Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: OcDQq7MNKFn5PB5Olhih6IgEIzsvaq1aHvNaJes0aZ8=
Subject key identifier: A6:0C:BC:D2:0D:2A:42:87:15:3C:59:AB:D5:5C:7D:37:6A:7C:A8:8C
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 01A06F842A79743D01FFAF695D8770C9CA9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 17CE
Signing time: Sat 05 Sep 2026 03:02:07 +0000
Manifest this update: Sat 05 Sep 2026 03:02:07 +0000
Manifest next update: Sun 06 Sep 2026 03:02:07 +0000
Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: NprXLkpHhhLdFhMa6ai21EtrjNXkNK+bV+VRW/3Nsa4=)
3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:84:2a:79:74:3d:01:ff:af:69:5d:87:70:c9:ca:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Sep 5 03:02:07 2026 GMT
Not After : Sep 6 03:02:07 2026 GMT
Subject: CN=a60cbcd20d2a4287153c59abd55c7d376a7ca88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6d:17:cc:31:30:4a:a0:ed:de:5e:d7:be:e6:
bd:f6:80:5d:4c:74:d0:cd:bf:97:2f:58:2f:89:b9:
f0:bd:65:db:73:97:54:27:43:43:46:b7:44:b1:48:
9e:0a:2c:db:7e:75:35:6c:46:f3:09:1c:6d:63:27:
b5:a2:63:72:a3:49:fb:d9:df:01:69:69:4d:f3:e0:
76:8a:93:b6:dd:01:cc:98:2c:3c:72:59:29:3f:ea:
3e:c6:9c:ca:d4:f8:58:67:ff:07:58:2f:fa:94:79:
8d:7c:c3:22:9f:34:6c:5a:31:a4:eb:03:ac:bf:8d:
82:94:c9:a6:39:8c:80:3f:1b:0b:63:c5:19:4d:80:
f7:a5:77:42:c4:f7:c4:d1:25:3a:45:5f:b0:e2:b0:
58:3e:53:e3:2c:6a:23:c7:02:5e:65:a3:49:46:c9:
72:3f:5e:3e:68:fe:85:92:2d:4b:75:67:13:4f:6c:
bd:bf:e6:d3:2d:a9:e2:43:de:6e:d3:a6:ff:55:52:
6c:9f:79:3c:0e:55:40:f7:80:06:ec:d3:43:58:2b:
d3:9b:12:a4:9d:3c:9c:f4:5c:57:d1:18:bb:cf:a3:
b7:08:31:a2:b5:e6:05:1b:f9:13:fd:b5:62:ea:03:
8a:8a:ef:89:2d:9d:96:69:66:3e:00:de:d5:ca:39:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:0C:BC:D2:0D:2A:42:87:15:3C:59:AB:D5:5C:7D:37:6A:7C:A8:8C
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a1:fe:d1:af:26:5c:ec:4f:91:59:7e:40:c7:3e:4a:5d:76:
68:64:f4:75:5d:58:ef:e7:9d:e8:76:9a:b6:8f:c7:24:9e:60:
e4:e6:44:b2:6b:9f:1c:ef:75:04:4f:c8:aa:c2:9e:6d:d0:26:
f0:ca:0f:fc:dd:83:a2:da:82:cf:0c:45:52:0f:9f:ea:99:fa:
d1:02:51:9d:9e:3e:d3:79:a7:01:bb:83:c7:e7:ec:31:01:79:
56:d9:54:3c:f8:a6:3a:0c:c8:7b:a4:fb:d0:91:1e:74:9f:16:
62:d8:3b:88:99:1a:13:c6:37:58:18:29:e1:1d:cf:ac:9b:77:
51:d4:0e:54:61:c5:bc:bc:00:b4:37:21:3f:5b:84:2a:ed:91:
ef:3a:da:09:b0:bd:a1:bc:41:54:bc:20:8a:32:3d:15:0f:48:
a9:fb:25:66:19:ab:3c:43:e9:ed:ee:c5:49:84:a5:6b:1a:a3:
3b:05:2c:a3:2f:60:55:9b:e5:08:8d:2a:4f:86:42:60:1b:20:
66:37:57:a4:33:e1:67:df:ee:2e:92:6e:5d:67:91:7b:5a:7d:
5f:31:e0:f1:26:e3:68:f5:fa:ab:36:4d:e7:6e:3b:bc:c1:62:
fd:b8:7f:eb:2e:97:5a:bf:e1:df:ef:0e:1f:35:6d:3d:6c:41:
67:91:31:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvhCp5dD0B/69pXYdwycqcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzRjOTBlZDE2YWEyMGU0OTE3ODQyMGJmYzg0YTg4M2Mx
MmFjNjgwHhcNMjYwOTA1MDMwMjA3WhcNMjYwOTA2MDMwMjA3WjAzMTEwLwYDVQQD
EyhhNjBjYmNkMjBkMmE0Mjg3MTUzYzU5YWJkNTVjN2QzNzZhN2NhODhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm0XzDEwSqDt3l7Xvua99oBdTHTQ
zb+XL1gvibnwvWXbc5dUJ0NDRrdEsUieCizbfnU1bEbzCRxtYye1omNyo0n72d8B
aWlN8+B2ipO23QHMmCw8clkpP+o+xpzK1PhYZ/8HWC/6lHmNfMMinzRsWjGk6wOs
v42ClMmmOYyAPxsLY8UZTYD3pXdCxPfE0SU6RV+w4rBYPlPjLGojxwJeZaNJRsly
P14+aP6Fki1LdWcTT2y9v+bTLaniQ95u06b/VVJsn3k8DlVA94AG7NNDWCvTmxKk
nTyc9FxX0Ri7z6O3CDGiteYFG/kT/bVi6gOKiu+JLZ2WaWY+AN7VyjkcOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYMvNINKkKHFTxZq9VcfTdqfKiMMB8GA1UdIwQY
MBaAFELEyQ7RaqIOSReEIL/ISog8EqxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYt
YThlNGU3MWJlZTUxLzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS80ODdjMTUtNmY2Zi00MDdmLTk0OWYtYThlNGU3MWJlZTUx
LzEvUXNUSkR0RnFvZzVKRjRRZ3Y4aEtpRHdTckdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqH+0a8m
XOxPkVl+QMc+Sl12aGT0dV1Y7+ed6Haato/HJJ5g5OZEsmufHO91BE/IqsKebdAm
8MoP/N2DotqCzwxFUg+f6pn60QJRnZ4+03mnAbuDx+fsMQF5VtlUPPimOgzIe6T7
0JEedJ8WYtg7iJkaE8Y3WBgp4R3PrJt3UdQOVGHFvLwAtDchP1uEKu2R7zraCbC9
obxBVLwgijI9FQ9IqfslZhmrPEPp7e7FSYSlaxqjOwUsoy9gVZvlCI0qT4ZCYBsg
ZjdXpDPhZ9/uLpJuXWeRe1p9XzHg8SbjaPX6qzZN5247vMFi/bh/6y6XWr/h3+8O
HzVtPWxBZ5Exxg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:47:12 2026 by rpki-client