Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: xU88ASYqsLbnf57KGGUVUzm+fqGhc0lb8L13Gc4fpJ4=
Subject key identifier: CB:A9:76:AD:23:51:96:F6:1A:55:37:11:C8:EF:50:58:3B:C5:8C:12
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 01A175F007A3F3AACB79949F14742306F65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1AC0
Signing time: Mon 26 Oct 2026 02:00:27 +0000
Manifest this update: Mon 26 Oct 2026 02:00:27 +0000
Manifest next update: Tue 27 Oct 2026 02:00:27 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: ezV+7s+lgp6UXSfQTi9R1Yk6VHYDoYw+N6qHa8uj+04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:f0:07:a3:f3:aa:cb:79:94:9f:14:74:23:06:f6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Oct 26 02:00:27 2026 GMT
Not After : Oct 27 02:00:27 2026 GMT
Subject: CN=cba976ad235196f61a553711c8ef50583bc58c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3a:fc:84:4d:94:56:49:75:4d:ef:8d:c6:17:
37:61:bc:22:28:d6:49:35:10:49:ec:7b:4c:40:b7:
cc:21:cf:c5:1c:79:62:23:92:af:10:1a:32:2d:76:
15:61:7e:9f:68:3a:40:ef:b8:f0:e5:63:99:6a:4a:
e6:eb:7f:b5:6d:5d:b7:2b:08:86:c7:20:5e:45:2a:
8b:9e:de:67:5a:6a:4c:86:7a:ae:fd:d2:39:b4:1f:
0a:af:3e:d7:8a:15:9b:32:80:85:d3:cc:cc:6e:e7:
33:c4:2e:01:f9:58:bd:a4:e1:de:79:9a:24:57:e2:
d8:0b:f4:32:5d:6c:ca:30:6c:d0:70:be:9b:f0:c6:
78:56:b2:3b:aa:b7:10:c5:4b:8f:49:6b:81:b9:42:
a4:38:f4:da:d3:a8:b2:41:ea:3f:bc:1f:81:43:2b:
f7:71:1a:89:65:4a:e4:98:9d:8f:c2:db:7e:c0:5d:
0b:23:41:d5:d3:3f:14:2d:eb:80:de:91:f2:5a:bd:
55:f8:80:31:7d:c1:1e:f7:05:30:97:ce:93:a5:1e:
25:40:a0:de:1c:1b:61:b4:ab:6d:a2:9a:77:41:fa:
93:04:11:31:31:a3:4d:33:15:df:03:09:27:39:79:
52:00:7f:dd:d0:21:33:2b:55:da:ba:e2:28:f6:e5:
c5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A9:76:AD:23:51:96:F6:1A:55:37:11:C8:EF:50:58:3B:C5:8C:12
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d9:b6:80:66:f0:d1:5e:07:9c:9b:ce:a9:27:2e:ee:5f:5c:
e9:a1:52:72:80:89:70:9f:06:c7:bd:1c:fe:d0:31:20:13:f6:
c8:da:77:68:74:b4:07:31:c4:24:87:bb:e2:32:a6:92:05:57:
e1:e6:9a:7e:6b:cb:c9:9c:f7:45:c6:e6:dc:f9:43:fb:55:98:
72:55:f3:08:f7:01:bb:0b:ca:49:73:a9:0e:16:44:a4:57:a2:
72:ec:79:cc:d9:3d:24:e0:45:cc:6c:1e:79:51:8d:d8:53:d1:
e8:04:3d:c3:8e:a0:2b:e1:89:64:6a:fc:47:af:0a:aa:f0:17:
be:6c:f1:8f:82:f1:b7:68:a4:23:9f:52:36:d3:15:61:7e:75:
f0:60:95:49:d8:ba:61:f7:bc:78:8b:f4:be:3c:08:28:2e:a2:
87:fe:82:07:3d:01:bb:5a:c0:d2:46:c4:1f:d8:22:38:c9:86:
93:5b:9d:b5:21:ad:83:35:0f:49:f2:6a:f4:5c:46:8a:66:4e:
2a:3f:8f:5d:85:d4:bb:ee:2e:e6:39:60:e3:55:25:e6:f6:3f:
98:aa:6e:86:ea:7d:c5:d0:4b:6d:cb:4a:51:ed:3e:7f:d0:11:
8a:13:2c:b9:d6:b1:45:ea:d7:55:5b:8e:fd:4d:4b:5c:74:3e:
d8:5f:e5:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF18Aej86rLeZSfFHQjBvZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzhkMDI0MTEwOGIwMWY1ZWI3MDhmZThiYmI4NDdkNTNh
MzBmMTYwHhcNMjYxMDI2MDIwMDI3WhcNMjYxMDI3MDIwMDI3WjAzMTEwLwYDVQQD
EyhjYmE5NzZhZDIzNTE5NmY2MWE1NTM3MTFjOGVmNTA1ODNiYzU4YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzr8hE2UVkl1Te+Nxhc3YbwiKNZJ
NRBJ7HtMQLfMIc/FHHliI5KvEBoyLXYVYX6faDpA77jw5WOZakrm63+1bV23KwiG
xyBeRSqLnt5nWmpMhnqu/dI5tB8Krz7XihWbMoCF08zMbuczxC4B+Vi9pOHeeZok
V+LYC/QyXWzKMGzQcL6b8MZ4VrI7qrcQxUuPSWuBuUKkOPTa06iyQeo/vB+BQyv3
cRqJZUrkmJ2Pwtt+wF0LI0HV0z8ULeuA3pHyWr1V+IAxfcEe9wUwl86TpR4lQKDe
HBthtKttopp3QfqTBBExMaNNMxXfAwknOXlSAH/d0CEzK1XauuIo9uXFvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMupdq0jUZb2GlU3EcjvUFg7xYwSMB8GA1UdIwQY
MBaAFEHI0CQRCLAfXrcI/ou7hH1Tow8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mZDdhZjItNTAzNi00MmFjLWEzZjct
ZDU5NmVjMTRlZTJlLzEvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mZDdhZjItNTAzNi00MmFjLWEzZjctZDU5NmVjMTRlZTJl
LzEvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFNm2gGbw
0V4HnJvOqScu7l9c6aFScoCJcJ8Gx70c/tAxIBP2yNp3aHS0BzHEJIe74jKmkgVX
4eaafmvLyZz3Rcbm3PlD+1WYclXzCPcBuwvKSXOpDhZEpFeicux5zNk9JOBFzGwe
eVGN2FPR6AQ9w46gK+GJZGr8R68KqvAXvmzxj4Lxt2ikI59SNtMVYX518GCVSdi6
Yfe8eIv0vjwIKC6ih/6CBz0Bu1rA0kbEH9giOMmGk1udtSGtgzUPSfJq9FxGimZO
Kj+PXYXUu+4u5jlg41Ul5vY/mKpuhup9xdBLbctKUe0+f9ARihMsudaxRerXVVuO
/U1LXHQ+2F/lxQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 06:21:34 2026 by rpki-client