Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: 6/pWjpnj1AvBpvKYwSSH6LQ+FMXlZuOhbTWrIALytPw=
Subject key identifier: 8E:BF:A7:0D:82:4E:73:48:74:96:2B:E8:AC:8F:85:5C:23:82:4B:68
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 01A16EA4C4305E1EF7CA5F3B57C714BA6AE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 04EE
Signing time: Sat 24 Oct 2026 16:00:54 +0000
Manifest this update: Sat 24 Oct 2026 16:00:54 +0000
Manifest next update: Sun 25 Oct 2026 16:00:54 +0000
Files and hashes: 1: 1FnTssY12YHbRtY_nsWuk0wHwHY.roa (hash: Wp9yiHSm5oosC+1oWAnqkh1+AZR6IesD358xtq9/l6c=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: pInJi4SL6fTLzr33yF2RtI7m9jPyV1edpPqgPhSc85c=)
3: jGh-wNW6Bb8Ek-tElbdvocTw07w.roa (hash: U9B8vDsky1QCNLRt1e+ai6h13YxOH7cX6zl+1cv2MFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:a4:c4:30:5e:1e:f7:ca:5f:3b:57:c7:14:ba:6a:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Oct 24 16:00:54 2026 GMT
Not After : Oct 25 16:00:54 2026 GMT
Subject: CN=8ebfa70d824e734874962be8ac8f855c23824b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:ce:58:42:60:d0:e4:01:d9:05:d0:e9:d1:
99:1b:65:96:9a:19:d4:98:f5:6f:30:d9:1e:1b:e4:
5c:e0:0f:28:26:25:e1:9a:1c:6a:22:56:0a:e5:58:
87:d7:16:7a:e4:d1:37:2f:37:d1:7c:65:db:b8:b5:
55:90:08:6f:5e:f2:5d:62:a2:d8:64:cb:1c:04:a2:
10:5c:58:b9:1c:9b:5e:17:cb:91:e7:39:b5:22:21:
d1:0b:7d:f4:2a:cc:f9:3b:19:b0:cf:dd:d8:dc:c5:
fe:96:66:40:e5:1d:84:c7:19:2e:91:ef:ac:de:ea:
ae:60:fa:a7:ed:29:c9:ad:17:2c:66:7c:18:2b:c5:
4b:2c:40:ee:ed:25:45:ec:5a:42:a0:e1:78:4d:ce:
f5:27:4e:4a:28:f1:c0:f3:23:ee:9e:d4:f2:1d:aa:
05:7f:3c:6e:83:21:d0:2f:f9:e0:4c:63:7c:0d:24:
e5:57:07:fd:d1:c4:cc:6d:99:7b:fa:f4:a8:07:35:
d6:d8:ab:f8:f3:83:ed:71:7f:05:8b:34:b1:8e:7c:
c9:96:6b:0d:cd:c9:28:16:a4:25:ba:2d:51:b5:ad:
f9:1b:63:44:40:a6:f1:be:c0:db:15:19:33:7c:83:
3d:fb:46:9c:fe:db:62:27:ae:7a:29:72:6b:f2:bc:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BF:A7:0D:82:4E:73:48:74:96:2B:E8:AC:8F:85:5C:23:82:4B:68
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:72:7c:84:8d:2c:65:52:df:75:78:cb:bc:bb:cd:10:8e:7b:
0f:e1:18:f1:d9:a3:b9:23:e9:c6:32:73:df:34:a9:ef:b7:3f:
6c:8f:78:09:45:8e:f4:30:47:68:94:12:99:a3:86:4f:1c:e7:
7d:3e:d3:53:44:32:1f:26:e2:f1:09:89:45:2f:12:18:fb:8d:
83:1f:e5:4e:bb:ee:5a:cf:d8:cf:98:fd:de:db:dc:dd:88:3d:
8d:8a:d9:d7:c4:13:72:6e:0d:76:c3:8d:61:84:dc:42:e4:4a:
10:bb:a6:57:d1:18:06:12:0c:c7:f6:58:04:14:56:75:10:55:
b7:f5:3e:a0:fb:76:f7:74:c8:0a:60:e2:38:94:d9:97:9d:05:
ca:27:74:e6:c6:f6:be:8e:9f:74:63:53:b5:a5:4b:de:c8:ba:
fa:3f:a5:69:68:49:ef:71:80:c1:dd:a9:73:63:8c:b0:bd:61:
3c:ba:6c:3e:18:ce:ea:4a:85:4e:96:1b:27:6d:62:2c:56:79:
3d:8b:d3:30:61:f8:99:3a:0f:3d:0d:5c:13:9d:ed:8a:d6:db:
3d:14:c1:94:65:9a:56:f1:06:42:c9:7a:ea:2f:f8:59:37:b4:
11:e9:d0:5f:13:10:0a:d6:c5:ab:f1:e1:1e:68:cf:e5:3c:b8:
a5:3b:33:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFupMQwXh73yl87V8cUumrkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzI0ZTYxZTNiYTJmOTQ2NjU5MTczMzllNmRhYzJiNjgw
YTE4Y2YwHhcNMjYxMDI0MTYwMDU0WhcNMjYxMDI1MTYwMDU0WjAzMTEwLwYDVQQD
Eyg4ZWJmYTcwZDgyNGU3MzQ4NzQ5NjJiZThhYzhmODU1YzIzODI0YjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtp3OWEJg0OQB2QXQ6dGZG2WWmhnU
mPVvMNkeG+Rc4A8oJiXhmhxqIlYK5ViH1xZ65NE3LzfRfGXbuLVVkAhvXvJdYqLY
ZMscBKIQXFi5HJteF8uR5zm1IiHRC330Ksz5Oxmwz93Y3MX+lmZA5R2Exxkuke+s
3uquYPqn7SnJrRcsZnwYK8VLLEDu7SVF7FpCoOF4Tc71J05KKPHA8yPuntTyHaoF
fzxugyHQL/ngTGN8DSTlVwf90cTMbZl7+vSoBzXW2Kv484PtcX8FizSxjnzJlmsN
zckoFqQlui1Rta35G2NEQKbxvsDbFRkzfIM9+0ac/ttiJ656KXJr8ryoNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6/pw2CTnNIdJYr6KyPhVwjgktoMB8GA1UdIwQY
MBaAFENyTmHjui+UZlkXM55trCtoChjPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUt
NmI4NzcwMzZhYTFhLzEvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUtNmI4NzcwMzZhYTFh
LzEvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnJ8hI0s
ZVLfdXjLvLvNEI57D+EY8dmjuSPpxjJz3zSp77c/bI94CUWO9DBHaJQSmaOGTxzn
fT7TU0QyHybi8QmJRS8SGPuNgx/lTrvuWs/Yz5j93tvc3Yg9jYrZ18QTcm4NdsON
YYTcQuRKELumV9EYBhIMx/ZYBBRWdRBVt/U+oPt293TICmDiOJTZl50Fyid05sb2
vo6fdGNTtaVL3si6+j+laWhJ73GAwd2pc2OMsL1hPLpsPhjO6kqFTpYbJ21iLFZ5
PYvTMGH4mToPPQ1cE53titbbPRTBlGWaVvEGQsl66i/4WTe0EenQXxMQCtbFq/Hh
HmjP5Ty4pTszMA==
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:48:42 2026 by rpki-client