Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
File: QSewwP58CJNeJYcT_PkP6VjuA-4.mft (raw, json)
Hash identifier: CTNzdCUdd4gMvguHNoYUO+/C4AQ+N9mFUQEr5DNfkqw=
Subject key identifier: 9E:F3:29:32:1C:D2:CA:D2:F6:A4:CF:E6:16:AA:75:0A:0D:E8:26:0D
Authority key identifier: 41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
Certificate issuer: /CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Certificate serial: 01A0D4940FABA505D3C79FB40038CD436DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
Manifest number: 138C
Signing time: Thu 24 Sep 2026 18:01:08 +0000
Manifest this update: Thu 24 Sep 2026 18:01:08 +0000
Manifest next update: Fri 25 Sep 2026 18:01:08 +0000
Files and hashes: 1: QSewwP58CJNeJYcT_PkP6VjuA-4.crl (hash: lO6udS7UC5g94dzilV1lwjymbevbOQRYgH8zmqfClCI=)
2: qDecB_BWF1K9skoTX1OzF0T-DQQ.roa (hash: AAPazeOH0UyI2v6icXzRiwrdFOTR+zzuLsPnN6L+as4=)
3: tPolntRW3EVoA5WCEpAsWda33Aw.roa (hash: R4nNUtjVrvsZ3qcmSOyRAEFItuX7aMB4GwPwNz7Vta4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:0f:ab:a5:05:d3:c7:9f:b4:00:38:cd:43:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4127b0c0fe7c08935e258713fcf90fe958ee03ee
Validity
Not Before: Sep 24 18:01:08 2026 GMT
Not After : Sep 25 18:01:08 2026 GMT
Subject: CN=9ef329321cd2cad2f6a4cfe616aa750a0de8260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:d7:ef:98:b4:ad:09:1a:52:75:19:d4:01:
69:08:97:bf:54:86:85:5b:44:63:65:1b:d3:1d:59:
39:5f:20:40:2e:ff:91:69:0e:6e:aa:1e:84:1d:6e:
70:20:7c:7c:76:68:84:99:92:a6:2d:a1:1b:94:17:
d2:1e:c3:cd:29:6e:86:37:fb:c0:f4:83:0c:c2:37:
01:ea:47:a6:1a:97:64:7d:03:6e:99:c4:c8:15:05:
3d:5c:81:00:ba:8b:67:e3:92:9b:51:a9:78:7f:2f:
ad:38:97:c9:1c:86:6f:38:98:d0:77:62:16:f4:6c:
b3:24:30:f8:6f:0f:2b:ca:f7:5b:a9:60:43:16:24:
ab:d1:38:83:70:40:74:3c:2b:d9:ea:a6:77:bd:60:
af:fc:6a:64:cc:e3:14:39:c2:62:9a:be:99:8b:80:
57:c5:01:ca:d0:7f:f9:40:3d:44:3a:88:b6:16:f7:
a1:41:88:49:99:92:21:68:de:bb:47:50:ba:05:b2:
1c:fa:57:a3:90:96:9d:cf:bf:32:1b:59:f6:fc:0a:
85:56:8a:59:15:b0:54:81:f2:ac:3d:88:64:13:7c:
2e:d2:4f:3a:60:5b:bd:83:61:80:80:71:58:26:08:
8a:f3:73:51:1c:24:14:8a:7d:a6:ce:64:49:26:ec:
fa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F3:29:32:1C:D2:CA:D2:F6:A4:CF:E6:16:AA:75:0A:0D:E8:26:0D
X509v3 Authority Key Identifier:
keyid:41:27:B0:C0:FE:7C:08:93:5E:25:87:13:FC:F9:0F:E9:58:EE:03:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSewwP58CJNeJYcT_PkP6VjuA-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/be2903-3538-46ff-aae4-bd1d48d512ce/1/QSewwP58CJNeJYcT_PkP6VjuA-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0a:89:40:c8:02:37:43:57:19:f2:2b:5e:0a:54:4a:3d:d3:
45:c1:ee:96:40:bb:83:e2:f5:0e:d8:4d:5e:75:db:2e:ad:79:
5c:77:7c:5a:18:e6:a4:f2:73:a2:b4:48:e7:8a:7e:ae:39:45:
2a:d1:f7:53:10:54:92:d1:05:4d:33:4c:8a:5f:9c:0e:0c:15:
99:9f:18:bf:46:1d:6c:1f:c7:eb:9e:87:b9:1c:14:ee:ff:be:
42:74:72:5b:5a:66:32:1e:4b:13:d5:03:34:89:65:f2:1b:9d:
ec:a9:f5:96:c5:f6:9a:16:90:2e:e8:ae:a4:26:a1:a9:46:2c:
a8:00:70:5a:e1:5e:10:8f:8f:ea:b8:05:c3:db:6c:da:fc:e4:
20:6f:b1:b0:9c:86:f6:9a:03:5e:fa:c1:e3:b1:fc:f5:51:0c:
72:af:7d:83:57:47:5d:68:81:63:ef:4c:9c:dc:ca:3e:52:bb:
4b:9f:9b:66:1c:0b:9d:f6:39:7a:fd:c7:8d:5f:2a:a3:1a:1e:
38:e6:3c:bc:a7:0a:42:40:a8:7e:ca:76:ad:cf:c9:d9:0f:bf:
71:db:31:f7:50:b9:7d:02:1a:26:1e:01:ef:50:a9:10:65:48:
a6:c7:3c:96:ac:07:d3:70:2a:9e:17:29:03:45:16:69:d1:a3:
ea:bb:24:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDUlA+rpQXTx5+0ADjNQ23gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMjdiMGMwZmU3YzA4OTM1ZTI1ODcxM2ZjZjkwZmU5NThl
ZTAzZWUwHhcNMjYwOTI0MTgwMTA4WhcNMjYwOTI1MTgwMTA4WjAzMTEwLwYDVQQD
Eyg5ZWYzMjkzMjFjZDJjYWQyZjZhNGNmZTYxNmFhNzUwYTBkZTgyNjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPLX75i0rQkaUnUZ1AFpCJe/VIaF
W0RjZRvTHVk5XyBALv+RaQ5uqh6EHW5wIHx8dmiEmZKmLaEblBfSHsPNKW6GN/vA
9IMMwjcB6kemGpdkfQNumcTIFQU9XIEAuotn45KbUal4fy+tOJfJHIZvOJjQd2IW
9GyzJDD4bw8ryvdbqWBDFiSr0TiDcEB0PCvZ6qZ3vWCv/GpkzOMUOcJimr6Zi4BX
xQHK0H/5QD1EOoi2FvehQYhJmZIhaN67R1C6BbIc+lejkJadz78yG1n2/AqFVopZ
FbBUgfKsPYhkE3wu0k86YFu9g2GAgHFYJgiK83NRHCQUin2mzmRJJuz6EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7zKTIc0srS9qTP5haqdQoN6CYNMB8GA1UdIwQY
MBaAFEEnsMD+fAiTXiWHE/z5D+lY7gPuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQt
YmQxZDQ4ZDUxMmNlLzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iZTI5MDMtMzUzOC00NmZmLWFhZTQtYmQxZDQ4ZDUxMmNl
LzEvUVNld3dQNThDSk5lSlljVF9Qa1A2Vmp1QS00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQqJQMgC
N0NXGfIrXgpUSj3TRcHulkC7g+L1DthNXnXbLq15XHd8WhjmpPJzorRI54p+rjlF
KtH3UxBUktEFTTNMil+cDgwVmZ8Yv0YdbB/H656HuRwU7v++QnRyW1pmMh5LE9UD
NIll8hud7Kn1lsX2mhaQLuiupCahqUYsqABwWuFeEI+P6rgFw9ts2vzkIG+xsJyG
9poDXvrB47H89VEMcq99g1dHXWiBY+9MnNzKPlK7S5+bZhwLnfY5ev3HjV8qoxoe
OOY8vKcKQkCofsp2rc/J2Q+/cdsx91C5fQIaJh4B71CpEGVIpsc8lqwH03Aqnhcp
A0UWadGj6rsk7g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:13:26 2026 by rpki-client