Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier: pcxSvyzoySeVwU2c4BMf46v6C7C8EGL/NYm/Gg7chsU=
Subject key identifier: 35:3E:45:F3:37:FF:BA:CE:83:24:3C:48:0D:93:16:21:98:C7:42:E6
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 019F91358DA7B725A1558F87095995984C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number: 0FE4
Signing time: Thu 23 Jul 2026 23:00:33 +0000
Manifest this update: Thu 23 Jul 2026 23:00:33 +0000
Manifest next update: Fri 24 Jul 2026 23:00:33 +0000
Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: +s2Rv4TvLoFt5qN/V4c4YN5s8hLN/fSHku8j6qpfqlw=)
2: yaEEybz2NfCWEApyu2Dzx2yLpcI.roa (hash: j2pzI49xHsyv/Ol3MBefWz6almNV2xHEmt1n4qjR/Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:8d:a7:b7:25:a1:55:8f:87:09:59:95:98:4c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Jul 23 23:00:33 2026 GMT
Not After : Jul 24 23:00:33 2026 GMT
Subject: CN=353e45f337ffbace83243c480d93162198c742e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ef:aa:49:e8:08:76:05:33:10:6a:bd:87:a3:
2f:7f:c3:46:16:7a:da:63:e2:c0:6e:04:8e:40:c3:
ea:4d:2a:d7:8b:9b:06:34:3d:33:d1:ca:8b:cd:cf:
b8:08:f2:20:23:ad:36:c3:82:b1:74:8b:ff:c4:99:
ad:5a:5e:92:d1:e4:5b:67:bf:48:3e:51:d6:e6:90:
68:b3:2a:a7:7d:8b:bb:0d:f4:db:6e:7b:f8:8c:9b:
37:7f:90:77:18:9f:ee:fe:87:8d:8a:de:e0:1b:67:
cf:f8:f3:ea:6c:fd:42:f2:9c:d5:80:e0:85:b6:78:
4e:d7:74:f3:55:e4:34:e3:9d:97:c3:be:42:dd:ae:
0e:fe:61:3b:bc:11:3c:99:a7:b0:b7:8c:af:83:44:
3e:26:8b:c9:d7:e0:ff:63:e8:a7:31:d1:ee:34:b6:
04:58:78:7c:33:75:62:42:f1:4e:8e:13:a2:b5:67:
29:e0:ba:74:85:e2:ba:2f:cc:db:de:31:11:83:e8:
21:a5:33:d0:03:63:7b:92:d7:eb:1f:fe:eb:65:ba:
fc:a7:c7:ec:c9:18:1c:6a:09:c2:92:90:65:49:c4:
86:7d:ba:4a:5f:e1:d0:e4:f8:56:44:98:5d:1a:ef:
b5:0a:a5:23:57:ad:b4:73:0e:27:49:12:19:cd:2d:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:3E:45:F3:37:FF:BA:CE:83:24:3C:48:0D:93:16:21:98:C7:42:E6
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cc:44:cf:e0:2c:40:33:87:ca:d9:e4:fc:1f:03:5f:aa:a5:
5e:6b:26:93:15:33:22:e5:32:2b:1f:65:09:63:2a:11:85:01:
20:9a:8a:84:16:e3:52:74:f3:e4:cf:22:e8:f3:fb:58:ab:a6:
8b:50:3b:47:98:6a:4e:c7:37:98:fb:a0:20:56:32:3b:ed:bd:
ad:09:28:f1:a0:a5:fd:67:f2:45:6b:90:1b:4c:b4:2e:ec:5c:
08:01:34:cd:3b:67:84:7e:42:23:bf:6b:65:b5:95:7d:21:7c:
fd:64:66:d0:6d:00:07:c1:4b:bb:91:60:b4:90:73:a6:5c:ac:
2f:01:18:18:3b:7e:f9:b8:f9:56:24:01:07:de:f0:70:6f:2c:
d7:f3:bb:32:27:8c:84:c4:6f:8d:a3:2c:d8:e8:7a:b2:a3:a3:
58:a4:3a:20:6a:7d:6f:e3:bf:a0:5e:65:b4:73:a4:2b:b2:01:
76:a7:9d:ce:26:f9:54:ec:e2:ce:c8:75:5b:4e:6c:38:71:0e:
a4:db:60:49:c0:ec:1b:dd:1c:02:32:5c:42:ab:be:27:b2:86:
a8:6c:a7:55:f4:00:83:72:4d:c7:19:a8:28:a3:9a:32:1d:5a:
c1:db:76:a3:a5:c6:ba:bd:a5:3c:f2:4e:69:89:0f:b1:4a:4b:
73:6d:5e:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNY2ntyWhVY+HCVmVmExiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2Y2OWNjYTJjODZlMTk0NzU0Nzg4ZWRjZDg4ZTM1MmVk
NGUxMWMwHhcNMjYwNzIzMjMwMDMzWhcNMjYwNzI0MjMwMDMzWjAzMTEwLwYDVQQD
EygzNTNlNDVmMzM3ZmZiYWNlODMyNDNjNDgwZDkzMTYyMTk4Yzc0MmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze+qSegIdgUzEGq9h6Mvf8NGFnra
Y+LAbgSOQMPqTSrXi5sGND0z0cqLzc+4CPIgI602w4KxdIv/xJmtWl6S0eRbZ79I
PlHW5pBosyqnfYu7DfTbbnv4jJs3f5B3GJ/u/oeNit7gG2fP+PPqbP1C8pzVgOCF
tnhO13TzVeQ0452Xw75C3a4O/mE7vBE8maewt4yvg0Q+JovJ1+D/Y+inMdHuNLYE
WHh8M3ViQvFOjhOitWcp4Lp0heK6L8zb3jERg+ghpTPQA2N7ktfrH/7rZbr8p8fs
yRgcagnCkpBlScSGfbpKX+HQ5PhWRJhdGu+1CqUjV620cw4nSRIZzS1fewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDU+RfM3/7rOgyQ8SA2TFiGYx0LmMB8GA1UdIwQY
MBaAFEDPacyiyG4ZR1R4jtzYjjUu1OEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQt
Y2YxYTVkOGU1ZjZkLzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQtY2YxYTVkOGU1ZjZk
LzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMxEz+As
QDOHytnk/B8DX6qlXmsmkxUzIuUyKx9lCWMqEYUBIJqKhBbjUnTz5M8i6PP7WKum
i1A7R5hqTsc3mPugIFYyO+29rQko8aCl/WfyRWuQG0y0LuxcCAE0zTtnhH5CI79r
ZbWVfSF8/WRm0G0AB8FLu5FgtJBzplysLwEYGDt++bj5ViQBB97wcG8s1/O7MieM
hMRvjaMs2Oh6sqOjWKQ6IGp9b+O/oF5ltHOkK7IBdqedzib5VOzizsh1W05sOHEO
pNtgScDsG90cAjJcQqu+J7KGqGynVfQAg3JNxxmoKKOaMh1awdt2o6XGur2lPPJO
aYkPsUpLc21euQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:32 2026 by rpki-client