Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: 6qAv7UyIiYnRaooBXOxz9YLK1eVJioMgkGG8AdSx2HY=
Subject key identifier: 0F:5A:4D:3A:90:AE:22:20:EA:F3:AD:BD:06:7C:E8:7B:E4:F6:A7:95
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 01A1DE396AC466170311C0D45A1DE4EC2912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 1AFA
Signing time: Sun 15 Nov 2026 08:01:07 +0000
Manifest this update: Sun 15 Nov 2026 08:01:07 +0000
Manifest next update: Mon 16 Nov 2026 08:01:07 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: JnKL/8ldQv3iczO0Cplu83UE4tZHkwua7mdd8biWDNQ=)
2: Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa (hash: 1LS6QFZFhpfMUxXS4QP7dupHPq2LjjbAwscSCeUJDT8=)
3: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (hash: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:6a:c4:66:17:03:11:c0:d4:5a:1d:e4:ec:29:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Nov 15 08:01:07 2026 GMT
Not After : Nov 16 08:01:07 2026 GMT
Subject: CN=0f5a4d3a90ae2220eaf3adbd067ce87be4f6a795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:30:4d:00:17:a5:eb:38:d6:07:f0:78:9a:
70:b9:64:d0:bb:1a:64:d9:92:95:a9:a6:1f:01:87:
36:1e:81:1e:38:e7:16:7d:87:87:1e:08:e4:e8:32:
94:27:1b:ac:79:88:62:be:72:b2:ba:e0:da:e6:1f:
4f:86:fd:28:31:0f:85:b1:70:a6:b3:b2:54:97:b9:
c7:fa:0f:33:43:7e:a9:dc:f0:e7:bc:07:4a:7e:98:
6f:f9:48:cc:7e:f3:3d:43:61:f8:67:77:3e:9e:a6:
7c:79:a7:bf:0a:ef:ee:2d:b0:ca:12:73:3a:a3:13:
92:53:e2:cf:af:ef:07:7b:68:2a:a5:2b:be:79:26:
39:b0:13:de:a6:d6:ae:c9:6a:21:81:09:bb:71:ca:
ba:77:08:55:61:08:c0:a3:26:24:b1:9e:24:51:9c:
b2:0b:d9:cb:06:67:0d:4c:db:d3:76:90:10:21:a3:
90:71:d2:49:2a:d1:e8:4e:77:b7:e9:3f:54:d1:1f:
ce:86:10:04:55:31:0d:60:92:4e:2d:85:a3:a4:43:
4c:ac:15:a7:c4:ad:5e:be:36:d1:83:50:78:b7:f8:
37:19:14:b4:e5:3e:0a:88:5f:56:79:d9:53:a1:20:
8e:64:0b:98:0c:8d:3f:a2:98:e8:b9:50:32:13:6b:
54:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5A:4D:3A:90:AE:22:20:EA:F3:AD:BD:06:7C:E8:7B:E4:F6:A7:95
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ec:05:f1:3e:eb:1b:93:f6:34:d1:6d:97:b3:03:6e:77:9d:
d0:94:a5:aa:f7:97:74:38:4a:9b:d0:1f:61:eb:6b:5f:ba:89:
e5:0b:da:b4:c5:df:71:b9:c3:4b:03:de:eb:cb:43:de:2a:0b:
ab:50:69:5c:80:0e:0c:37:fe:6b:63:08:39:69:6b:1d:f9:18:
de:b2:7e:75:f4:fc:8b:3d:c5:99:ee:65:ad:c6:11:7e:38:20:
f4:27:36:d3:9b:c6:f2:18:b5:2c:db:82:3a:1e:61:60:56:cd:
0b:2a:91:bd:d2:37:02:93:55:b3:87:7d:ad:9f:40:c5:7a:6c:
ab:bc:aa:4c:51:f4:ca:75:bf:46:13:09:45:e7:e9:a4:f0:98:
21:75:85:b7:f3:fc:d1:a6:a3:94:c7:ef:42:48:f8:04:56:da:
dd:0c:af:c0:96:b1:aa:ac:cc:4f:3c:63:74:b5:c9:1b:6f:d2:
7e:48:6b:cc:41:91:cd:3a:c8:de:dd:80:b7:c7:b5:c0:fd:7e:
2b:49:71:2a:78:a7:08:70:55:ca:fb:32:5d:a5:3d:6b:f1:f7:
9c:0b:1d:75:27:ed:78:06:7a:31:b6:8b:57:a7:3e:3d:97:4c:
ee:6d:71:0a:b7:8d:ce:71:b0:e4:0f:42:3c:f2:2e:8c:63:ac:
58:6f:86:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOWrEZhcDEcDUWh3k7CkSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDRlMzNiZTcxZDMzOWYzYmMwY2M2ZGFlNjVlODc5MmZm
NGQ1ZGMwHhcNMjYxMTE1MDgwMTA3WhcNMjYxMTE2MDgwMTA3WjAzMTEwLwYDVQQD
EygwZjVhNGQzYTkwYWUyMjIwZWFmM2FkYmQwNjdjZTg3YmU0ZjZhNzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndEwTQAXpes41gfweJpwuWTQuxpk
2ZKVqaYfAYc2HoEeOOcWfYeHHgjk6DKUJxuseYhivnKyuuDa5h9Phv0oMQ+FsXCm
s7JUl7nH+g8zQ36p3PDnvAdKfphv+UjMfvM9Q2H4Z3c+nqZ8eae/Cu/uLbDKEnM6
oxOSU+LPr+8He2gqpSu+eSY5sBPeptauyWohgQm7ccq6dwhVYQjAoyYksZ4kUZyy
C9nLBmcNTNvTdpAQIaOQcdJJKtHoTne36T9U0R/OhhAEVTENYJJOLYWjpENMrBWn
xK1evjbRg1B4t/g3GRS05T4KiF9WedlToSCOZAuYDI0/opjouVAyE2tUSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA9aTTqQriIg6vOtvQZ86Hvk9qeVMB8GA1UdIwQY
MBaAFEDU4zvnHTOfO8DMba5l6Hkv9NXcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgt
MDIzM2I3YjI2ZDVkLzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hYzY5ZDItOTI5OS00OWIwLTkxYzgtMDIzM2I3YjI2ZDVk
LzEvUU5Uak8tY2RNNTg3d014dHJtWG9lU18wMWR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+wF8T7r
G5P2NNFtl7MDbned0JSlqveXdDhKm9AfYetrX7qJ5QvatMXfcbnDSwPe68tD3ioL
q1BpXIAODDf+a2MIOWlrHfkY3rJ+dfT8iz3Fme5lrcYRfjgg9Cc205vG8hi1LNuC
Oh5hYFbNCyqRvdI3ApNVs4d9rZ9AxXpsq7yqTFH0ynW/RhMJRefppPCYIXWFt/P8
0aajlMfvQkj4BFba3QyvwJaxqqzMTzxjdLXJG2/SfkhrzEGRzTrI3t2At8e1wP1+
K0lxKninCHBVyvsyXaU9a/H3nAsddSfteAZ6MbaLV6c+PZdM7m1xCreNznGw5A9C
PPIujGOsWG+GAg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:55:23 2026 by rpki-client