GzQ9DI9iVGtQoA450ACdMlVYXCr+A/2I
SMotVgN845uuy/ZEiKqzzdi8GPcwfnsnqcWQggeRXdY1XnJFieAo37IyE/wlHRX4
8xEn+cq2clr6KylH+9Ro4EtRct1s1KRiPAq5gw5kbA4bEBj/iMiCubFqJNWinfEo
DBUojtuCUXTvEPLgX+MOqmU8qRj6vlj2bW3iq4j5f4hRrYkiWIvZTdCUwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHTz4T2+tajaUCHLu5XHthyddyIMB8GA1UdIwQY
MBaAFEH6b6AImK017mf7WloZEF22wdHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jZTg5NDMtMGVhNC00NmEzLTk1ZmMt
YWQ3YTAyZjE5NDZhLzEvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jZTg5NDMtMGVhNC00NmEzLTk1ZmMtYWQ3YTAyZjE5NDZh
LzEvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVYY4GFV/
c0kPK0GksPe2QzmLRkrj0l3+Fu9h5ISExruvRh4yyQ1LBicrgk0MMxbCxyv4G/bZ
jTIlCuJ8KvOttgI6yRGsQqlpf16/RIfQ9YBrMA81KZcXLWv5jh4hoTS3saFHwL54
SYtd/OuKTLTQYUYVDcSZwByzmhWG5vQmcWf6uFlzEuzWz55iOkm8ZRoTsO9pkLVf
dhZ0qnvY7NF5ApebzJuMQXFTaKsAUnatC+IynlJriGZc4z05KMPAmh9QpS/tlVbf
dqN1X9VXC4NFjE5p8ctuuSXPKKcT/KP2x1bkUJ1isUnTAhFoc7mvwAd5yHtwglbL
edTv6QefAMz88w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:44:18 2026 by rpki-client