Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: iHOMJhWwRBalL09RmGGm3IWM2BjidK6YsfoPGFmRhfU=
Subject key identifier: E7:6E:E4:95:BD:F6:8E:59:DC:93:99:5F:23:D0:7A:37:5C:16:ED:BA
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 01A1366D24ABE8F1A7E96407F18C4D9373DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 1AA1
Signing time: Tue 13 Oct 2026 18:01:24 +0000
Manifest this update: Tue 13 Oct 2026 18:01:24 +0000
Manifest next update: Wed 14 Oct 2026 18:01:24 +0000
Files and hashes: 1: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: YTtBReILVjamJzTUL5Km05q1pX4ZRvl+b5aJd5+DD08=)
2: muJold8C5TUMixIVaL6rH1BS38A.roa (hash: FbxuoRz2634QOjJkP7NzNJtkodYJ1wTVSJlQ4uQWs58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:6d:24:ab:e8:f1:a7:e9:64:07:f1:8c:4d:93:73:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Oct 13 18:01:24 2026 GMT
Not After : Oct 14 18:01:24 2026 GMT
Subject: CN=e76ee495bdf68e59dc93995f23d07a375c16edba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bf:42:72:b4:18:b9:4f:a3:21:0f:53:b7:84:
38:c8:d3:f3:fd:49:71:50:36:27:4e:41:59:ed:9a:
55:eb:cf:98:33:93:89:24:ae:a4:9c:7c:90:d9:05:
b1:33:6e:de:3e:0f:6a:21:b3:97:74:3d:3b:08:2d:
35:a6:2b:00:0e:42:c1:d0:8c:9f:06:e6:84:0d:d8:
9b:a9:da:48:6e:ac:42:07:fd:ce:38:53:71:15:6e:
24:ad:db:34:03:e2:f3:90:da:60:8c:5c:20:2b:24:
6d:22:fb:ca:df:5e:0c:de:34:f1:0e:5a:d1:90:53:
0c:25:e2:70:32:23:5f:7b:c5:18:99:82:6c:4d:28:
1b:3c:3b:38:ab:50:d7:34:4e:41:d8:5e:31:88:a9:
6b:c7:a8:30:ec:b0:a5:eb:7c:93:e3:10:bc:7d:aa:
06:37:d0:33:c9:e2:46:88:da:7e:8f:a9:26:e7:3c:
f5:bb:3f:9c:ed:31:62:ed:11:02:2e:01:c9:56:c0:
d2:57:36:a6:c1:84:6a:df:de:5a:7e:fc:17:81:b1:
c6:7d:84:d7:5a:2a:00:d6:c1:d0:0a:9b:65:71:f7:
92:d7:92:e1:2f:34:2b:4d:9a:d0:2e:c7:2d:ec:16:
55:b3:9c:e1:09:96:cb:a2:3b:4a:d3:b7:ce:8d:00:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6E:E4:95:BD:F6:8E:59:DC:93:99:5F:23:D0:7A:37:5C:16:ED:BA
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fd:2e:53:71:bd:48:6d:a8:2f:e8:fe:1d:03:03:b0:50:4e:
e7:53:84:41:7c:24:1e:58:b1:87:e4:53:a9:fb:bf:36:5e:7d:
48:59:4b:4d:7b:96:4a:53:9b:1d:79:09:09:de:8d:8c:93:13:
55:b9:38:0a:59:c2:54:bc:f4:0f:7b:d4:94:ad:1a:96:35:08:
cf:72:ff:f0:76:cb:24:29:4b:e3:c6:1d:82:a5:ba:30:59:c1:
60:bc:c3:b2:cc:81:4d:88:dd:01:80:6c:ef:42:76:f3:70:2a:
87:b4:2a:df:fc:73:3f:af:13:ea:e9:f9:28:77:fd:8b:fc:40:
f1:2b:13:11:0f:89:70:a1:ed:63:c5:3f:0a:f2:62:89:12:01:
2b:2d:7e:47:fb:4a:14:ad:b5:14:3c:5c:dc:f1:b7:f8:53:53:
e3:6d:23:43:31:0b:69:42:6d:3e:48:f7:94:22:e4:bb:0f:e5:
4e:e7:e0:bf:83:5d:56:50:73:5b:6e:98:50:e5:88:7a:ce:42:
5e:53:0f:2c:4e:7b:71:f0:4c:71:a5:44:99:48:22:45:ca:31:
50:22:da:ef:03:d3:73:07:a2:85:6f:94:fa:93:64:0d:46:b8:
b5:df:8c:6a:7f:1b:9f:6b:38:0e:95:5d:00:61:45:bd:66:85:
cc:3d:d7:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE2bSSr6PGn6WQH8YxNk3PeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTQyZDgzMGVjYTk4YTUzM2Y0MzcyZGExNjljOWM3OTJj
MzkzYjIwHhcNMjYxMDEzMTgwMTI0WhcNMjYxMDE0MTgwMTI0WjAzMTEwLwYDVQQD
EyhlNzZlZTQ5NWJkZjY4ZTU5ZGM5Mzk5NWYyM2QwN2EzNzVjMTZlZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw79CcrQYuU+jIQ9Tt4Q4yNPz/Ulx
UDYnTkFZ7ZpV68+YM5OJJK6knHyQ2QWxM27ePg9qIbOXdD07CC01pisADkLB0Iyf
BuaEDdibqdpIbqxCB/3OOFNxFW4krds0A+LzkNpgjFwgKyRtIvvK314M3jTxDlrR
kFMMJeJwMiNfe8UYmYJsTSgbPDs4q1DXNE5B2F4xiKlrx6gw7LCl63yT4xC8faoG
N9AzyeJGiNp+j6km5zz1uz+c7TFi7RECLgHJVsDSVzamwYRq395afvwXgbHGfYTX
WioA1sHQCptlcfeS15LhLzQrTZrQLsct7BZVs5zhCZbLojtK07fOjQATewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdu5JW99o5Z3JOZXyPQejdcFu26MB8GA1UdIwQY
MBaAFEHkLYMOypilM/Q3LaFpyceSw5OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMt
MWFkNjFlZGUwYTRhLzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC80OTU2ZGYtOTFkYy00NDkwLTgzMzMtMWFkNjFlZGUwYTRh
LzEvUWVRdGd3N0ttS1V6OURjdG9Xbkp4NUxEazdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/0uU3G9
SG2oL+j+HQMDsFBO51OEQXwkHlixh+RTqfu/Nl59SFlLTXuWSlObHXkJCd6NjJMT
Vbk4ClnCVLz0D3vUlK0aljUIz3L/8HbLJClL48YdgqW6MFnBYLzDssyBTYjdAYBs
70J283Aqh7Qq3/xzP68T6un5KHf9i/xA8SsTEQ+JcKHtY8U/CvJiiRIBKy1+R/tK
FK21FDxc3PG3+FNT420jQzELaUJtPkj3lCLkuw/lTufgv4NdVlBzW26YUOWIes5C
XlMPLE57cfBMcaVEmUgiRcoxUCLa7wPTcweihW+U+pNkDUa4td+Man8bn2s4DpVd
AGFFvWaFzD3XiQ==
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:53:07 2026 by rpki-client