Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier: iJV6CMAvHFRqUjvlBhymc1Zpo2ysE1eHiDp5tytgvIE=
Subject key identifier: 01:5D:33:EF:41:35:0E:12:A1:38:DF:4A:48:1C:66:AB:09:82:A7:28
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 01A1DC4B73571C6F2E8743109F4273069F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number: 1114
Signing time: Sat 14 Nov 2026 23:01:34 +0000
Manifest this update: Sat 14 Nov 2026 23:01:34 +0000
Manifest next update: Sun 15 Nov 2026 23:01:34 +0000
Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: Dxf3aSWhwnVmJ8TyOSfyoyZpH2d9BBSzW7bWiDVIrFs=)
2: yaEEybz2NfCWEApyu2Dzx2yLpcI.roa (hash: j2pzI49xHsyv/Ol3MBefWz6almNV2xHEmt1n4qjR/Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:4b:73:57:1c:6f:2e:87:43:10:9f:42:73:06:9f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Nov 14 23:01:34 2026 GMT
Not After : Nov 15 23:01:34 2026 GMT
Subject: CN=015d33ef41350e12a138df4a481c66ab0982a728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:13:4c:61:d1:88:69:32:b9:7d:28:b4:30:
76:59:ff:b0:f0:24:2f:f5:c7:ba:04:b7:06:2d:4b:
ed:51:98:ae:15:34:84:57:8a:0b:a8:81:e0:76:34:
42:04:df:4e:5f:31:51:ec:c3:9c:78:12:5e:d4:80:
cf:68:37:6a:5c:18:cb:11:e7:ea:35:38:78:9d:d4:
52:08:0d:55:18:ab:3d:f8:79:5c:75:2b:d4:d2:0c:
3e:92:fa:ca:bd:45:bd:ba:96:76:dd:85:74:05:00:
f5:88:23:ed:21:95:ae:3d:17:3a:0a:19:ea:cb:db:
3b:80:df:10:4f:f1:f7:70:2c:10:87:f2:10:85:59:
e3:1c:1b:7f:f1:eb:bb:74:c3:87:91:7c:9a:b9:ba:
15:b9:ce:f3:2a:4a:d4:2c:97:a7:40:ce:fa:0a:0b:
52:e5:f9:dc:5f:b7:af:03:c3:b4:03:92:c9:f3:69:
f9:8e:9a:8a:82:c1:66:da:8d:ac:d8:d4:c3:dd:b8:
9a:fb:4e:f9:77:a3:52:b7:bc:ff:4a:3a:b4:32:db:
79:39:04:47:e9:5d:5e:f2:dd:11:2a:bf:e1:3b:6e:
21:e4:63:91:c7:7f:83:7f:cf:b7:a3:49:4f:41:85:
02:e0:23:8b:01:2f:4a:bd:66:05:a2:c1:9a:b7:d6:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5D:33:EF:41:35:0E:12:A1:38:DF:4A:48:1C:66:AB:09:82:A7:28
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c5:07:54:7e:f2:94:85:7a:6e:38:cc:df:c6:28:10:3d:09:
17:63:ec:70:6c:39:05:e2:c0:46:b1:35:90:8e:6d:3b:5b:01:
7f:fe:ab:4f:6c:bf:b6:0b:ff:f7:71:be:fa:98:92:6b:e4:8e:
13:ff:d9:bd:5c:92:9d:4e:b7:9f:57:83:3a:db:c4:01:35:b6:
7d:ec:45:ea:40:26:2d:e4:cd:f0:72:2c:c4:83:94:2f:02:97:
9a:32:82:4d:50:c0:62:4c:bc:83:0f:9c:8b:ba:34:b9:86:5a:
9e:23:86:4e:3e:25:ea:a1:be:9c:e2:3a:48:12:72:be:4c:a8:
76:46:1c:8a:08:66:7a:58:9f:16:b3:2d:06:b6:9b:a7:07:d4:
70:e6:f9:85:fc:79:8e:9e:71:84:67:32:ee:0e:95:ab:99:17:
cb:29:19:69:be:44:ee:1b:cd:88:f3:6e:27:60:7c:4e:7b:12:
25:e2:34:d8:f7:96:80:b5:23:cd:28:66:c7:54:a8:ac:df:3d:
85:c3:08:56:d8:8a:ec:b2:75:90:24:51:72:59:8d:a9:27:58:
38:e0:d2:61:44:fe:dc:40:8e:b7:72:49:0f:1b:05:c9:e4:25:
51:de:6e:08:0c:9d:8c:9f:f7:01:b2:f9:aa:47:9c:fc:18:35:
94:95:6f:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcS3NXHG8uh0MQn0JzBp9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2Y2OWNjYTJjODZlMTk0NzU0Nzg4ZWRjZDg4ZTM1MmVk
NGUxMWMwHhcNMjYxMTE0MjMwMTM0WhcNMjYxMTE1MjMwMTM0WjAzMTEwLwYDVQQD
EygwMTVkMzNlZjQxMzUwZTEyYTEzOGRmNGE0ODFjNjZhYjA5ODJhNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbcTTGHRiGkyuX0otDB2Wf+w8CQv
9ce6BLcGLUvtUZiuFTSEV4oLqIHgdjRCBN9OXzFR7MOceBJe1IDPaDdqXBjLEefq
NTh4ndRSCA1VGKs9+HlcdSvU0gw+kvrKvUW9upZ23YV0BQD1iCPtIZWuPRc6Chnq
y9s7gN8QT/H3cCwQh/IQhVnjHBt/8eu7dMOHkXyauboVuc7zKkrULJenQM76CgtS
5fncX7evA8O0A5LJ82n5jpqKgsFm2o2s2NTD3bia+075d6NSt7z/Sjq0Mtt5OQRH
6V1e8t0RKr/hO24h5GORx3+Df8+3o0lPQYUC4COLAS9KvWYFosGat9YNvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFdM+9BNQ4SoTjfSkgcZqsJgqcoMB8GA1UdIwQY
MBaAFEDPacyiyG4ZR1R4jtzYjjUu1OEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQt
Y2YxYTVkOGU1ZjZkLzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iOGI2MDYtYzY1YS00MDlhLWJhOGQtY2YxYTVkOGU1ZjZk
LzEvUU05cHpLTEliaGxIVkhpTzNOaU9OUzdVNFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAosUHVH7y
lIV6bjjM38YoED0JF2PscGw5BeLARrE1kI5tO1sBf/6rT2y/tgv/93G++piSa+SO
E//ZvVySnU63n1eDOtvEATW2fexF6kAmLeTN8HIsxIOULwKXmjKCTVDAYky8gw+c
i7o0uYZaniOGTj4l6qG+nOI6SBJyvkyodkYcighmelifFrMtBrabpwfUcOb5hfx5
jp5xhGcy7g6Vq5kXyykZab5E7hvNiPNuJ2B8TnsSJeI02PeWgLUjzShmx1SorN89
hcMIVtiK7LJ1kCRRclmNqSdYOODSYUT+3ECOt3JJDxsFyeQlUd5uCAydjJ/3AbL5
qkec/Bg1lJVviQ==
-----END CERTIFICATE-----
Generated at Sun Nov 15 04:28:01 2026 by rpki-client