Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
File: QWbAb_SeBTSAniNABbqlzKfhRqg.mft (raw, json)
Hash identifier: YH5Kk4ueY+pthVJr9e+cVfC9mAgnbvl2dDkNXYrpCf8=
Subject key identifier: 5F:25:22:5D:88:DB:EE:E7:19:A8:A0:F7:52:FA:F6:46:0B:D6:76:B7
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 01A0D2372411FAE3CFF779A78373A52B47DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
Manifest number: 0589
Signing time: Thu 24 Sep 2026 07:00:23 +0000
Manifest this update: Thu 24 Sep 2026 07:00:23 +0000
Manifest next update: Fri 25 Sep 2026 07:00:23 +0000
Files and hashes: 1: 6dULbh9H71iqjnarDHMNluSVnYE.roa (hash: 1/w2BCsDh2izbOH96sZtfZnAXNLAMLdGJAxrMWHXVZY=)
2: 6fKXSa7fnznp7NE8PH4sDiQyQyo.asa (hash: rIayLgXGwK3y6K7mwVo9kHrQgOm3DGeSouSk4AwPqp8=)
3: OHcGQbUAqdSq6mt4_3eyTZJR1XA.roa (hash: O7C2wF+M5BpxMvsOFLPpquh+G4qmdUXld04pX58Ae9M=)
4: QWbAb_SeBTSAniNABbqlzKfhRqg.crl (hash: niR9469JLiEWXNGBBBQxYkRDgbgOYe9yrR5hl4LVgBo=)
5: hdOOC1IEysAq-Z-Tmv9_lJQDID4.roa (hash: yt1gpylTF5DwEVRgiWOOxqt2J7YwsxusRFsZDCgtRfE=)
6: k1LZ-UFNX-GYC_CbICC5vAyhqGU.roa (hash: WWrThQ244IWu8OYVTPeLpxaxBpbHuCRQtgMgtXzO41g=)
7: kjzLCEj1tYw7sDbLWbp9V6YxOOM.roa (hash: qZYqyURYcynOIWE252O3MtzO4WaOHKWvGwoZG8pxdGk=)
8: nmE-QVU130bdGtH8wB613Krdop8.roa (hash: 2Ar8sXocwIKtDmeO+V7Ysx7hBagKUJGXXEKIvkCyLAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:24:11:fa:e3:cf:f7:79:a7:83:73:a5:2b:47:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Sep 24 07:00:23 2026 GMT
Not After : Sep 25 07:00:23 2026 GMT
Subject: CN=5f25225d88dbeee719a8a0f752faf6460bd676b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5f:b4:cd:dc:74:fa:4d:f1:0e:78:bf:37:ec:
55:07:1c:08:58:9b:14:cd:3e:67:6d:70:a5:c5:f4:
6b:09:76:3b:f1:34:ca:7d:6f:fc:d0:44:61:92:fc:
65:b1:2f:38:97:54:8d:d4:b0:5d:92:5f:0c:9e:04:
65:a2:af:31:4e:fe:46:83:64:99:20:f1:d5:71:28:
87:4b:46:4d:4a:10:57:d3:2a:ed:73:9a:7a:9c:8a:
be:79:c5:1d:f6:93:98:0e:82:e6:00:b9:14:c2:5a:
94:cc:72:0c:e7:a7:48:cb:25:26:a9:21:e9:67:0d:
54:75:47:6c:91:f5:1e:b8:28:49:6e:05:66:2a:19:
a8:8a:22:b3:3c:d2:16:31:28:f1:45:a6:e1:89:ad:
e7:6d:95:51:56:78:1b:19:f5:69:ee:4e:be:dc:db:
d5:b8:d4:f8:80:6f:82:62:02:fc:06:b8:e3:db:2f:
ab:e2:f3:74:33:99:b5:0c:08:45:ae:04:90:1e:b0:
73:b5:e1:80:42:69:c3:e6:d3:fd:c5:30:95:0b:dc:
72:29:77:e7:56:21:da:26:26:37:62:5d:d9:c2:0b:
e7:61:f2:b9:54:f3:a1:3f:f8:03:01:0c:b8:1b:9b:
44:08:6c:55:28:ab:d1:f5:e1:95:48:ae:67:98:ad:
52:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:25:22:5D:88:DB:EE:E7:19:A8:A0:F7:52:FA:F6:46:0B:D6:76:B7
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:f4:14:db:74:c7:be:f9:b3:3c:ca:9e:64:8e:5a:6a:08:2e:
97:a9:73:1e:cb:5f:26:53:c9:7d:49:f3:0a:22:1c:cc:01:97:
7d:82:3d:d3:58:1a:b3:31:9d:e3:05:d7:89:ad:fb:22:81:a4:
1e:5c:2a:92:56:73:38:03:02:76:b6:67:f9:c9:1b:81:1b:d2:
8f:7c:3b:0e:70:7f:7b:16:bb:a5:6c:95:ea:9d:88:da:a4:fa:
f0:72:60:52:9f:78:8b:1d:b3:65:c3:8f:ac:70:85:0b:3b:39:
50:3f:e9:19:6b:39:b6:28:e9:53:64:24:4c:10:fa:c6:b1:6b:
ae:f9:02:17:4d:53:17:b0:e1:1c:85:31:99:df:37:e9:99:70:
49:af:48:0a:b7:42:9f:6f:bd:48:ba:9b:c9:cc:d3:a2:47:10:
6b:19:1e:c5:b6:30:a9:39:ea:42:71:3f:c0:ec:9b:bd:fa:ba:
7e:2f:90:55:5b:04:e0:48:a5:2d:31:46:26:a5:0d:e8:77:84:
59:6a:22:5e:ef:9b:73:b0:79:8d:90:13:51:66:b5:e7:d4:e1:
f7:7b:08:1e:54:a9:96:d3:f0:30:ff:24:23:e7:a1:98:2c:db:
4a:e1:35:7c:2a:7b:6c:57:5e:59:8a:ff:01:91:d6:04:b8:2e:
59:18:cb:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSNyQR+uPP93mng3OlK0ffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl
MTQ2YTgwHhcNMjYwOTI0MDcwMDIzWhcNMjYwOTI1MDcwMDIzWjAzMTEwLwYDVQQD
Eyg1ZjI1MjI1ZDg4ZGJlZWU3MTlhOGEwZjc1MmZhZjY0NjBiZDY3NmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01+0zdx0+k3xDni/N+xVBxwIWJsU
zT5nbXClxfRrCXY78TTKfW/80ERhkvxlsS84l1SN1LBdkl8MngRloq8xTv5Gg2SZ
IPHVcSiHS0ZNShBX0yrtc5p6nIq+ecUd9pOYDoLmALkUwlqUzHIM56dIyyUmqSHp
Zw1UdUdskfUeuChJbgVmKhmoiiKzPNIWMSjxRabhia3nbZVRVngbGfVp7k6+3NvV
uNT4gG+CYgL8Brjj2y+r4vN0M5m1DAhFrgSQHrBzteGAQmnD5tP9xTCVC9xyKXfn
ViHaJiY3Yl3ZwgvnYfK5VPOhP/gDAQy4G5tECGxVKKvR9eGVSK5nmK1SrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8lIl2I2+7nGaig91L69kYL1na3MB8GA1UdIwQY
MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt
ODgyNmU4NzdkMTQzLzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz
LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffQU23TH
vvmzPMqeZI5aaggul6lzHstfJlPJfUnzCiIczAGXfYI901gaszGd4wXXia37IoGk
HlwqklZzOAMCdrZn+ckbgRvSj3w7DnB/exa7pWyV6p2I2qT68HJgUp94ix2zZcOP
rHCFCzs5UD/pGWs5tijpU2QkTBD6xrFrrvkCF01TF7DhHIUxmd836ZlwSa9ICrdC
n2+9SLqbyczTokcQaxkexbYwqTnqQnE/wOybvfq6fi+QVVsE4EilLTFGJqUN6HeE
WWoiXu+bc7B5jZATUWa159Th93sIHlSpltPwMP8kI+ehmCzbSuE1fCp7bFdeWYr/
AZHWBLguWRjL0Q==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:44:48 2026 by rpki-client