Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
File: QMyB_4LO1hrvhHas56DoGLuuj8Q.mft (raw, json)
Hash identifier: C7ltiv2HY5eaAzpsYnjgjjYTiThahjcBoW9cfQQmfZw=
Subject key identifier: 8F:05:F0:22:EA:4F:13:48:DB:BE:7D:AD:78:AE:15:EF:68:26:2E:4A
Authority key identifier: 40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
Certificate issuer: /CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Certificate serial: 019F92ED008031EA7F3991C99094D6D73E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
Manifest number: 1042
Signing time: Fri 24 Jul 2026 07:00:33 +0000
Manifest this update: Fri 24 Jul 2026 07:00:33 +0000
Manifest next update: Sat 25 Jul 2026 07:00:33 +0000
Files and hashes: 1: 3kLb2SclnRZ3nd2D3Q0PJ_hFvoA.roa (hash: 6pxbFnk+ektQu+gyRYaAFu/ZHeh+7fJhw5N9t7HsTNc=)
2: QMyB_4LO1hrvhHas56DoGLuuj8Q.crl (hash: XI54Pm/JthA2kiW1wkGxkZsxJd9gHS1I8gKQOVUNSWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:00:80:31:ea:7f:39:91:c9:90:94:d6:d7:3e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cc81ff82ced61aef8476ace7a0e818bbae8fc4
Validity
Not Before: Jul 24 07:00:33 2026 GMT
Not After : Jul 25 07:00:33 2026 GMT
Subject: CN=8f05f022ea4f1348dbbe7dad78ae15ef68262e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:6d:8c:f0:2a:48:59:ea:b9:b5:74:ed:b3:
39:f8:86:94:25:66:15:04:3d:1b:13:f5:8d:1c:4f:
9a:f8:82:75:c0:92:6f:1f:77:2f:85:3e:35:b4:8c:
9f:d8:c9:10:5a:90:b6:d1:b9:7f:b2:76:99:26:38:
22:95:40:06:97:d8:f4:81:da:11:08:62:88:b4:a5:
84:b1:fc:fb:8d:d6:4c:8d:80:ef:15:f9:ff:d6:d7:
8b:7a:d4:fa:ca:a0:b3:bb:af:99:88:57:7a:d4:30:
25:2b:29:de:6b:d0:b2:fb:c7:05:c9:16:87:b9:72:
86:62:6d:d6:56:67:3d:8d:42:a8:31:69:17:ec:77:
33:d9:23:20:c5:0b:be:60:69:3f:8e:71:73:96:4e:
75:d5:74:0c:2d:0f:a8:11:ed:7f:78:fd:f5:f4:0f:
f4:e7:15:e5:b3:b1:9a:59:03:0a:71:5f:22:6d:3e:
c5:13:6f:62:4f:b9:36:90:9f:54:cc:f6:33:77:a5:
6b:99:e7:50:a7:df:19:ae:c1:6a:70:15:77:75:e0:
95:34:a7:c5:2b:63:92:82:aa:64:c1:21:61:a0:cc:
97:6b:7e:b8:58:0b:b7:49:00:20:c3:39:61:35:d0:
6c:81:84:75:d0:85:e1:fd:76:45:1b:3c:68:e5:22:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:05:F0:22:EA:4F:13:48:DB:BE:7D:AD:78:AE:15:EF:68:26:2E:4A
X509v3 Authority Key Identifier:
keyid:40:CC:81:FF:82:CE:D6:1A:EF:84:76:AC:E7:A0:E8:18:BB:AE:8F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMyB_4LO1hrvhHas56DoGLuuj8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8e1f53-b674-40e8-8bb8-db5d89e8a17c/1/QMyB_4LO1hrvhHas56DoGLuuj8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e8:03:04:fb:86:31:21:d4:44:1d:db:44:3f:21:1c:1e:91:
34:a4:59:10:94:17:a1:55:a9:b5:25:be:14:aa:ba:4e:c2:17:
c7:31:7e:56:0d:86:99:e4:8d:30:0c:e8:ab:91:d8:31:d7:85:
49:e3:2e:e4:5d:23:ab:b2:16:bb:93:a7:83:0e:7e:ac:fc:4a:
d7:a2:38:cd:70:4f:ca:be:4d:d6:d9:11:d9:df:41:44:d9:d5:
42:48:83:89:c3:7a:97:4e:42:b5:cb:f2:b8:26:a9:fa:c8:24:
a8:4e:f3:4a:29:56:7c:7c:22:32:2d:8c:3b:08:b0:af:00:5d:
94:55:cd:2d:7a:a1:60:23:49:53:d0:d7:80:2c:d7:dd:cf:c7:
10:be:0c:4f:09:89:57:6e:80:ab:1d:5e:32:7b:b8:d9:be:e3:
48:65:c9:3e:7d:07:fc:e0:16:b8:52:3f:b1:39:73:bd:0d:05:
f3:1b:ce:56:e4:a1:31:f7:9c:ba:ad:32:41:82:6f:20:a7:28:
7d:f0:23:94:0c:be:7d:f0:6b:b5:41:c9:46:27:cd:28:db:79:
89:70:04:1d:40:1c:55:f4:e5:fd:67:04:0a:fc:36:e9:f5:e1:
af:cf:a3:c6:29:f2:35:5b:4c:21:3c:4a:a5:5e:71:1d:2f:6c:
2f:9d:56:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7QCAMep/OZHJkJTW1z5DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwY2M4MWZmODJjZWQ2MWFlZjg0NzZhY2U3YTBlODE4YmJh
ZThmYzQwHhcNMjYwNzI0MDcwMDMzWhcNMjYwNzI1MDcwMDMzWjAzMTEwLwYDVQQD
Eyg4ZjA1ZjAyMmVhNGYxMzQ4ZGJiZTdkYWQ3OGFlMTVlZjY4MjYyZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nptjPAqSFnqubV07bM5+IaUJWYV
BD0bE/WNHE+a+IJ1wJJvH3cvhT41tIyf2MkQWpC20bl/snaZJjgilUAGl9j0gdoR
CGKItKWEsfz7jdZMjYDvFfn/1teLetT6yqCzu6+ZiFd61DAlKynea9Cy+8cFyRaH
uXKGYm3WVmc9jUKoMWkX7Hcz2SMgxQu+YGk/jnFzlk511XQMLQ+oEe1/eP319A/0
5xXls7GaWQMKcV8ibT7FE29iT7k2kJ9UzPYzd6VrmedQp98ZrsFqcBV3deCVNKfF
K2OSgqpkwSFhoMyXa364WAu3SQAgwzlhNdBsgYR10IXh/XZFGzxo5SJZQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI8F8CLqTxNI2759rXiuFe9oJi5KMB8GA1UdIwQY
MBaAFEDMgf+CztYa74R2rOeg6Bi7ro/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU15Ql80TE8xaHJ2aEhhczU2RG9HTHV1ajhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZTFmNTMtYjY3NC00MGU4LThiYjgt
ZGI1ZDg5ZThhMTdjLzEvUU15Ql80TE8xaHJ2aEhhczU2RG9HTHV1ajhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84ZTFmNTMtYjY3NC00MGU4LThiYjgtZGI1ZDg5ZThhMTdj
LzEvUU15Ql80TE8xaHJ2aEhhczU2RG9HTHV1ajhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjugDBPuG
MSHURB3bRD8hHB6RNKRZEJQXoVWptSW+FKq6TsIXxzF+Vg2GmeSNMAzoq5HYMdeF
SeMu5F0jq7IWu5Ongw5+rPxK16I4zXBPyr5N1tkR2d9BRNnVQkiDicN6l05Ctcvy
uCap+sgkqE7zSilWfHwiMi2MOwiwrwBdlFXNLXqhYCNJU9DXgCzX3c/HEL4MTwmJ
V26Aqx1eMnu42b7jSGXJPn0H/OAWuFI/sTlzvQ0F8xvOVuShMfecuq0yQYJvIKco
ffAjlAy+ffBrtUHJRifNKNt5iXAEHUAcVfTl/WcECvw26fXhr8+jxinyNVtMITxK
pV5xHS9sL51Wzg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:52:41 2026 by rpki-client