Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
File: QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft (raw, json)
Hash identifier: 806JmSO1xq4dIKLu06NGi5KIJbjQp2N0yDtqZAK8Nvk=
Subject key identifier: 7F:4F:85:BF:05:3F:DF:7C:E4:2A:DC:FF:1C:CC:0B:43:5A:90:5F:46
Authority key identifier: 42:4B:EC:A0:1A:91:E4:49:67:6C:24:97:91:32:EA:C3:31:83:3F:54
Certificate issuer: /CN=424beca01a91e449676c24979132eac331833f54
Certificate serial: 01A097DA6B36AEAFC53144E13874DC12F5F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
Manifest number: A1
Signing time: Sat 12 Sep 2026 23:01:08 +0000
Manifest this update: Sat 12 Sep 2026 23:01:08 +0000
Manifest next update: Sun 13 Sep 2026 23:01:08 +0000
Files and hashes: 1: QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl (hash: Ox4HSum/K0oI+rvrhWkIFj/WCGINiHWBrbc/s/7CadI=)
2: de2C8qkGD2C8WyY4VZXQCLj4xeA.roa (hash: Z2unCzdVebpB8G2PHQLt6XCekXAlV21Yon5IAjnmYi0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:97:da:6b:36:ae:af:c5:31:44:e1:38:74:dc:12:f5:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424beca01a91e449676c24979132eac331833f54
Validity
Not Before: Sep 12 23:01:08 2026 GMT
Not After : Sep 13 23:01:08 2026 GMT
Subject: CN=7f4f85bf053fdf7ce42adcff1ccc0b435a905f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:eb:ee:27:48:61:3f:b3:a1:a1:97:be:fd:
38:74:00:68:77:35:d1:01:2a:b6:9b:0a:15:ba:10:
87:e2:42:a4:0f:3a:26:da:12:74:f2:ab:4a:f2:97:
49:52:50:39:52:7a:5d:8d:ac:02:8f:fb:78:e0:33:
fb:ff:e1:c8:45:02:43:cc:c4:2c:c5:c2:d0:d6:52:
4d:7e:82:13:dc:49:e6:12:42:e4:61:6a:9b:fe:cb:
ec:69:22:ae:88:0d:13:51:1e:24:86:51:fd:84:74:
7e:fe:d7:6d:c6:9a:22:5e:75:0e:e8:d8:ef:0b:f5:
9a:3e:65:88:06:fd:18:fc:c9:9d:02:ee:c0:9d:2c:
ee:79:e9:d7:1d:97:c2:05:63:61:c8:16:79:ed:14:
c4:3d:0e:22:a9:b1:6a:dc:f7:3e:46:a6:dc:29:ff:
6b:04:d5:18:94:87:0c:20:ed:0f:97:aa:d1:cc:29:
86:10:b4:3f:17:8b:ae:48:3c:0b:43:e6:78:62:f7:
7d:6a:99:95:21:33:73:14:8b:7b:99:13:fc:71:e3:
b4:7f:70:48:3c:4b:3d:cd:c6:24:b3:5f:44:78:a8:
d1:40:24:87:7e:8a:c8:d1:23:7a:a5:60:f9:a2:62:
8c:0c:2f:27:bc:b9:79:f5:70:a6:cb:90:2e:56:d4:
4f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4F:85:BF:05:3F:DF:7C:E4:2A:DC:FF:1C:CC:0B:43:5A:90:5F:46
X509v3 Authority Key Identifier:
keyid:42:4B:EC:A0:1A:91:E4:49:67:6C:24:97:91:32:EA:C3:31:83:3F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a7d7b3-74da-4063-871c-5e5c668deec5/1/QkvsoBqR5ElnbCSXkTLqwzGDP1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:22:f4:ab:cf:2d:82:ec:3b:1a:a0:fc:a3:9f:5d:7f:f8:a6:
35:3f:1c:7e:8f:08:a3:52:8e:da:da:d5:eb:10:3c:93:c8:c0:
d2:89:ef:40:5d:40:36:4b:1d:1b:91:c9:ed:c5:3c:8c:2e:67:
34:4e:8e:82:c5:0d:88:70:8c:54:8b:0d:10:e7:b0:6b:f6:4e:
71:31:47:5f:51:17:0c:39:a1:12:20:c5:41:8a:fd:80:98:08:
c2:ca:40:8a:68:ac:f8:fd:f6:6d:1d:10:56:ea:42:1a:c4:de:
db:df:94:50:62:64:7a:1a:fe:be:87:3b:91:e5:a4:24:ad:37:
77:18:5d:39:10:43:37:ab:23:a1:c8:ba:16:a9:76:d2:3e:e4:
39:32:6a:af:2d:53:dc:9b:f2:88:ba:80:6b:1e:bc:0e:0f:8d:
bb:6b:02:13:dc:1c:c1:86:07:ad:00:ca:69:9e:37:08:a3:4f:
3a:89:fe:6c:1d:7e:61:b9:96:31:30:2a:ea:4b:2d:69:8a:23:
25:e4:42:60:2b:a5:3f:dd:63:84:6a:56:d4:d4:f6:f6:90:8d:
47:09:41:84:9f:9a:a1:f5:b6:f1:da:8b:68:9f:c2:83:9a:d3:
34:37:71:0c:1d:49:86:40:1d:b2:61:8c:fb:33:3b:2a:b3:37:
90:6b:a0:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCX2ms2rq/FMUThOHTcEvX5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNGJlY2EwMWE5MWU0NDk2NzZjMjQ5NzkxMzJlYWMzMzE4
MzNmNTQwHhcNMjYwOTEyMjMwMTA4WhcNMjYwOTEzMjMwMTA4WjAzMTEwLwYDVQQD
Eyg3ZjRmODViZjA1M2ZkZjdjZTQyYWRjZmYxY2NjMGI0MzVhOTA1ZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMXr7idIYT+zoaGXvv04dABodzXR
ASq2mwoVuhCH4kKkDzom2hJ08qtK8pdJUlA5UnpdjawCj/t44DP7/+HIRQJDzMQs
xcLQ1lJNfoIT3EnmEkLkYWqb/svsaSKuiA0TUR4khlH9hHR+/tdtxpoiXnUO6Njv
C/WaPmWIBv0Y/MmdAu7AnSzueenXHZfCBWNhyBZ57RTEPQ4iqbFq3Pc+RqbcKf9r
BNUYlIcMIO0Pl6rRzCmGELQ/F4uuSDwLQ+Z4Yvd9apmVITNzFIt7mRP8ceO0f3BI
PEs9zcYks19EeKjRQCSHforI0SN6pWD5omKMDC8nvLl59XCmy5AuVtRPXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9Phb8FP9985Crc/xzMC0NakF9GMB8GA1UdIwQY
MBaAFEJL7KAakeRJZ2wkl5Ey6sMxgz9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWt2c29CcVI1RWxuYkNTWGtUTHF3ekdEUDFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9hN2Q3YjMtNzRkYS00MDYzLTg3MWMt
NWU1YzY2OGRlZWM1LzEvUWt2c29CcVI1RWxuYkNTWGtUTHF3ekdEUDFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9hN2Q3YjMtNzRkYS00MDYzLTg3MWMtNWU1YzY2OGRlZWM1
LzEvUWt2c29CcVI1RWxuYkNTWGtUTHF3ekdEUDFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPiL0q88t
guw7GqD8o59df/imNT8cfo8Io1KO2trV6xA8k8jA0onvQF1ANksdG5HJ7cU8jC5n
NE6OgsUNiHCMVIsNEOewa/ZOcTFHX1EXDDmhEiDFQYr9gJgIwspAimis+P32bR0Q
VupCGsTe29+UUGJkehr+voc7keWkJK03dxhdORBDN6sjoci6Fql20j7kOTJqry1T
3JvyiLqAax68Dg+Nu2sCE9wcwYYHrQDKaZ43CKNPOon+bB1+YbmWMTAq6kstaYoj
JeRCYCulP91jhGpW1NT29pCNRwlBhJ+aofW28dqLaJ/Cg5rTNDdxDB1JhkAdsmGM
+zM7KrM3kGuglA==
-----END CERTIFICATE-----
Generated at Sun Sep 13 02:57:10 2026 by rpki-client