Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: O9KnOOlKcJfCzwn38rk7U7rfN6I3ltZqnVBJf3p4G8g=
Subject key identifier: F9:50:01:BE:8F:24:20:C7:6A:AE:A4:E3:73:07:AC:66:3F:2D:60:ED
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 01A03DBB57CE6A75D1A8AD0612690C43A8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 06AA
Signing time: Wed 26 Aug 2026 11:01:22 +0000
Manifest this update: Wed 26 Aug 2026 11:01:22 +0000
Manifest next update: Thu 27 Aug 2026 11:01:22 +0000
Files and hashes: 1: A06G0jKoVHkOoVsdJmlcMjUtuYg.roa (hash: /ucUBoWCtbDVXH8l3LkIjvANk7l2kl8IZAXTo8qEuVA=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: L37Jlbtx8Cjz3QI1ZAP8l+n5yHv9CZLTxUdybOx0gEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:bb:57:ce:6a:75:d1:a8:ad:06:12:69:0c:43:a8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Aug 26 11:01:22 2026 GMT
Not After : Aug 27 11:01:22 2026 GMT
Subject: CN=f95001be8f2420c76aaea4e37307ac663f2d60ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2b:76:a1:2a:21:38:21:c4:0f:d9:21:c8:f2:
aa:12:30:2b:ce:ed:84:b8:71:65:f1:f3:bb:9d:7b:
29:ff:7c:ca:9d:b6:c1:32:de:15:dd:7f:4e:bd:e1:
43:25:72:f3:65:4e:e7:fc:d1:b6:fb:db:6e:64:35:
f1:ec:81:55:7d:3d:75:cf:c6:ce:27:19:2a:68:98:
d0:19:2d:99:bf:ad:f1:94:a7:e7:80:d6:57:dd:c8:
4f:bc:70:61:d1:3c:62:33:5e:04:e1:12:85:e7:1f:
52:42:e9:d8:63:6c:b3:44:3e:04:37:b2:d2:78:65:
55:68:12:7e:fd:65:26:d3:9e:ff:02:33:4e:9a:8e:
50:4c:b4:2a:f6:a1:8b:d0:f5:13:b5:d0:33:7a:0a:
5f:fa:7d:47:4c:79:d2:06:23:32:28:b9:f7:ad:a0:
a3:14:f4:b9:ba:e1:24:48:b6:0c:89:50:41:34:56:
3e:41:7e:c6:17:fd:1b:9a:cb:07:a3:f5:e3:b9:f4:
13:a7:ee:3d:54:ff:da:b2:30:2b:17:2d:d7:15:4b:
fb:58:b9:2f:2e:1e:92:05:cd:c3:f6:89:67:7d:bc:
aa:33:c4:d0:78:82:60:87:81:61:06:0d:34:7f:d7:
1a:a4:48:72:f3:e0:41:ba:68:68:fb:20:5d:35:83:
15:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:50:01:BE:8F:24:20:C7:6A:AE:A4:E3:73:07:AC:66:3F:2D:60:ED
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:83:1d:70:c0:f4:fa:31:13:d1:b4:d5:26:ed:01:99:b3:78:
1b:13:53:8b:08:88:e7:f8:6a:fa:c6:f2:10:42:70:1c:ab:f3:
91:28:60:62:a7:42:9b:6c:9d:04:c6:1d:f4:2c:91:f5:66:26:
83:0a:3f:1c:6a:c3:a3:83:17:0f:22:3a:6c:de:fd:36:23:d6:
22:8c:5e:5a:c1:09:60:32:3b:24:02:fa:11:9c:cd:38:31:0c:
9c:cf:31:48:94:e2:7b:32:84:76:6a:fe:64:11:66:f4:e9:d5:
9a:b7:74:d7:3b:0e:d8:f9:cf:06:97:4c:1d:ac:6a:ed:b5:56:
f6:99:95:3b:e3:d3:83:4f:71:7f:42:63:42:a2:c9:e8:3f:42:
68:6a:26:bd:36:cb:53:c3:56:3c:1e:29:98:43:9d:ac:8c:e8:
53:61:f5:1c:51:09:bf:15:31:cb:55:65:7d:52:a0:d9:50:9e:
f3:54:0a:de:e6:84:ac:b3:25:96:7f:55:83:54:3e:6f:b2:dd:
bb:66:8d:6f:83:08:1c:33:a5:7f:ce:93:72:5f:06:79:99:4a:
20:ba:7e:2c:d2:90:28:8d:15:c1:e5:b1:f4:01:79:74:a3:fa:
17:18:f5:15:6f:14:7c:69:20:9a:06:3a:f9:3a:85:f6:4d:7b:
8a:43:59:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA9u1fOanXRqK0GEmkMQ6jbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYzk2NDkyYzAwNDA4YWQ1NGQ3MzBjMGViNjI5ZTNhMGI1
MGQ4MGYwHhcNMjYwODI2MTEwMTIyWhcNMjYwODI3MTEwMTIyWjAzMTEwLwYDVQQD
EyhmOTUwMDFiZThmMjQyMGM3NmFhZWE0ZTM3MzA3YWM2NjNmMmQ2MGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsit2oSohOCHED9khyPKqEjArzu2E
uHFl8fO7nXsp/3zKnbbBMt4V3X9OveFDJXLzZU7n/NG2+9tuZDXx7IFVfT11z8bO
JxkqaJjQGS2Zv63xlKfngNZX3chPvHBh0TxiM14E4RKF5x9SQunYY2yzRD4EN7LS
eGVVaBJ+/WUm057/AjNOmo5QTLQq9qGL0PUTtdAzegpf+n1HTHnSBiMyKLn3raCj
FPS5uuEkSLYMiVBBNFY+QX7GF/0bmssHo/XjufQTp+49VP/asjArFy3XFUv7WLkv
Lh6SBc3D9olnfbyqM8TQeIJgh4FhBg00f9capEhy8+BBumho+yBdNYMV7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPlQAb6PJCDHaq6k43MHrGY/LWDtMB8GA1UdIwQY
MBaAFEHJZJLABAitVNcwwOtinjoLUNgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xOWQwOTAtMTAzYi00M2RiLWIwNzQt
YTRlMzdjODY3YjA5LzEvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xOWQwOTAtMTAzYi00M2RiLWIwNzQtYTRlMzdjODY3YjA5
LzEvUWNsa2tzQUVDSzFVMXpEQTYyS2VPZ3RRMkE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0IMdcMD0
+jET0bTVJu0BmbN4GxNTiwiI5/hq+sbyEEJwHKvzkShgYqdCm2ydBMYd9CyR9WYm
gwo/HGrDo4MXDyI6bN79NiPWIoxeWsEJYDI7JAL6EZzNODEMnM8xSJTiezKEdmr+
ZBFm9OnVmrd01zsO2PnPBpdMHaxq7bVW9pmVO+PTg09xf0JjQqLJ6D9CaGomvTbL
U8NWPB4pmEOdrIzoU2H1HFEJvxUxy1VlfVKg2VCe81QK3uaErLMlln9Vg1Q+b7Ld
u2aNb4MIHDOlf86Tcl8GeZlKILp+LNKQKI0VweWx9AF5dKP6Fxj1FW8UfGkgmgY6
+TqF9k17ikNZzA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 20:16:51 2026 by rpki-client