Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
File: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft (raw, json)
Hash identifier: 6YBKZm1oDu6R7LFYN0t6khzkXKvjpk5hYnfzaf0TNW0=
Subject key identifier: 82:45:1D:01:F0:F3:6D:CD:BA:F7:CF:1F:7B:A4:23:4B:1F:07:4B:0D
Authority key identifier: 43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
Certificate issuer: /CN=439137befe8bc55903690c7c46af197cc91a703c
Certificate serial: 01A0878BBFD770CF5CADE42E4E1ABF1E94BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
Manifest number: 0631
Signing time: Wed 09 Sep 2026 19:01:17 +0000
Manifest this update: Wed 09 Sep 2026 19:01:17 +0000
Manifest next update: Thu 10 Sep 2026 19:01:17 +0000
Files and hashes: 1: Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl (hash: sLIprXJrD4/7KzsFw2h4ZlAtCcDZFtWmGs823NZpJdc=)
2: _7YkQnir_Fs7RdN8jRsXRuKitU0.roa (hash: eG23lB/DnSZrnvg06TYWuaxCxD+hbMjkA+ocC1LtuGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:8b:bf:d7:70:cf:5c:ad:e4:2e:4e:1a:bf:1e:94:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439137befe8bc55903690c7c46af197cc91a703c
Validity
Not Before: Sep 9 19:01:17 2026 GMT
Not After : Sep 10 19:01:17 2026 GMT
Subject: CN=82451d01f0f36dcdbaf7cf1f7ba4234b1f074b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:32:33:58:30:f3:69:34:b8:e2:0c:15:ca:9a:
97:8d:ec:01:3e:d2:10:f8:80:72:63:7d:20:43:41:
51:d9:d0:31:de:9c:91:a4:f4:7d:8a:de:60:a2:59:
f4:8c:5a:ba:f7:80:8d:27:2f:06:d4:66:0d:c6:40:
92:35:92:02:21:41:a5:66:0a:95:1d:74:f6:e8:65:
88:a1:b6:ea:0d:83:01:63:50:af:80:f3:12:aa:d7:
ab:92:b5:b7:bd:44:e6:81:04:03:2f:ba:3a:92:2e:
2b:65:99:be:3f:c3:fd:f9:0c:9a:d0:3c:2a:66:ce:
64:00:eb:39:02:ac:18:27:1d:ca:3a:45:13:fd:76:
08:a4:17:a2:1e:58:00:bf:64:26:4e:02:09:44:50:
86:8c:2e:75:3f:35:ad:52:f8:d1:01:e5:ce:c0:a5:
4a:6e:78:ce:99:a0:45:2f:3f:50:b0:56:30:16:af:
22:7d:a2:bd:a6:bb:b5:67:00:3d:4e:ca:85:8c:ed:
a9:03:ea:09:6b:81:40:13:2b:f0:42:f7:6a:fa:39:
71:da:a3:60:50:4f:aa:fc:32:e3:5d:f5:d7:30:1f:
52:ed:44:c4:bd:05:7e:e5:23:a2:59:94:ca:41:6c:
60:2a:4e:a2:6a:f5:fd:ad:dd:3b:4c:01:0b:0f:90:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:1D:01:F0:F3:6D:CD:BA:F7:CF:1F:7B:A4:23:4B:1F:07:4B:0D
X509v3 Authority Key Identifier:
keyid:43:91:37:BE:FE:8B:C5:59:03:69:0C:7C:46:AF:19:7C:C9:1A:70:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5ac22d-9e8f-449d-8304-0f52d828fd4f/1/Q5E3vv6LxVkDaQx8Rq8ZfMkacDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:29:72:1f:55:1a:18:53:35:af:d0:16:43:63:57:39:b9:6b:
d9:e2:84:26:d5:74:f0:1e:1c:3f:ff:c5:78:52:7d:df:6a:22:
2b:8c:9a:eb:89:fa:26:d9:2e:e0:d9:c0:3b:59:37:6f:99:98:
5e:0f:7d:7c:43:33:1e:a6:f3:f4:91:98:61:24:1d:2a:f7:cb:
5d:55:4b:3d:d8:fd:6b:18:23:24:7e:69:17:c9:83:34:bd:64:
45:aa:90:14:e3:7b:4d:0e:a8:c9:0a:52:78:5e:92:01:b3:bc:
8e:a3:85:16:fc:5b:32:54:e5:41:22:db:ac:a7:d9:6e:5f:5f:
c2:86:9c:d9:eb:6f:8f:80:a8:f4:b1:b2:8f:4a:fd:95:f6:9c:
c4:d4:66:e3:e5:1e:b3:b5:f1:39:aa:8c:14:47:c2:ed:36:17:
aa:8f:a1:a9:0f:65:13:15:e5:df:45:5c:1c:4e:60:16:a1:03:
e4:fe:75:08:ea:4d:71:ca:94:17:59:65:91:5d:ed:80:20:93:
70:86:2d:7c:51:24:c8:54:fa:c0:df:63:df:75:b3:9a:33:d5:
bc:62:26:de:62:e7:ee:66:70:e8:eb:f5:19:87:7d:0e:51:64:
24:57:e7:00:e9:c1:08:8e:8f:93:f1:82:1a:76:00:ee:6c:3b:
a2:57:a7:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCHi7/XcM9creQuThq/HpS6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOTEzN2JlZmU4YmM1NTkwMzY5MGM3YzQ2YWYxOTdjYzkx
YTcwM2MwHhcNMjYwOTA5MTkwMTE3WhcNMjYwOTEwMTkwMTE3WjAzMTEwLwYDVQQD
Eyg4MjQ1MWQwMWYwZjM2ZGNkYmFmN2NmMWY3YmE0MjM0YjFmMDc0YjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTIzWDDzaTS44gwVypqXjewBPtIQ
+IByY30gQ0FR2dAx3pyRpPR9it5goln0jFq694CNJy8G1GYNxkCSNZICIUGlZgqV
HXT26GWIobbqDYMBY1CvgPMSqterkrW3vUTmgQQDL7o6ki4rZZm+P8P9+Qya0Dwq
Zs5kAOs5AqwYJx3KOkUT/XYIpBeiHlgAv2QmTgIJRFCGjC51PzWtUvjRAeXOwKVK
bnjOmaBFLz9QsFYwFq8ifaK9pru1ZwA9TsqFjO2pA+oJa4FAEyvwQvdq+jlx2qNg
UE+q/DLjXfXXMB9S7UTEvQV+5SOiWZTKQWxgKk6iavX9rd07TAELD5B8xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJFHQHw823NuvfPH3ukI0sfB0sNMB8GA1UdIwQY
MBaAFEORN77+i8VZA2kMfEavGXzJGnA8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQt
MGY1MmQ4MjhmZDRmLzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81YWMyMmQtOWU4Zi00NDlkLTgzMDQtMGY1MmQ4MjhmZDRm
LzEvUTVFM3Z2Nkx4VmtEYVF4OFJxOFpmTWthY0R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZClyH1Ua
GFM1r9AWQ2NXOblr2eKEJtV08B4cP//FeFJ932oiK4ya64n6Jtku4NnAO1k3b5mY
Xg99fEMzHqbz9JGYYSQdKvfLXVVLPdj9axgjJH5pF8mDNL1kRaqQFON7TQ6oyQpS
eF6SAbO8jqOFFvxbMlTlQSLbrKfZbl9fwoac2etvj4Co9LGyj0r9lfacxNRm4+Ue
s7XxOaqMFEfC7TYXqo+hqQ9lExXl30VcHE5gFqED5P51COpNccqUF1llkV3tgCCT
cIYtfFEkyFT6wN9j33WzmjPVvGIm3mLn7mZw6Ov1GYd9DlFkJFfnAOnBCI6Pk/GC
GnYA7mw7olenUg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 01:04:27 2026 by rpki-client