Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
File: Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft (raw, json)
Hash identifier: yuLPMDbN2FkzfG+mJDY8d9S6UmpTwvphnQflmTLjze0=
Subject key identifier: 7E:29:43:D5:DB:AF:E4:70:EE:4D:6A:B8:F0:4F:99:CC:16:F1:C7:BF
Authority key identifier: 43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
Certificate issuer: /CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Certificate serial: 01A06FBA52FE29800C26F11D6BD8E1D1E452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
Manifest number: 046A
Signing time: Sat 05 Sep 2026 04:01:16 +0000
Manifest this update: Sat 05 Sep 2026 04:01:16 +0000
Manifest next update: Sun 06 Sep 2026 04:01:16 +0000
Files and hashes: 1: 1FnTssY12YHbRtY_nsWuk0wHwHY.roa (hash: Wp9yiHSm5oosC+1oWAnqkh1+AZR6IesD358xtq9/l6c=)
2: Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl (hash: u74VbTIA0BdTrlAfWEDK+uvKzNnozWS/jkKdPrsLUE0=)
3: jGh-wNW6Bb8Ek-tElbdvocTw07w.roa (hash: U9B8vDsky1QCNLRt1e+ai6h13YxOH7cX6zl+1cv2MFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:ba:52:fe:29:80:0c:26:f1:1d:6b:d8:e1:d1:e4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43724e61e3ba2f94665917339e6dac2b680a18cf
Validity
Not Before: Sep 5 04:01:16 2026 GMT
Not After : Sep 6 04:01:16 2026 GMT
Subject: CN=7e2943d5dbafe470ee4d6ab8f04f99cc16f1c7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:84:43:45:76:5f:4f:31:64:26:3a:6f:89:
4b:65:f7:4d:3c:ea:e6:16:a6:d3:58:21:9b:ca:c3:
b8:13:69:bc:16:49:5f:52:cf:f1:bf:75:b6:80:18:
f6:9d:19:44:8a:f2:bc:99:0d:b2:c4:4e:d1:c5:67:
40:f7:e8:6a:c5:1b:b3:85:88:f3:52:e5:ab:a6:ab:
85:9b:a1:63:d3:c4:d3:38:84:aa:8f:19:a5:59:a4:
f6:be:10:64:6b:57:a1:e9:fc:e6:c1:8f:5a:8a:4d:
5a:f0:9d:db:39:cb:4c:fa:be:4b:64:93:3b:2f:66:
f3:5b:46:53:09:4c:78:31:37:ff:87:7e:67:53:f2:
5e:ad:c7:6a:c4:68:48:94:50:0f:3a:8e:37:2a:82:
0e:b8:03:dc:ec:9c:f7:12:57:d2:c5:54:2d:56:b1:
d8:48:80:60:bf:87:ad:53:96:de:b1:4c:79:42:86:
b7:28:39:ab:ba:77:8c:bb:5e:13:3f:d8:da:0e:76:
0c:e4:c7:0c:55:05:12:6a:b8:bb:8d:cd:7a:4b:48:
d2:9e:58:d9:09:d4:83:7c:41:2e:0d:14:4c:59:d2:
5a:85:1f:15:4e:bf:a3:c7:e1:dd:8d:0d:be:16:4b:
39:2c:8e:ef:a7:ff:c1:38:5b:14:ae:4f:73:65:a3:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:29:43:D5:DB:AF:E4:70:EE:4D:6A:B8:F0:4F:99:CC:16:F1:C7:BF
X509v3 Authority Key Identifier:
keyid:43:72:4E:61:E3:BA:2F:94:66:59:17:33:9E:6D:AC:2B:68:0A:18:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3JOYeO6L5RmWRcznm2sK2gKGM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/03af8b-3e58-4916-a9b5-6b877036aa1a/1/Q3JOYeO6L5RmWRcznm2sK2gKGM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f4:67:b0:aa:08:74:2a:99:37:bc:6a:8a:c6:24:cc:a5:e5:
b8:04:91:63:4d:22:f9:5c:95:a1:90:18:63:e2:bd:9b:a1:b3:
db:a8:3d:73:47:c8:f6:2f:dd:4c:8e:de:18:6e:5b:72:fe:04:
d1:ce:fa:99:b3:73:8c:00:69:a0:c1:1e:57:12:61:e4:fc:4d:
c6:5c:95:d8:46:16:3e:70:46:db:e6:24:7a:fa:42:43:fd:d3:
69:1b:6d:e5:1b:d7:34:02:c4:fb:6a:a2:ff:dc:08:23:64:e7:
09:ae:8e:38:4b:ce:7f:99:ae:09:f7:58:ca:7d:8c:51:5d:a3:
37:7d:08:d9:6f:15:6f:a1:41:a4:82:aa:ec:48:55:71:18:45:
a3:79:6b:5c:9e:cf:49:0b:ec:e4:c1:ed:35:f6:ba:29:03:4a:
ad:06:63:21:52:f4:92:a7:cb:05:e9:da:03:ce:ab:0d:70:37:
91:ee:8d:4c:ff:04:de:a4:55:a1:85:38:64:53:c3:af:60:39:
f7:bd:23:02:d2:f8:aa:45:b9:68:e8:d6:13:3f:4d:9f:7e:63:
09:4c:c1:c5:65:5b:19:e3:4f:78:8e:04:27:3a:00:2d:3d:ed:
7e:f3:3f:5a:2a:b2:c1:65:08:6f:ec:c9:ba:ea:4b:75:c3:97:
c5:49:ec:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvulL+KYAMJvEda9jh0eRSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzI0ZTYxZTNiYTJmOTQ2NjU5MTczMzllNmRhYzJiNjgw
YTE4Y2YwHhcNMjYwOTA1MDQwMTE2WhcNMjYwOTA2MDQwMTE2WjAzMTEwLwYDVQQD
Eyg3ZTI5NDNkNWRiYWZlNDcwZWU0ZDZhYjhmMDRmOTljYzE2ZjFjN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLOEQ0V2X08xZCY6b4lLZfdNPOrm
FqbTWCGbysO4E2m8FklfUs/xv3W2gBj2nRlEivK8mQ2yxE7RxWdA9+hqxRuzhYjz
UuWrpquFm6Fj08TTOISqjxmlWaT2vhBka1eh6fzmwY9aik1a8J3bOctM+r5LZJM7
L2bzW0ZTCUx4MTf/h35nU/JercdqxGhIlFAPOo43KoIOuAPc7Jz3ElfSxVQtVrHY
SIBgv4etU5besUx5Qoa3KDmruneMu14TP9jaDnYM5McMVQUSari7jc16S0jSnljZ
CdSDfEEuDRRMWdJahR8VTr+jx+HdjQ2+Fks5LI7vp//BOFsUrk9zZaN0uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4pQ9Xbr+Rw7k1quPBPmcwW8ce/MB8GA1UdIwQY
MBaAFENyTmHjui+UZlkXM55trCtoChjPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUt
NmI4NzcwMzZhYTFhLzEvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wM2FmOGItM2U1OC00OTE2LWE5YjUtNmI4NzcwMzZhYTFh
LzEvUTNKT1llTzZMNVJtV1Jjem5tMnNLMmdLR004LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPRnsKoI
dCqZN7xqisYkzKXluASRY00i+VyVoZAYY+K9m6Gz26g9c0fI9i/dTI7eGG5bcv4E
0c76mbNzjABpoMEeVxJh5PxNxlyV2EYWPnBG2+YkevpCQ/3TaRtt5RvXNALE+2qi
/9wII2TnCa6OOEvOf5muCfdYyn2MUV2jN30I2W8Vb6FBpIKq7EhVcRhFo3lrXJ7P
SQvs5MHtNfa6KQNKrQZjIVL0kqfLBenaA86rDXA3ke6NTP8E3qRVoYU4ZFPDr2A5
970jAtL4qkW5aOjWEz9Nn35jCUzBxWVbGeNPeI4EJzoALT3tfvM/WiqywWUIb+zJ
uupLdcOXxUnsHw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:32:46 2026 by rpki-client