Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
File: Q6XKFbwjwyXxNB6YidhYuO12104.mft (raw, json)
Hash identifier: 7nmmOMr6Lfl6j/MqBOvbpiU5tzfU9k5+t2tDFoLEJTg=
Subject key identifier: E4:69:7B:2B:77:75:3D:52:8F:4D:E5:9E:C8:AA:A6:AF:65:B3:9E:FF
Authority key identifier: 43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
Certificate issuer: /CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Certificate serial: 01A0032667057E52EF13450E83593686C209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
Manifest number: 0666
Signing time: Sat 15 Aug 2026 02:00:43 +0000
Manifest this update: Sat 15 Aug 2026 02:00:43 +0000
Manifest next update: Sun 16 Aug 2026 02:00:43 +0000
Files and hashes: 1: Q6XKFbwjwyXxNB6YidhYuO12104.crl (hash: zcK2vVhcyfcKLl4OHoDkSkKoX4g78+tH6pgx+r76+Pk=)
2: WrwILJOkKv94JvYqGUNiy47Tb9E.roa (hash: Bjce6gPk82s+U9N9AWLeoylnd69kztnleXwX8PYNeuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:67:05:7e:52:ef:13:45:0e:83:59:36:86:c2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a5ca15bc23c325f1341e9889d858b8ed76d74e
Validity
Not Before: Aug 15 02:00:43 2026 GMT
Not After : Aug 16 02:00:43 2026 GMT
Subject: CN=e4697b2b77753d528f4de59ec8aaa6af65b39eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7c:a8:59:2d:0d:92:1f:54:b8:40:8c:97:e7:
b7:5d:cd:69:c5:2e:fd:80:07:98:be:9e:49:d3:cd:
bf:88:7b:71:64:d3:ed:d9:8f:76:9e:12:3c:90:6f:
11:2c:d5:ce:8a:44:71:47:33:ed:d4:73:c1:84:5d:
cf:88:4e:db:78:c4:21:2e:3f:13:d5:30:4a:d9:2a:
98:86:85:3b:b2:73:ff:54:a5:33:51:01:40:f3:b7:
c0:ea:4f:da:d1:14:85:34:5e:db:4d:95:f7:df:e6:
54:32:7a:7a:03:bb:dc:9b:a9:9e:31:ab:5a:10:a6:
1d:2d:a7:e6:b1:a9:15:4f:37:c1:70:52:c4:f7:e2:
20:fa:52:fe:be:4f:a4:4b:ce:f5:85:c1:68:fd:e2:
f3:96:1f:a1:1d:ab:8c:a9:91:8c:f4:f6:05:1f:a2:
76:f6:a6:8f:2b:72:96:55:2c:23:08:f7:a2:45:5c:
1a:d4:5b:73:4d:7c:75:39:03:0c:7c:3e:8c:4b:48:
f8:f7:f3:51:6e:c7:da:71:5d:77:e2:6c:c3:86:81:
f5:60:0c:33:60:3f:b7:0e:8b:01:3b:9f:ba:ea:03:
60:38:8d:3c:f1:d3:bf:89:8c:fd:e0:6a:3b:bf:92:
3f:d8:2b:23:32:aa:f1:ad:da:33:66:3c:5e:1b:2a:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:69:7B:2B:77:75:3D:52:8F:4D:E5:9E:C8:AA:A6:AF:65:B3:9E:FF
X509v3 Authority Key Identifier:
keyid:43:A5:CA:15:BC:23:C3:25:F1:34:1E:98:89:D8:58:B8:ED:76:D7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6XKFbwjwyXxNB6YidhYuO12104.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/874bee-e72a-4beb-91e8-a96e26103cee/1/Q6XKFbwjwyXxNB6YidhYuO12104.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:45:d0:97:8e:fd:7f:b3:b4:83:92:9e:05:fb:48:f2:d4:96:
41:73:fa:b4:f6:be:d5:c7:2a:d4:74:9f:ce:a7:59:56:82:42:
53:90:ab:09:16:71:8f:ab:d3:8e:8f:92:08:3c:f6:b7:0a:65:
46:d0:5d:26:a1:76:6f:47:07:bf:e9:d2:da:02:ee:67:78:97:
ea:55:5f:73:6a:8e:af:69:c9:20:3b:0c:4c:23:08:35:fc:5e:
fc:ab:dc:3c:43:1a:a4:a4:51:0e:a8:ed:c6:f7:15:9f:ad:9e:
90:cd:ea:72:29:a0:04:20:e3:0c:be:26:94:53:96:78:9f:1e:
21:ee:ed:27:f6:f8:b2:ef:6b:23:37:c7:13:6d:35:d5:ad:ba:
8b:47:84:00:3a:d6:1b:a9:49:19:84:0a:1a:80:7a:df:dc:47:
d4:e9:a3:b7:33:25:e7:1e:d6:a3:b0:66:37:bd:fe:0c:35:e2:
6b:6e:11:76:20:cd:15:42:9b:d0:bf:df:55:b3:15:20:ff:a7:
bd:e2:b7:d5:c6:2d:32:64:9f:a4:05:13:5a:f3:1a:75:f1:d3:
29:8c:76:4a:f3:62:ed:3b:ee:27:82:b7:b1:ee:4a:71:3f:db:
f6:0c:29:f4:77:54:0e:c0:89:ab:52:04:c5:da:b4:a5:a6:a5:
e1:ef:e9:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADJmcFflLvE0UOg1k2hsIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzYTVjYTE1YmMyM2MzMjVmMTM0MWU5ODg5ZDg1OGI4ZWQ3
NmQ3NGUwHhcNMjYwODE1MDIwMDQzWhcNMjYwODE2MDIwMDQzWjAzMTEwLwYDVQQD
EyhlNDY5N2IyYjc3NzUzZDUyOGY0ZGU1OWVjOGFhYTZhZjY1YjM5ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHyoWS0Nkh9UuECMl+e3Xc1pxS79
gAeYvp5J082/iHtxZNPt2Y92nhI8kG8RLNXOikRxRzPt1HPBhF3PiE7beMQhLj8T
1TBK2SqYhoU7snP/VKUzUQFA87fA6k/a0RSFNF7bTZX33+ZUMnp6A7vcm6meMata
EKYdLafmsakVTzfBcFLE9+Ig+lL+vk+kS871hcFo/eLzlh+hHauMqZGM9PYFH6J2
9qaPK3KWVSwjCPeiRVwa1FtzTXx1OQMMfD6MS0j49/NRbsfacV134mzDhoH1YAwz
YD+3DosBO5+66gNgOI088dO/iYz94Go7v5I/2CsjMqrxrdozZjxeGyrJjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORpeyt3dT1Sj03lnsiqpq9ls57/MB8GA1UdIwQY
MBaAFEOlyhW8I8Ml8TQemInYWLjtdtdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgt
YTk2ZTI2MTAzY2VlLzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NzRiZWUtZTcyYS00YmViLTkxZTgtYTk2ZTI2MTAzY2Vl
LzEvUTZYS0Zid2p3eVh4TkI2WWlkaFl1TzEyMTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0XQl479
f7O0g5KeBftI8tSWQXP6tPa+1ccq1HSfzqdZVoJCU5CrCRZxj6vTjo+SCDz2twpl
RtBdJqF2b0cHv+nS2gLuZ3iX6lVfc2qOr2nJIDsMTCMINfxe/KvcPEMapKRRDqjt
xvcVn62ekM3qcimgBCDjDL4mlFOWeJ8eIe7tJ/b4su9rIzfHE2011a26i0eEADrW
G6lJGYQKGoB639xH1OmjtzMl5x7Wo7BmN73+DDXia24RdiDNFUKb0L/fVbMVIP+n
veK31cYtMmSfpAUTWvMadfHTKYx2SvNi7TvuJ4K3se5KcT/b9gwp9HdUDsCJq1IE
xdq0paal4e/pZg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:39 2026 by rpki-client