Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: siCghTLuYsRbGCBq0T+cYHqJw3oWHLtbJWO/1s7UmdE=
Subject key identifier: 78:76:75:52:A5:01:0F:71:DC:BA:D6:7D:64:7A:E9:62:0F:FF:57:46
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 01A0EB53870DD4935B9DA63A98C508EAD36D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 1A7F
Signing time: Tue 29 Sep 2026 04:01:54 +0000
Manifest this update: Tue 29 Sep 2026 04:01:54 +0000
Manifest next update: Wed 30 Sep 2026 04:01:54 +0000
Files and hashes: 1: 38IcWrFWJbqE37FYpFMigdsHVdo.roa (hash: jTZcDNir5nH2T9oJuhPtVnEcZ5OgfBAR2idpIej2Fr4=)
2: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: eNCgXY8AdE6vxxoEHBWUSeyz00d6hhH0jVUeVuwXhYI=)
3: S9un40BglrRD8oUoRwpeEoCPKzQ.roa (hash: 63quj0FUggFB47Cme3ZNE0Mctu62nOnwW9NKWHljeOQ=)
4: nLIrARXN9dPSDCt_sdmjJM0dIgA.roa (hash: g+OtbxwAHIUNiByLd40WQVbq7MwXJk9aaDtEPJLR4Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:87:0d:d4:93:5b:9d:a6:3a:98:c5:08:ea:d3:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Sep 29 04:01:54 2026 GMT
Not After : Sep 30 04:01:54 2026 GMT
Subject: CN=78767552a5010f71dcbad67d647ae9620fff5746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:08:8a:e3:51:44:9e:fc:65:31:a4:87:15:c8:
b0:ef:40:1d:66:fb:ec:1d:82:82:7c:d7:87:81:93:
6e:6a:49:71:71:0d:19:12:35:13:a5:84:9b:9c:3f:
ec:cd:ec:42:fb:5a:9a:a0:df:e3:13:ad:37:cf:73:
b4:06:f4:ec:10:14:be:54:05:9b:43:13:c0:ee:11:
e4:f0:6d:f5:4e:e9:1a:2e:de:07:df:fe:bb:fb:a3:
14:67:62:0e:4a:d8:6e:1f:08:18:c9:9b:07:91:6d:
bf:33:b1:b8:64:73:b8:4d:6e:df:4e:fb:16:97:da:
de:cd:de:9b:50:42:b8:4b:82:40:ee:2f:e4:cf:c4:
89:21:2a:60:2d:10:e6:06:0e:c2:90:03:11:f5:ba:
70:2a:c9:4c:c4:a2:90:fd:fb:8c:f8:b5:e2:34:dd:
d6:a9:54:95:c2:65:42:11:36:7c:f8:62:29:47:91:
25:c2:10:3d:34:9b:94:e7:69:7d:3a:a9:a4:26:37:
30:1c:6c:c3:21:f4:46:67:cc:c5:46:43:5a:0a:0f:
e4:9f:7f:bc:22:99:97:3f:8b:c6:a5:6f:c0:ba:8c:
82:d5:ca:25:f8:4e:ef:68:95:e8:76:a5:30:4a:cd:
8d:80:c0:8b:e2:df:3f:7b:77:54:0f:45:8e:7b:33:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:75:52:A5:01:0F:71:DC:BA:D6:7D:64:7A:E9:62:0F:FF:57:46
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:82:d6:ee:c1:39:bf:27:5d:69:f2:c8:e8:62:60:e5:96:a5:
6b:85:72:70:16:ab:68:00:25:ab:73:c3:1c:b7:95:ee:82:8d:
54:02:c8:3b:75:99:39:e0:b0:d9:29:3d:13:43:54:3c:e1:92:
e8:1a:af:4a:46:80:88:b7:a9:56:ce:38:8f:93:d8:ce:98:3a:
ee:d1:36:60:96:47:fc:c7:fe:08:e0:62:d8:f1:8b:88:79:2c:
13:35:8a:37:cc:2e:c7:4a:e4:74:fd:28:5f:a5:77:61:61:86:
60:c4:d0:07:90:51:34:77:8f:02:7b:2f:52:1f:a4:a5:04:a2:
31:b6:27:65:ac:6b:4b:3e:b5:32:e0:a9:1f:73:63:66:b6:6e:
08:7f:ed:8b:50:04:03:cb:34:db:e2:4c:2a:fd:68:b8:46:96:
9b:45:a5:6b:dd:22:25:07:0a:cf:e4:75:f8:db:61:8c:f6:97:
ec:1b:d3:c4:f9:55:f6:6b:16:fc:0e:b9:8b:e7:6a:18:1a:46:
11:c6:cc:d9:f9:eb:fa:2b:0c:fc:69:89:22:65:8c:1d:02:9e:
f8:b7:54:a8:f6:a3:8a:53:49:1b:43:92:f6:bd:c8:05:7d:92:
08:2a:f5:3f:90:76:d9:e7:8d:19:14:67:1d:e5:4a:98:b6:c7:
3f:e8:95:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrU4cN1JNbnaY6mMUI6tNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmI2YjE3MDgzMzUwMDZiMGE2YWFjNjUwYmZhZmYzZmM4
ZDI5MmMwHhcNMjYwOTI5MDQwMTU0WhcNMjYwOTMwMDQwMTU0WjAzMTEwLwYDVQQD
Eyg3ODc2NzU1MmE1MDEwZjcxZGNiYWQ2N2Q2NDdhZTk2MjBmZmY1NzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgiK41FEnvxlMaSHFciw70AdZvvs
HYKCfNeHgZNuaklxcQ0ZEjUTpYSbnD/szexC+1qaoN/jE603z3O0BvTsEBS+VAWb
QxPA7hHk8G31TukaLt4H3/67+6MUZ2IOSthuHwgYyZsHkW2/M7G4ZHO4TW7fTvsW
l9rezd6bUEK4S4JA7i/kz8SJISpgLRDmBg7CkAMR9bpwKslMxKKQ/fuM+LXiNN3W
qVSVwmVCETZ8+GIpR5ElwhA9NJuU52l9OqmkJjcwHGzDIfRGZ8zFRkNaCg/kn3+8
IpmXP4vGpW/AuoyC1col+E7vaJXodqUwSs2NgMCL4t8/e3dUD0WOezM4yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHh2dVKlAQ9x3LrWfWR66WIP/1dGMB8GA1UdIwQY
MBaAFEH7axcIM1AGsKaqxlC/r/P8jSksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMt
MDRjODJlZDZlZDRjLzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jNzcxYzMtY2E5MC00ZmQyLTk5YWMtMDRjODJlZDZlZDRj
LzEvUWZ0ckZ3Z3pVQWF3cHFyR1VMLXY4X3lOS1N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYILW7sE5
vyddafLI6GJg5Zala4VycBaraAAlq3PDHLeV7oKNVALIO3WZOeCw2Sk9E0NUPOGS
6BqvSkaAiLepVs44j5PYzpg67tE2YJZH/Mf+COBi2PGLiHksEzWKN8wux0rkdP0o
X6V3YWGGYMTQB5BRNHePAnsvUh+kpQSiMbYnZaxrSz61MuCpH3NjZrZuCH/ti1AE
A8s02+JMKv1ouEaWm0Wla90iJQcKz+R1+NthjPaX7BvTxPlV9msW/A65i+dqGBpG
EcbM2fnr+isM/GmJImWMHQKe+LdUqPajilNJG0OS9r3IBX2SCCr1P5B22eeNGRRn
HeVKmLbHP+iVuA==
-----END CERTIFICATE-----
Generated at Tue Sep 29 12:36:16 2026 by rpki-client