Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: 8ipdUrrgYaD5HAKRTtbF4GtRDo7X+f8rgQXKNL3Vpbw=
Subject key identifier: 5A:F4:08:E8:DF:D5:4F:26:88:8D:C6:25:6F:90:03:A5:3C:6A:0E:AA
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 01A06F4C4D2AF405AA72CCE4AE64A5FA7BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1A38
Signing time: Sat 05 Sep 2026 02:01:06 +0000
Manifest this update: Sat 05 Sep 2026 02:01:06 +0000
Manifest next update: Sun 06 Sep 2026 02:01:06 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: NahNo/b47EEj/kH7tb14BwSbx4g+4qd2YxV2Seqrbkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:4d:2a:f4:05:aa:72:cc:e4:ae:64:a5:fa:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Sep 5 02:01:06 2026 GMT
Not After : Sep 6 02:01:06 2026 GMT
Subject: CN=5af408e8dfd54f26888dc6256f9003a53c6a0eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:da:71:02:e9:ce:0c:4d:2e:93:ce:05:ca:
04:47:a6:1b:cd:1a:f8:18:92:01:89:92:b4:b9:77:
45:f3:2a:11:04:3f:bb:2e:6c:e2:09:9c:b9:71:71:
af:7d:da:8a:58:dd:18:63:2b:d3:76:62:bd:29:92:
30:af:05:65:4d:c0:d6:f3:b3:58:f7:13:c7:8c:b3:
b4:b1:01:ce:12:45:ae:4c:d7:c3:6e:2a:76:76:38:
9b:ed:ef:3d:08:02:e6:fa:81:c2:99:6c:de:df:9e:
5c:f4:49:67:72:ac:e6:19:f8:0b:50:19:a9:da:aa:
2b:d7:a2:54:22:04:46:e5:33:28:ff:1c:0e:dc:52:
ec:f9:d7:80:7d:7f:06:c1:81:2f:9b:91:01:19:25:
97:81:f3:92:14:7b:c8:8e:87:f9:84:64:15:4b:f2:
8f:53:73:c5:f4:25:2a:71:14:f4:8d:53:ed:c7:a8:
5d:6d:90:18:74:c7:0c:96:6a:e8:55:fd:58:a2:ce:
c8:3e:07:af:01:82:a3:32:49:16:61:44:69:25:94:
a2:2d:29:fb:b6:fb:58:2a:54:e2:77:23:b4:9b:8f:
cf:bb:79:8f:a9:a7:24:08:05:db:69:34:b1:41:41:
ce:61:66:1e:f4:0a:56:c2:fe:1c:1b:d9:b3:0d:86:
4d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F4:08:E8:DF:D5:4F:26:88:8D:C6:25:6F:90:03:A5:3C:6A:0E:AA
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5e:19:1f:1e:5a:d6:42:93:47:64:f8:17:ea:81:d8:e0:83:
53:f6:c6:1a:e3:5a:05:e3:fb:b2:d7:02:40:b1:d4:71:6e:3a:
0d:1e:03:6d:9b:5f:05:47:4e:8a:1b:b2:14:dd:e4:aa:c2:6c:
30:2d:92:2f:bf:16:4a:d5:65:2d:c4:6c:4e:20:ea:a6:e2:d2:
45:da:39:94:7b:bd:b9:9e:55:ca:1c:b4:38:19:93:a7:d7:bf:
a5:07:78:e2:cf:d8:38:e0:9c:4c:af:5f:34:dc:42:1b:c2:81:
f4:2d:29:18:46:1a:6a:56:23:5f:bd:43:47:c7:2c:ff:ba:ed:
c4:88:23:82:62:71:68:f2:44:bf:ee:75:10:2a:bd:c9:06:12:
e6:06:84:38:e2:0d:ad:d8:cc:c3:05:84:ce:7f:f9:06:fa:40:
86:fa:06:b7:e9:69:23:57:d4:e9:e0:c2:c7:ee:e9:f8:f9:a0:
74:00:30:88:bb:db:ca:29:01:74:72:1c:20:9b:98:f2:83:74:
58:5c:63:fb:68:b3:1f:db:47:40:55:d6:ad:80:50:f2:48:44:
dd:0d:4e:df:aa:eb:5a:d2:dd:aa:0a:86:46:96:eb:89:72:c0:
04:6c:16:06:47:93:bb:ad:3b:18:9d:c3:16:eb:df:1a:d7:b9:
6b:76:8d:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvTE0q9AWqcszkrmSl+nvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzhkMDI0MTEwOGIwMWY1ZWI3MDhmZThiYmI4NDdkNTNh
MzBmMTYwHhcNMjYwOTA1MDIwMTA2WhcNMjYwOTA2MDIwMTA2WjAzMTEwLwYDVQQD
Eyg1YWY0MDhlOGRmZDU0ZjI2ODg4ZGM2MjU2ZjkwMDNhNTNjNmEwZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi/acQLpzgxNLpPOBcoER6YbzRr4
GJIBiZK0uXdF8yoRBD+7LmziCZy5cXGvfdqKWN0YYyvTdmK9KZIwrwVlTcDW87NY
9xPHjLO0sQHOEkWuTNfDbip2djib7e89CALm+oHCmWze355c9ElncqzmGfgLUBmp
2qor16JUIgRG5TMo/xwO3FLs+deAfX8GwYEvm5EBGSWXgfOSFHvIjof5hGQVS/KP
U3PF9CUqcRT0jVPtx6hdbZAYdMcMlmroVf1Yos7IPgevAYKjMkkWYURpJZSiLSn7
tvtYKlTidyO0m4/Pu3mPqackCAXbaTSxQUHOYWYe9ApWwv4cG9mzDYZNIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFr0COjf1U8miI3GJW+QA6U8ag6qMB8GA1UdIwQY
MBaAFEHI0CQRCLAfXrcI/ou7hH1Tow8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9mZDdhZjItNTAzNi00MmFjLWEzZjct
ZDU5NmVjMTRlZTJlLzEvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9mZDdhZjItNTAzNi00MmFjLWEzZjctZDU5NmVjMTRlZTJl
LzEvUWNqUUpCRUlzQjlldHdqLWk3dUVmVk9qRHhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM14ZHx5a
1kKTR2T4F+qB2OCDU/bGGuNaBeP7stcCQLHUcW46DR4DbZtfBUdOihuyFN3kqsJs
MC2SL78WStVlLcRsTiDqpuLSRdo5lHu9uZ5Vyhy0OBmTp9e/pQd44s/YOOCcTK9f
NNxCG8KB9C0pGEYaalYjX71DR8cs/7rtxIgjgmJxaPJEv+51ECq9yQYS5gaEOOIN
rdjMwwWEzn/5BvpAhvoGt+lpI1fU6eDCx+7p+PmgdAAwiLvbyikBdHIcIJuY8oN0
WFxj+2izH9tHQFXWrYBQ8khE3Q1O36rrWtLdqgqGRpbriXLABGwWBkeTu607GJ3D
FuvfGte5a3aNvQ==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:37:24 2026 by rpki-client