Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: +/QbT54KSA2sMME2ix4ZG22hz5HGHJwlqHCSK5X5Rys=
Subject key identifier: 49:39:D6:56:51:CB:BB:7E:AE:5C:09:E0:5B:DC:94:3B:70:3F:F3:1C
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 01A08866BED78713EA01F3E5D159BC78C122
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 02F5
Signing time: Wed 09 Sep 2026 23:00:29 +0000
Manifest this update: Wed 09 Sep 2026 23:00:29 +0000
Manifest next update: Thu 10 Sep 2026 23:00:29 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: uRLlCM0On9mY55hQwbxbau/SyVAEGHrAWkJUGHHdLKU=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:66:be:d7:87:13:ea:01:f3:e5:d1:59:bc:78:c1:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Sep 9 23:00:29 2026 GMT
Not After : Sep 10 23:00:29 2026 GMT
Subject: CN=4939d65651cbbb7eae5c09e05bdc943b703ff31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9f:a7:89:bb:d8:ec:67:ed:8c:05:79:81:04:
46:84:66:f6:d8:ae:67:a6:44:fa:df:12:c0:68:0f:
1a:cf:75:4c:83:86:d5:e9:6b:3a:14:9f:29:94:e7:
6c:82:1b:b8:8e:20:dc:50:55:10:4a:4d:3c:cc:e7:
31:82:da:02:01:28:ab:4b:a8:ac:0b:a0:94:27:5a:
f3:da:46:5c:39:c0:35:5b:9b:f9:f8:ea:6f:47:2d:
2e:f3:b7:d8:74:43:fe:93:ad:b1:ec:99:ed:b1:75:
b6:16:c6:7c:52:6e:c1:f4:65:e3:f5:12:d9:97:df:
62:57:0b:c6:eb:29:df:50:5e:78:a7:1a:ee:16:96:
82:c3:de:3f:eb:a8:d6:f8:e6:44:7e:a0:71:6a:8a:
9d:a1:55:d2:ce:00:2b:0d:4f:7b:ed:8e:8b:f3:6f:
bd:aa:df:83:0e:f7:fa:40:a0:af:22:91:85:cc:a9:
79:9c:80:2d:1f:f5:2d:95:38:1b:a1:69:2c:c6:a1:
e6:44:99:2d:f3:fa:17:a4:06:01:1d:9a:ad:89:aa:
a9:84:1d:9c:fa:ed:60:1b:86:ea:69:56:d2:7e:ea:
1c:7f:52:c5:35:0d:4b:2e:07:1d:3f:2f:0d:ba:63:
9c:a2:31:43:43:18:7c:db:b1:30:65:f0:37:44:5c:
02:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:39:D6:56:51:CB:BB:7E:AE:5C:09:E0:5B:DC:94:3B:70:3F:F3:1C
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:bc:cf:1c:dc:70:ad:6c:02:66:eb:09:61:a8:be:fd:44:64:
a8:b1:58:ff:f5:e0:52:0e:1e:10:4c:71:d6:29:ba:6b:34:4d:
3a:7c:b5:88:49:e8:1c:24:a6:3a:f4:c6:b6:37:41:49:58:c2:
9a:30:c4:1a:c6:f0:d3:30:6d:bd:54:e3:88:ff:9c:d4:07:1c:
b3:43:2c:68:75:8c:7a:e5:8a:a7:f5:4d:93:f4:25:3b:43:41:
83:ea:b5:ad:fe:7c:de:b5:43:ee:d8:ca:63:d1:95:29:44:9f:
b9:60:2d:69:c3:a9:29:4e:19:2c:ea:65:59:65:95:f5:6a:81:
a9:a6:15:ad:59:68:ff:12:3c:06:20:2a:1e:af:bc:86:0e:a0:
b5:71:54:25:50:f0:b4:45:84:d1:c9:b8:87:4f:bb:a5:03:10:
8d:50:dd:f4:0e:61:8e:36:dd:a3:1b:5d:0a:fc:3d:ad:94:1a:
45:2e:99:f3:ff:81:43:04:31:b5:ed:3a:64:97:dc:3b:4c:30:
e1:51:2e:3a:38:a2:95:3a:85:3b:6b:48:9d:22:ba:25:cc:d3:
22:c1:bd:5c:a4:ec:ff:db:df:d3:a5:7a:af:89:4a:cb:4b:3b:
d6:29:fc:d7:f5:6c:8c:19:fc:22:09:14:30:29:85:b9:8d:bf:
7b:d5:38:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCIZr7XhxPqAfPl0Vm8eMEiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMDhjNDg2ZWY1NjE3MGM0MTJmMjY2MTVkMGE0MDk0YmNh
MWZiMmMwHhcNMjYwOTA5MjMwMDI5WhcNMjYwOTEwMjMwMDI5WjAzMTEwLwYDVQQD
Eyg0OTM5ZDY1NjUxY2JiYjdlYWU1YzA5ZTA1YmRjOTQzYjcwM2ZmMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25+nibvY7GftjAV5gQRGhGb22K5n
pkT63xLAaA8az3VMg4bV6Ws6FJ8plOdsghu4jiDcUFUQSk08zOcxgtoCASirS6is
C6CUJ1rz2kZcOcA1W5v5+OpvRy0u87fYdEP+k62x7JntsXW2FsZ8Um7B9GXj9RLZ
l99iVwvG6ynfUF54pxruFpaCw94/66jW+OZEfqBxaoqdoVXSzgArDU977Y6L82+9
qt+DDvf6QKCvIpGFzKl5nIAtH/UtlTgboWksxqHmRJkt8/oXpAYBHZqtiaqphB2c
+u1gG4bqaVbSfuocf1LFNQ1LLgcdPy8NumOcojFDQxh827EwZfA3RFwCkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEk51lZRy7t+rlwJ4FvclDtwP/McMB8GA1UdIwQY
MBaAFEAIxIbvVhcMQS8mYV0KQJS8ofssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTct
ZTkyYTI1NDkxY2VkLzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hOTdmOWYtM2RmMC00NTQ2LTljZTctZTkyYTI1NDkxY2Vk
LzEvUUFqRWh1OVdGd3hCTHlaaFhRcEFsTHloLXl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARbzPHNxw
rWwCZusJYai+/URkqLFY//XgUg4eEExx1im6azRNOny1iEnoHCSmOvTGtjdBSVjC
mjDEGsbw0zBtvVTjiP+c1Accs0MsaHWMeuWKp/VNk/QlO0NBg+q1rf583rVD7tjK
Y9GVKUSfuWAtacOpKU4ZLOplWWWV9WqBqaYVrVlo/xI8BiAqHq+8hg6gtXFUJVDw
tEWE0cm4h0+7pQMQjVDd9A5hjjbdoxtdCvw9rZQaRS6Z8/+BQwQxte06ZJfcO0ww
4VEuOjiilTqFO2tInSK6JczTIsG9XKTs/9vf06V6r4lKy0s71in81/VsjBn8IgkU
MCmFuY2/e9U44g==
-----END CERTIFICATE-----
Generated at Thu Sep 10 05:19:36 2026 by rpki-client