Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
File: QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft (raw, json)
Hash identifier: LzmiQFr0Xm7T1O/k2ERPJcFDtfZudZ+2QpxIBcJUgnM=
Subject key identifier: B9:6D:17:70:08:90:B8:9C:CF:9B:C3:5B:8F:7E:F8:E7:AD:12:2F:78
Authority key identifier: 40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
Certificate issuer: /CN=404284388e4d8b78e562e7b140dc358d4114c027
Certificate serial: 01A08C7B9B1B9058FC1072E73D6D28E3B5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:45 +0000
Manifest this update: Thu 10 Sep 2026 18:01:45 +0000
Manifest next update: Fri 11 Sep 2026 18:01:45 +0000
Files and hashes: 1: QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl (hash: 8j5XGuN+bH38B3Zo6EY1HYVgiKChFfLGjI32Q4DBU4M=)
2: b9pucImMRklKE9H42beKCpH3jZQ.roa (hash: XLI5TKkW0eaR8i+yOT6IlSkbxxb0vfR2ygO3TPOk8GI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:9b:1b:90:58:fc:10:72:e7:3d:6d:28:e3:b5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404284388e4d8b78e562e7b140dc358d4114c027
Validity
Not Before: Sep 10 18:01:45 2026 GMT
Not After : Sep 11 18:01:45 2026 GMT
Subject: CN=b96d17700890b89ccf9bc35b8f7ef8e7ad122f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:8a:6f:2b:be:98:89:69:0b:e8:ef:c2:f4:
04:16:61:6b:fd:ea:be:3a:27:fb:5e:6b:da:99:ba:
e6:7e:5b:8f:33:7b:bc:60:a7:47:7e:ee:8d:b0:c1:
c7:da:62:db:ff:3f:af:ff:30:c0:a5:9e:43:12:38:
79:84:2a:01:ab:6f:d0:a1:e1:f0:f2:0c:da:3b:f4:
8d:dc:71:5b:04:1e:4e:2a:b5:80:db:c1:de:f7:8c:
56:e3:08:da:84:e6:ab:94:a5:9b:a2:68:86:cf:af:
9b:68:c4:7c:27:77:ea:f4:93:6a:d3:22:f7:ae:22:
59:b9:f8:ce:55:d3:ff:b2:a2:80:7b:db:ce:8d:97:
fb:ea:66:6a:d8:f2:09:8c:d7:9c:9e:ff:38:e2:a2:
41:44:41:35:fa:55:61:25:0e:b7:4e:db:1b:48:95:
00:2c:b1:0b:ee:53:26:cc:28:d5:bf:01:83:cb:ad:
ec:b4:8d:f0:56:14:08:91:52:68:ff:43:23:0f:c7:
3d:95:08:3a:f2:b9:6d:00:96:86:c3:28:66:ac:6e:
1b:3b:d3:f0:11:75:27:40:6f:31:8f:b2:77:e5:f3:
60:76:d4:9c:15:2b:c3:2c:25:e2:d8:53:a9:c9:10:
3a:7f:a5:f2:5d:0e:99:f1:1e:77:df:a1:c7:ac:9c:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6D:17:70:08:90:B8:9C:CF:9B:C3:5B:8F:7E:F8:E7:AD:12:2F:78
X509v3 Authority Key Identifier:
keyid:40:42:84:38:8E:4D:8B:78:E5:62:E7:B1:40:DC:35:8D:41:14:C0:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEKEOI5Ni3jlYuexQNw1jUEUwCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d99af7-e1a0-4b56-b213-87f129dc0ff2/1/QEKEOI5Ni3jlYuexQNw1jUEUwCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:78:d1:fb:2e:27:48:cb:17:50:a8:58:22:9b:41:a8:68:ff:
bc:99:d4:b7:56:37:ab:79:4d:22:06:59:ab:00:63:49:9f:e6:
b8:0f:e2:26:25:17:ac:7a:55:47:ff:75:bb:64:c4:75:68:35:
a0:86:28:2e:ae:3f:40:77:82:77:9c:a0:f5:0a:25:37:fc:d9:
d0:5c:31:a7:4a:c5:93:92:7e:6d:e3:7e:95:3a:91:0e:0c:da:
ed:03:0b:62:1a:2f:22:5d:fb:17:f7:94:ca:f1:8d:e1:d3:ac:
f0:f0:89:c1:24:b5:c3:be:ae:fa:34:17:d7:fd:fd:6d:e6:1a:
42:bf:c2:30:ee:1d:5c:f1:8b:d8:9f:2b:f7:aa:08:54:e5:5b:
2e:7c:fd:be:b4:56:84:f0:a5:cf:d6:dd:d8:2e:77:02:72:85:
9f:3a:f9:62:38:31:72:38:81:e9:2d:9d:cf:e3:d8:7a:4e:9c:
61:d2:05:9b:b1:03:1e:de:76:49:13:f5:4a:b0:78:98:53:39:
6a:2c:76:54:bd:1d:5d:31:8b:45:ae:81:bf:91:a3:c2:02:41:
a8:54:69:43:ae:12:03:11:21:c4:e4:fc:d3:85:87:82:bf:52:
0a:7a:94:b8:56:5e:5c:69:2b:dd:19:6d:c1:49:07:06:a5:37:
f4:11:b5:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMe5sbkFj8EHLnPW0o47W1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNDI4NDM4OGU0ZDhiNzhlNTYyZTdiMTQwZGMzNThkNDEx
NGMwMjcwHhcNMjYwOTEwMTgwMTQ1WhcNMjYwOTExMTgwMTQ1WjAzMTEwLwYDVQQD
EyhiOTZkMTc3MDA4OTBiODljY2Y5YmMzNWI4ZjdlZjhlN2FkMTIyZjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtu2Kbyu+mIlpC+jvwvQEFmFr/eq+
Oif7XmvambrmfluPM3u8YKdHfu6NsMHH2mLb/z+v/zDApZ5DEjh5hCoBq2/QoeHw
8gzaO/SN3HFbBB5OKrWA28He94xW4wjahOarlKWbomiGz6+baMR8J3fq9JNq0yL3
riJZufjOVdP/sqKAe9vOjZf76mZq2PIJjNecnv844qJBREE1+lVhJQ63TtsbSJUA
LLEL7lMmzCjVvwGDy63stI3wVhQIkVJo/0MjD8c9lQg68rltAJaGwyhmrG4bO9Pw
EXUnQG8xj7J35fNgdtScFSvDLCXi2FOpyRA6f6XyXQ6Z8R5336HHrJw7jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLltF3AIkLicz5vDW49++OetEi94MB8GA1UdIwQY
MBaAFEBChDiOTYt45WLnsUDcNY1BFMAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVLRU9JNU5pM2psWXVleFFOdzFqVUVVd0NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMt
ODdmMTI5ZGMwZmYyLzEvUUVLRU9JNU5pM2psWXVleFFOdzFqVUVVd0NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kOTlhZjctZTFhMC00YjU2LWIyMTMtODdmMTI5ZGMwZmYy
LzEvUUVLRU9JNU5pM2psWXVleFFOdzFqVUVVd0NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnjR+y4n
SMsXUKhYIptBqGj/vJnUt1Y3q3lNIgZZqwBjSZ/muA/iJiUXrHpVR/91u2TEdWg1
oIYoLq4/QHeCd5yg9QolN/zZ0Fwxp0rFk5J+beN+lTqRDgza7QMLYhovIl37F/eU
yvGN4dOs8PCJwSS1w76u+jQX1/39beYaQr/CMO4dXPGL2J8r96oIVOVbLnz9vrRW
hPClz9bd2C53AnKFnzr5YjgxcjiB6S2dz+PYek6cYdIFm7EDHt52SRP1SrB4mFM5
aix2VL0dXTGLRa6Bv5GjwgJBqFRpQ64SAxEhxOT804WHgr9SCnqUuFZeXGkr3Rlt
wUkHBqU39BG1tQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:03:33 2026 by rpki-client