Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
File: Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft (raw, json)
Hash identifier: s+R4EL0HddJGOjGb/bZE2EkGTSok6ktJ+QXsb5qfPfs=
Subject key identifier: D0:29:8C:D6:4B:E8:18:72:D9:B1:4F:6B:87:49:55:42:EB:02:F5:86
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 019F95800F24D43611EC2CE6CBF2BDDBCD15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
Manifest number: 0D3D
Signing time: Fri 24 Jul 2026 19:00:25 +0000
Manifest this update: Fri 24 Jul 2026 19:00:25 +0000
Manifest next update: Sat 25 Jul 2026 19:00:25 +0000
Files and hashes: 1: JXLkT6VnIp-SB5I9EMRZOw0DYZI.roa (hash: l3rRARSXe/Kv5HUcutLJRW5ribdNSHw4ggpcG9Mw0ro=)
2: Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl (hash: 0mzpJJqC22iQ3L+GmpfghYuOZ0FGATaNUhiaEPxaZlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:0f:24:d4:36:11:ec:2c:e6:cb:f2:bd:db:cd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Jul 24 19:00:25 2026 GMT
Not After : Jul 25 19:00:25 2026 GMT
Subject: CN=d0298cd64be81872d9b14f6b87495542eb02f586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ba:3b:05:7f:09:6a:a7:f5:1d:89:ce:08:60:
af:d9:5d:d0:a7:69:d8:29:dc:c9:f8:a8:fe:d3:9a:
92:1a:a4:06:df:34:5e:a5:e6:c2:56:cc:b8:eb:58:
f5:21:78:30:f9:fc:8b:7b:84:5a:0f:eb:f5:c1:e7:
2b:6e:cf:b7:e9:f3:2d:33:27:97:1f:b3:f1:ef:68:
c0:91:63:98:6d:5f:05:52:ef:99:0e:df:6f:ce:57:
9a:46:a2:f9:bc:54:e4:0c:8e:5d:45:ac:dd:60:af:
ff:1e:9d:15:9a:27:08:33:18:e8:80:07:43:e2:af:
4a:b8:bf:52:0e:c3:f8:17:40:31:ad:35:a4:a2:f7:
c5:aa:5c:42:42:f2:cf:5f:ac:a8:04:39:82:9a:0c:
9f:4b:43:44:dd:cd:52:f6:16:5d:f6:6d:b3:23:2f:
3d:a0:50:82:54:58:5c:18:23:ff:1d:6c:06:d8:ea:
83:70:cb:2f:40:a5:ac:c2:97:df:c3:37:f6:33:73:
9a:ea:f3:fb:a4:2c:76:f1:cf:96:b6:b3:65:2c:05:
49:65:d2:01:58:29:94:1f:c1:8c:23:eb:86:6e:d2:
2c:32:98:5a:0e:41:8c:48:7a:cc:a0:23:ef:12:3c:
51:95:26:cc:83:bb:04:73:c7:97:54:62:20:1d:18:
1a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:29:8C:D6:4B:E8:18:72:D9:B1:4F:6B:87:49:55:42:EB:02:F5:86
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:02:7b:74:aa:d4:8a:b5:54:90:ad:fc:8a:b5:0b:03:65:ee:
d3:0c:fc:74:4a:9c:4d:84:cd:03:d4:ff:d8:4d:10:22:37:63:
d4:d9:28:a6:2d:46:5e:d9:b9:f2:ad:a4:67:21:f9:88:af:44:
13:a9:e5:04:99:5c:22:a1:cf:22:07:98:4e:e6:95:6a:1a:c2:
dd:21:61:c3:45:55:03:4b:55:a5:35:70:7a:e9:c9:3b:95:df:
13:a9:cc:a0:17:0d:da:7d:61:fe:9a:9e:15:b1:dd:7e:f1:40:
12:76:bb:e7:ee:b3:0f:a6:a7:d8:a8:a0:13:bb:30:28:c5:fc:
ff:c6:fe:fa:1d:28:f0:f7:f1:ea:06:27:e5:d7:95:a2:c9:e4:
dd:72:4a:6e:4a:f5:d6:ba:a3:5f:2d:63:08:ce:91:9b:8c:62:
04:ac:9f:32:c4:11:8c:d1:0f:42:98:e7:4a:2c:1d:99:4d:69:
38:ab:ed:21:cb:2b:cd:3b:ea:eb:e4:74:b8:f2:1b:bf:f1:79:
ca:2a:08:b5:68:2f:90:c0:11:d2:91:92:78:68:5a:6a:b6:66:
e9:3b:c3:36:b3:18:88:ac:18:53:65:62:27:ee:9f:51:fe:4b:
ee:ce:b1:fd:19:65:40:bb:94:79:0a:53:ea:ba:b9:19:ff:b3:
67:26:db:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgA8k1DYR7Czmy/K9280VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNTRhNDE5MjI1ZDVkNzlmNGExYWUxNTIwYTNiMWE1NmQ0
NTI2OGMwHhcNMjYwNzI0MTkwMDI1WhcNMjYwNzI1MTkwMDI1WjAzMTEwLwYDVQQD
EyhkMDI5OGNkNjRiZTgxODcyZDliMTRmNmI4NzQ5NTU0MmViMDJmNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bo7BX8Jaqf1HYnOCGCv2V3Qp2nY
KdzJ+Kj+05qSGqQG3zRepebCVsy461j1IXgw+fyLe4RaD+v1wecrbs+36fMtMyeX
H7Px72jAkWOYbV8FUu+ZDt9vzleaRqL5vFTkDI5dRazdYK//Hp0VmicIMxjogAdD
4q9KuL9SDsP4F0AxrTWkovfFqlxCQvLPX6yoBDmCmgyfS0NE3c1S9hZd9m2zIy89
oFCCVFhcGCP/HWwG2OqDcMsvQKWswpffwzf2M3Oa6vP7pCx28c+WtrNlLAVJZdIB
WCmUH8GMI+uGbtIsMphaDkGMSHrMoCPvEjxRlSbMg7sEc8eXVGIgHRgatQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNApjNZL6Bhy2bFPa4dJVULrAvWGMB8GA1UdIwQY
MBaAFENUpBkiXV159KGuFSCjsaVtRSaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEt
Njg4ZDUxYTQ0NDQ4LzEvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny8wZmRkZjAtOGJiZi00MzUwLWJmZmEtNjg4ZDUxYTQ0NDQ4
LzEvUTFTa0dTSmRYWG4wb2E0VklLT3hwVzFGSm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvQJ7dKrU
irVUkK38irULA2Xu0wz8dEqcTYTNA9T/2E0QIjdj1Nkopi1GXtm58q2kZyH5iK9E
E6nlBJlcIqHPIgeYTuaVahrC3SFhw0VVA0tVpTVweunJO5XfE6nMoBcN2n1h/pqe
FbHdfvFAEna75+6zD6an2KigE7swKMX8/8b++h0o8Pfx6gYn5deVosnk3XJKbkr1
1rqjXy1jCM6Rm4xiBKyfMsQRjNEPQpjnSiwdmU1pOKvtIcsrzTvq6+R0uPIbv/F5
yioItWgvkMAR0pGSeGhaarZm6TvDNrMYiKwYU2ViJ+6fUf5L7s6x/RllQLuUeQpT
6rq5Gf+zZybbxA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:05:57 2026 by rpki-client