
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: XsiB24yxUkvs6KRXwppyo/Unz2QrUtSXLRtC2POHzJ4=
Subject key identifier: E9:1A:C0:03:48:BF:4F:71:31:85:7E:4C:13:FF:60:90:82:17:E3:7B
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 01A0F644C77C5198172D195FE0E540AAFD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 0A8D
Signing time: Thu 01 Oct 2026 07:01:37 +0000
Manifest this update: Thu 01 Oct 2026 07:01:37 +0000
Manifest next update: Fri 02 Oct 2026 07:01:37 +0000
Files and hashes: 1: D-OhIFYDtU_Cd-e4wB1EEbfz2ZY.roa (hash: NEAvke3XuRiHlogwVc4RcyWVQUznukeff4gqiKDQn+U=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: WOJAurhywwBlrZesXSXSgcHoOzAshIbEfvMtTbsHcrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:44:c7:7c:51:98:17:2d:19:5f:e0:e5:40:aa:fd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: Oct 1 07:01:37 2026 GMT
Not After : Oct 2 07:01:37 2026 GMT
Subject: CN=e91ac00348bf4f7131857e4c13ff60908217e37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:1f:65:67:3e:bf:55:e9:21:84:de:1e:17:
81:e2:ec:c1:ef:af:78:99:c3:64:07:8a:e0:b7:a3:
f5:a6:6c:00:92:0e:d4:4f:a5:09:a1:d7:3b:2d:0e:
9e:5d:0d:93:99:a2:2b:95:dc:41:6e:28:a2:52:1a:
77:fb:c7:5d:98:3c:a6:97:c0:75:f8:93:a8:71:98:
a4:82:24:f1:8e:1c:ee:16:f5:54:29:f9:87:65:f8:
cf:bd:b7:0d:d8:3f:c6:6e:e4:fa:90:c9:c5:d2:bd:
3c:15:51:fd:83:4a:6c:cb:14:36:9c:c4:8a:5a:ef:
11:36:8a:76:a6:d6:7d:c9:23:ac:16:e8:31:4c:34:
80:09:f1:c4:ef:39:c9:50:62:0a:b6:77:25:b0:31:
dd:d4:d4:1b:7c:0c:d0:52:8f:9c:69:2c:a2:27:7a:
43:1d:f6:66:9d:d5:ad:f0:ea:cd:01:33:f6:08:19:
31:2e:b3:8a:c6:4b:00:27:67:89:37:f5:76:07:00:
10:06:a8:8a:0d:f4:46:89:55:f2:15:dd:dc:22:64:
2e:62:0a:8c:48:8c:ec:6e:48:4f:17:79:23:af:f2:
cd:b6:e4:50:c3:e4:99:36:1d:2e:32:8c:08:c1:70:
bd:f4:ad:dd:9e:ee:50:23:69:b4:b3:5f:64:8a:0a:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:1A:C0:03:48:BF:4F:71:31:85:7E:4C:13:FF:60:90:82:17:E3:7B
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:67:76:5c:e1:83:7b:48:6f:87:ef:97:c7:c3:8f:bf:76:e6:
4b:ba:22:66:73:14:a2:c0:c1:5c:e0:60:d0:38:19:10:7b:6c:
d4:48:1b:e9:24:0b:bb:a0:0d:d0:bb:c7:38:93:90:44:83:db:
41:23:fe:c8:63:78:6a:0c:be:74:e2:7f:e9:85:37:fc:43:24:
4c:2e:51:55:7f:2d:3e:90:ca:59:4d:ea:1f:f2:81:13:85:06:
6e:de:67:ae:d3:a5:a8:37:80:e9:3a:c0:c8:ab:8e:4c:6d:9b:
c1:a6:97:15:76:52:5a:8f:68:48:5c:5b:93:c1:a6:39:9e:19:
d4:9f:76:ba:23:91:fd:a8:db:73:c9:6b:f2:03:74:9a:43:7b:
13:31:8d:95:47:54:53:52:58:96:a9:94:c7:0d:28:40:7f:15:
7b:f4:7e:0c:fc:1a:a6:62:84:e3:df:06:72:a7:66:6f:b7:0e:
e5:1f:22:a7:87:cb:b6:0f:60:6e:ee:d8:7f:f1:ee:61:96:01:
1d:77:7f:b1:b6:9c:e2:62:39:45:25:c2:28:81:92:61:f4:5f:
3c:5a:03:96:a5:b6:15:ff:11:26:69:a3:17:c8:64:6b:0b:ff:
13:2e:70:21:17:e1:74:83:69:8c:f3:07:f9:77:b0:12:e4:84:
2b:4f:c2:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD2RMd8UZgXLRlf4OVAqv1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNDkxNWNkZDMyMmJmZTM5NDcyNTM2OTU1NDY0YTVmZjY3
MTE3YzMwHhcNMjYxMDAxMDcwMTM3WhcNMjYxMDAyMDcwMTM3WjAzMTEwLwYDVQQD
EyhlOTFhYzAwMzQ4YmY0ZjcxMzE4NTdlNGMxM2ZmNjA5MDgyMTdlMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA0fZWc+v1XpIYTeHheB4uzB7694
mcNkB4rgt6P1pmwAkg7UT6UJodc7LQ6eXQ2TmaIrldxBbiiiUhp3+8ddmDyml8B1
+JOocZikgiTxjhzuFvVUKfmHZfjPvbcN2D/GbuT6kMnF0r08FVH9g0psyxQ2nMSK
Wu8RNop2ptZ9ySOsFugxTDSACfHE7znJUGIKtnclsDHd1NQbfAzQUo+caSyiJ3pD
HfZmndWt8OrNATP2CBkxLrOKxksAJ2eJN/V2BwAQBqiKDfRGiVXyFd3cImQuYgqM
SIzsbkhPF3kjr/LNtuRQw+SZNh0uMowIwXC99K3dnu5QI2m0s19kigoRywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkawANIv09xMYV+TBP/YJCCF+N7MB8GA1UdIwQY
MBaAFEFJFc3TIr/jlHJTaVVGSl/2cRfDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVVrVnpkTWl2LU9VY2xOcFZVWktYX1p4RjhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yODMyMzQtYTUyYS00NTU2LWIzY2It
ZjFkNWNhOTZhN2Q2LzEvUVVrVnpkTWl2LU9VY2xOcFZVWktYX1p4RjhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yODMyMzQtYTUyYS00NTU2LWIzY2ItZjFkNWNhOTZhN2Q2
LzEvUVVrVnpkTWl2LU9VY2xOcFZVWktYX1p4RjhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeGd2XOGD
e0hvh++Xx8OPv3bmS7oiZnMUosDBXOBg0DgZEHts1Egb6SQLu6AN0LvHOJOQRIPb
QSP+yGN4agy+dOJ/6YU3/EMkTC5RVX8tPpDKWU3qH/KBE4UGbt5nrtOlqDeA6TrA
yKuOTG2bwaaXFXZSWo9oSFxbk8GmOZ4Z1J92uiOR/ajbc8lr8gN0mkN7EzGNlUdU
U1JYlqmUxw0oQH8Ve/R+DPwapmKE498Gcqdmb7cO5R8ip4fLtg9gbu7Yf/HuYZYB
HXd/sbac4mI5RSXCKIGSYfRfPFoDlqW2Ff8RJmmjF8hkawv/Ey5wIRfhdINpjPMH
+XewEuSEK0/CwQ==
-----END CERTIFICATE-----
Generated at Thu Oct 1 12:19:05 2026 by rpki-client