Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: 7vlsmfxtJI4eG0kU0L1GcrCEVnyH2fHGxombe1v3xqM=
Subject key identifier: 62:3C:D8:C2:D4:B8:2C:48:BF:54:5C:0E:F3:32:38:61:94:12:DA:3C
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 01A03E6031AF67F7A24162A0C2358953295F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 17AA
Signing time: Wed 26 Aug 2026 14:01:26 +0000
Manifest this update: Wed 26 Aug 2026 14:01:26 +0000
Manifest next update: Thu 27 Aug 2026 14:01:26 +0000
Files and hashes: 1: 4lRlhSc9Jzpgo2qyOZgRPmeBS8E.roa (hash: fe25PIHE4R92mruy7bWhmhbyquYQv4J/2uT5rEcGMtI=)
2: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: QZLtdR3RJ2tIjIjfyKXqXjMDoEc5SkRbIIyr3Pk/ONM=)
3: d4L-Ywam3q9FKYpyHF6Nixngago.asa (hash: zY2cIfwxMRiOqaAZBQMaP/RsPvaaJfXbxud7F/yA2YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:60:31:af:67:f7:a2:41:62:a0:c2:35:89:53:29:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Aug 26 14:01:26 2026 GMT
Not After : Aug 27 14:01:26 2026 GMT
Subject: CN=623cd8c2d4b82c48bf545c0ef33238619412da3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:37:0e:7a:63:e8:aa:ae:be:11:0e:ca:90:15:
5a:9b:bb:e1:1e:41:b5:90:09:cd:f8:ee:e8:7c:5c:
d3:3d:d8:d0:dc:c2:05:33:61:30:b8:fc:16:12:08:
a0:57:bd:00:9a:cb:02:25:2c:83:3f:2a:75:0c:dc:
01:c7:b4:be:56:44:6d:a6:8e:23:07:63:4c:cf:54:
55:8e:17:7a:ce:ad:17:03:9f:c9:39:d6:fb:b5:ee:
e5:ea:c4:82:67:14:f3:13:15:f8:e0:db:56:ac:7c:
ad:32:40:07:e4:16:3c:8e:a4:56:93:53:58:50:cc:
2e:cf:12:aa:3b:71:10:9c:cb:d4:b4:d4:29:d4:af:
8e:9a:b6:26:a6:21:99:9c:08:87:70:4e:86:13:7f:
76:e3:58:d4:c6:0f:b2:b2:d9:e0:16:53:54:6c:1d:
53:79:b5:39:9d:93:01:6c:2c:28:69:18:ab:85:8c:
78:13:b6:1c:b3:68:0b:b8:55:10:17:3e:ef:71:b5:
ba:f0:70:ba:59:71:22:ed:cd:a2:7b:91:86:49:91:
a4:9f:e4:d5:49:39:e6:ea:ef:52:2c:2f:2a:81:66:
5d:1f:e2:66:e5:5f:16:02:75:7f:44:2c:d5:e9:91:
0f:86:f4:65:d2:f4:f6:37:8d:ac:93:ec:2b:17:f6:
8a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3C:D8:C2:D4:B8:2C:48:BF:54:5C:0E:F3:32:38:61:94:12:DA:3C
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c8:f6:e7:b0:ae:3c:6b:09:08:8f:07:e8:4f:01:f8:42:5d:
3d:9b:11:57:bb:85:19:7d:9f:02:73:12:cd:2d:c9:70:55:28:
9d:c0:05:00:cf:bb:d7:e3:6d:2d:e8:21:4d:b8:d2:e3:9d:e4:
bb:ff:fc:63:bc:e3:d0:4c:1d:a3:e1:ea:99:ad:3d:96:65:99:
85:6d:05:c3:ea:d6:41:43:1b:98:9d:54:02:b3:fb:ab:48:74:
63:c6:69:a9:05:f4:3d:ef:83:30:9b:f8:93:9f:82:73:33:21:
70:b9:c7:c6:19:76:7a:4e:57:d9:01:6e:bb:d4:c2:ae:78:5b:
b2:87:18:2b:91:40:ca:09:34:3a:1d:86:80:03:ec:97:19:6e:
55:62:da:ee:ff:75:47:4f:95:c7:db:28:26:ef:70:1a:0c:c4:
1f:ef:4d:51:95:6b:f4:01:05:b2:66:41:ef:85:e1:92:33:8f:
2f:b3:a6:40:1d:60:8d:a7:1f:a7:78:6f:4d:36:56:3e:f6:84:
0d:f2:39:6f:bd:e1:75:9a:70:bc:0c:a9:1c:85:86:85:55:57:
73:5a:b5:c7:43:b5:12:80:a4:94:52:c8:8e:3e:81:41:ec:f1:
81:2f:8b:d6:5e:e2:3b:8a:4e:56:ea:14:75:bc:13:22:c1:1d:
cc:b4:e0:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA+YDGvZ/eiQWKgwjWJUylfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOTJjNDdkYjhhMjE5MzExNTQ2MDVkNTc2YzNiNzM0MWQw
NmI0YjQwHhcNMjYwODI2MTQwMTI2WhcNMjYwODI3MTQwMTI2WjAzMTEwLwYDVQQD
Eyg2MjNjZDhjMmQ0YjgyYzQ4YmY1NDVjMGVmMzMyMzg2MTk0MTJkYTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jcOemPoqq6+EQ7KkBVam7vhHkG1
kAnN+O7ofFzTPdjQ3MIFM2EwuPwWEgigV70AmssCJSyDPyp1DNwBx7S+VkRtpo4j
B2NMz1RVjhd6zq0XA5/JOdb7te7l6sSCZxTzExX44NtWrHytMkAH5BY8jqRWk1NY
UMwuzxKqO3EQnMvUtNQp1K+OmrYmpiGZnAiHcE6GE39241jUxg+ystngFlNUbB1T
ebU5nZMBbCwoaRirhYx4E7Ycs2gLuFUQFz7vcbW68HC6WXEi7c2ie5GGSZGkn+TV
STnm6u9SLC8qgWZdH+Jm5V8WAnV/RCzV6ZEPhvRl0vT2N42sk+wrF/aKOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGI82MLUuCxIv1RcDvMyOGGUEto8MB8GA1UdIwQY
MBaAFECSxH24ohkxFUYF1XbDtzQdBrS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYt
OGEzNmE2ZmFjZDUwLzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYtOGEzNmE2ZmFjZDUw
LzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcj257Cu
PGsJCI8H6E8B+EJdPZsRV7uFGX2fAnMSzS3JcFUoncAFAM+71+NtLeghTbjS453k
u//8Y7zj0Ewdo+Hqma09lmWZhW0Fw+rWQUMbmJ1UArP7q0h0Y8ZpqQX0Pe+DMJv4
k5+CczMhcLnHxhl2ek5X2QFuu9TCrnhbsocYK5FAygk0Oh2GgAPslxluVWLa7v91
R0+Vx9soJu9wGgzEH+9NUZVr9AEFsmZB74XhkjOPL7OmQB1gjacfp3hvTTZWPvaE
DfI5b73hdZpwvAypHIWGhVVXc1q1x0O1EoCklFLIjj6BQezxgS+L1l7iO4pOVuoU
dbwTIsEdzLTgEA==
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:49:01 2026 by rpki-client