Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: Vvgt3ab6f8yffny/Qd1lo5Or5QCibR4BZ5j1vT3uXUA=
Subject key identifier: 96:F2:18:37:D7:B2:5C:95:12:31:1F:D7:AB:FF:FA:CD:B6:0C:0D:BC
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 01A11C3E78636D160ED04BA08DA333557F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 17D0
Signing time: Thu 08 Oct 2026 16:00:18 +0000
Manifest this update: Thu 08 Oct 2026 16:00:18 +0000
Manifest next update: Fri 09 Oct 2026 16:00:18 +0000
Files and hashes: 1: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: VZE5KeUnAO2LChrJpOyU+K7pVrCwj/455cNwJS97yDs=)
2: SsfnBHuvPDESg4pTMTaqtv9nT-Q.roa (hash: ZrITCydyp3ig8q1pUL+0pHbv4soXKIcGIYDQm4wHpvo=)
3: c-KZaw3UumwWkGCg1_3weGS8B-U.roa (hash: 2AcxA0Jqp/dgXDEXPcxhpKLcjp+xB4KSRrsphLc65kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:3e:78:63:6d:16:0e:d0:4b:a0:8d:a3:33:55:7f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Oct 8 16:00:18 2026 GMT
Not After : Oct 9 16:00:18 2026 GMT
Subject: CN=96f21837d7b25c9512311fd7abfffacdb60c0dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9b:77:c3:08:00:24:28:6f:ca:36:4d:59:f8:
6d:50:80:0f:08:a7:bf:22:21:bc:5c:7e:cc:45:c4:
fa:d7:e8:05:aa:2a:18:dd:38:cb:da:4f:07:04:3f:
d7:6b:b1:d9:4c:49:71:33:c6:e2:69:f5:2e:24:72:
1f:89:a4:7b:1c:8b:6c:17:34:59:0a:0b:8d:11:ea:
fd:cc:b4:66:ad:f6:ca:2e:ba:1c:f8:a7:c2:c6:65:
15:41:2a:ce:09:04:e9:60:80:03:bf:25:0b:d1:62:
68:62:ee:fa:df:98:d9:3d:52:0b:1d:7e:2c:c5:68:
a9:35:4a:e9:63:7c:74:1d:97:a1:73:ad:eb:9b:77:
14:14:09:27:0d:ff:2c:ec:27:22:48:24:d5:50:24:
76:cc:fb:04:db:ff:8d:59:6f:c1:23:f1:d9:df:5f:
37:24:dd:11:e3:8c:08:fc:94:f6:74:59:a0:db:48:
bd:56:fc:0e:14:34:9f:f0:47:b8:12:67:73:19:12:
ee:8e:3c:48:bb:d1:3d:7d:45:3d:0e:8b:6f:51:9b:
ee:78:49:c0:11:57:ff:0d:9d:45:da:80:99:37:07:
e6:27:2b:dc:4d:5c:3e:09:16:46:80:f4:a9:e1:31:
32:55:1b:00:88:f2:13:a7:4a:5b:8d:36:c2:eb:48:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F2:18:37:D7:B2:5C:95:12:31:1F:D7:AB:FF:FA:CD:B6:0C:0D:BC
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:bf:4e:90:76:9b:11:91:40:89:f4:f1:a7:08:85:59:3c:64:
39:4c:94:79:a2:e5:2e:06:71:48:57:a2:dc:00:93:96:7f:46:
ff:84:72:8a:ee:a6:81:c2:64:09:97:b8:4b:56:b1:10:19:af:
38:02:77:ab:0b:a0:cd:85:30:d3:82:e0:8a:d4:0e:7d:18:40:
8c:d7:cf:c2:ed:09:69:20:fe:c2:4a:13:65:98:c5:b7:45:2a:
90:c3:0e:87:d0:16:57:6f:d7:1e:ec:fb:28:4d:33:44:52:b5:
84:24:a8:c1:35:37:68:fd:d3:b6:f9:87:34:d4:fe:c2:29:b3:
d4:a8:f0:c8:de:ad:c1:af:dc:60:4d:3f:09:bd:28:75:6d:4d:
29:52:cb:16:3b:eb:c9:68:50:d0:eb:32:0c:81:2a:ac:8e:99:
57:21:6e:2e:9b:72:0f:62:e0:bf:92:cb:e9:50:1c:be:f8:8a:
31:a7:30:69:74:2e:c0:a7:c3:b9:10:b5:b2:30:2b:16:2b:87:
f6:91:25:64:f1:57:18:50:3e:82:22:23:ab:ee:ad:6c:76:f5:
27:2c:ec:c8:d0:46:d7:a5:74:8c:0c:99:0d:df:aa:7b:a7:c5:
bb:38:2b:af:3b:27:14:1c:6a:99:3e:e5:7a:23:6f:52:02:35:
55:ca:52:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEcPnhjbRYO0EugjaMzVX8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNTEyNTYxZmM0ZWU1NGI3OTljNWFmNDI4ZmZmYmNiYWZk
NDU0ZWYwHhcNMjYxMDA4MTYwMDE4WhcNMjYxMDA5MTYwMDE4WjAzMTEwLwYDVQQD
Eyg5NmYyMTgzN2Q3YjI1Yzk1MTIzMTFmZDdhYmZmZmFjZGI2MGMwZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Zt3wwgAJChvyjZNWfhtUIAPCKe/
IiG8XH7MRcT61+gFqioY3TjL2k8HBD/Xa7HZTElxM8biafUuJHIfiaR7HItsFzRZ
CguNEer9zLRmrfbKLroc+KfCxmUVQSrOCQTpYIADvyUL0WJoYu7635jZPVILHX4s
xWipNUrpY3x0HZehc63rm3cUFAknDf8s7CciSCTVUCR2zPsE2/+NWW/BI/HZ3183
JN0R44wI/JT2dFmg20i9VvwOFDSf8Ee4EmdzGRLujjxIu9E9fUU9DotvUZvueEnA
EVf/DZ1F2oCZNwfmJyvcTVw+CRZGgPSp4TEyVRsAiPITp0pbjTbC60iD7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJbyGDfXslyVEjEf16v/+s22DA28MB8GA1UdIwQY
MBaAFEJRJWH8TuVLeZxa9Cj/+8uv1FTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUt
N2E3MmUyNmM4OTE4LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9iODhjODYtOTYyOS00M2M2LTgyMWUtN2E3MmUyNmM4OTE4
LzEvUWxFbFlmeE81VXQ1bkZyMEtQXzd5Nl9VVk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ79OkHab
EZFAifTxpwiFWTxkOUyUeaLlLgZxSFei3ACTln9G/4Ryiu6mgcJkCZe4S1axEBmv
OAJ3qwugzYUw04LgitQOfRhAjNfPwu0JaSD+wkoTZZjFt0UqkMMOh9AWV2/XHuz7
KE0zRFK1hCSowTU3aP3TtvmHNNT+wimz1KjwyN6twa/cYE0/Cb0odW1NKVLLFjvr
yWhQ0OsyDIEqrI6ZVyFuLptyD2Lgv5LL6VAcvviKMacwaXQuwKfDuRC1sjArFiuH
9pElZPFXGFA+giIjq+6tbHb1JyzsyNBG16V0jAyZDd+qe6fFuzgrrzsnFBxqmT7l
eiNvUgI1VcpSug==
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:53:42 2026 by rpki-client