Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: W6atf2WPBdCi/q4hpbS0N+f2AmMfaScxJIY17DApbGQ=
Subject key identifier: 34:0E:3C:DD:2E:0E:C8:63:D2:90:7C:61:17:99:2D:74:E9:14:85:CB
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 01A025E946A6C216A224790F58616026B9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 1A15
Signing time: Fri 21 Aug 2026 20:00:39 +0000
Manifest this update: Fri 21 Aug 2026 20:00:39 +0000
Manifest next update: Sat 22 Aug 2026 20:00:39 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: 6pU8wh0QeyVWVxWVqn4IIsFh8ohdmH5gtb6dgaAy+0k=)
2: QJ1CsNmZtrMfqsM-LahkitaRmoc.roa (hash: 16917vIR1cAkmi46t8D1rEf6dQGk7zBSOY9QqyvHf5E=)
3: ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa (hash: DDgrDiLhVwMu1oS2zAdeQKa6HlRGjZ92/REsC3Si5kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:e9:46:a6:c2:16:a2:24:79:0f:58:61:60:26:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Aug 21 20:00:39 2026 GMT
Not After : Aug 22 20:00:39 2026 GMT
Subject: CN=340e3cdd2e0ec863d2907c6117992d74e91485cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:12:6f:4b:2d:3a:bc:62:a7:6d:7c:35:ef:
91:1f:45:dd:32:3d:e6:02:e6:f0:80:e5:68:07:64:
72:0a:f8:01:8e:4c:35:44:41:ca:ab:a3:da:a7:36:
9b:ba:1b:56:23:22:db:cd:44:18:54:92:b1:cc:35:
89:7b:f5:71:05:dc:15:e7:8c:a2:43:bc:31:8c:ab:
e5:69:37:94:bf:23:2b:a6:8c:55:cd:2c:bc:7d:69:
66:0e:a4:1a:bb:7a:26:85:c9:25:8b:56:dc:6f:3c:
b6:64:64:e9:5e:89:67:6b:af:6b:7b:ce:da:52:2c:
4b:13:5b:a6:9f:97:75:d8:e0:50:c3:ec:55:b8:d0:
25:2f:0e:ff:77:3d:b5:7a:cc:60:76:a0:28:3f:73:
77:ff:af:0f:b9:0d:aa:a4:41:c0:e8:ae:4f:9d:fc:
d7:c6:82:59:83:1c:22:fe:60:7b:49:14:58:ce:21:
64:de:aa:c0:a0:38:d2:12:9a:0f:1a:07:e4:b7:43:
1b:94:79:d8:3d:e8:40:cd:b6:3b:ac:13:bf:11:21:
54:b7:90:ec:df:61:d8:ce:04:45:2b:b3:77:81:f0:
9e:a2:cd:97:fc:ce:27:eb:54:87:45:b5:09:da:d7:
d0:5b:44:42:75:9c:d9:55:d2:1f:2f:70:71:3c:b9:
68:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0E:3C:DD:2E:0E:C8:63:D2:90:7C:61:17:99:2D:74:E9:14:85:CB
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:00:8f:e4:75:89:bb:9a:d2:db:09:03:0b:a6:d1:b8:2f:11:
86:b2:db:29:e0:81:e0:1b:10:ba:29:5c:b2:0f:0a:d6:43:76:
1e:17:b4:a1:d6:63:77:22:d1:05:36:0b:ed:c1:26:b6:e8:64:
52:66:85:c8:af:7c:b3:8b:b9:dc:2a:54:c6:66:b5:59:7a:9f:
87:48:b2:aa:d5:61:99:5d:e3:9a:7e:f7:f2:16:73:28:b0:32:
04:55:94:1d:1b:e1:da:8f:e6:42:01:7e:8b:4e:29:f1:14:b4:
3a:24:90:9f:67:47:65:e9:96:80:a6:67:09:9e:c7:fd:b1:b0:
c1:d7:35:53:ec:aa:01:ce:a2:2f:d7:8c:86:d2:db:8a:7a:56:
6e:98:1f:a8:cf:7a:70:1d:5e:5e:22:67:7a:92:63:9e:ee:9a:
84:88:90:4c:71:4e:2e:e2:0e:41:8d:6a:9c:38:6b:46:85:cc:
a3:dc:b3:bd:ed:87:dd:59:22:56:36:82:6f:da:69:6c:44:50:
e4:0c:ab:e0:92:76:4a:b9:6f:53:8e:c6:a0:68:1b:31:8f:ec:
a3:f2:96:30:dc:43:ac:ba:37:3c:96:bc:20:27:5c:83:f0:5c:
02:2b:47:a7:f1:28:30:dc:b4:b0:91:19:f0:96:bb:60:ae:7c:
90:98:df:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAl6UamwhaiJHkPWGFgJrnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmE5MjI1MGMyODU4MGYyYWQ0Y2MxYzM1N2IwMmEyNWE3
OTBjZjcwHhcNMjYwODIxMjAwMDM5WhcNMjYwODIyMjAwMDM5WjAzMTEwLwYDVQQD
EygzNDBlM2NkZDJlMGVjODYzZDI5MDdjNjExNzk5MmQ3NGU5MTQ4NWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0ASb0stOrxip218Ne+RH0XdMj3m
AubwgOVoB2RyCvgBjkw1REHKq6PapzabuhtWIyLbzUQYVJKxzDWJe/VxBdwV54yi
Q7wxjKvlaTeUvyMrpoxVzSy8fWlmDqQau3omhckli1bcbzy2ZGTpXolna69re87a
UixLE1umn5d12OBQw+xVuNAlLw7/dz21esxgdqAoP3N3/68PuQ2qpEHA6K5PnfzX
xoJZgxwi/mB7SRRYziFk3qrAoDjSEpoPGgfkt0MblHnYPehAzbY7rBO/ESFUt5Ds
32HYzgRFK7N3gfCeos2X/M4n61SHRbUJ2tfQW0RCdZzZVdIfL3BxPLlopQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQOPN0uDshj0pB8YReZLXTpFIXLMB8GA1UdIwQY
MBaAFEBqkiUMKFgPKtTMHDV7AqJaeQz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMt
N2YyMGVmMDJmMjY0LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMtN2YyMGVmMDJmMjY0
LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuACP5HWJ
u5rS2wkDC6bRuC8RhrLbKeCB4BsQuilcsg8K1kN2Hhe0odZjdyLRBTYL7cEmtuhk
UmaFyK98s4u53CpUxma1WXqfh0iyqtVhmV3jmn738hZzKLAyBFWUHRvh2o/mQgF+
i04p8RS0OiSQn2dHZemWgKZnCZ7H/bGwwdc1U+yqAc6iL9eMhtLbinpWbpgfqM96
cB1eXiJnepJjnu6ahIiQTHFOLuIOQY1qnDhrRoXMo9yzve2H3VkiVjaCb9ppbERQ
5Ayr4JJ2SrlvU47GoGgbMY/so/KWMNxDrLo3PJa8ICdcg/BcAitHp/EoMNy0sJEZ
8Ja7YK58kJjfFw==
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:33:44 2026 by rpki-client