Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: uJt4kOxXL6hnB53+skchgfMWyrn5dt38Jw8wUZEsnxE=
Subject key identifier: 51:D5:85:82:E6:EC:13:F6:0D:81:BE:AE:B2:3B:4C:C3:1A:61:F6:5C
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 01A0ED4163A6217E35AB04DB50032B701851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 13:01:20 +0000
Manifest this update: Tue 29 Sep 2026 13:01:20 +0000
Manifest next update: Wed 30 Sep 2026 13:01:20 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: lTs+Lh8dtkl65+uEzHSC5dNk4OQc9nOLgQN9OVfS3ds=)
2: ugMrWtr-AgbWpTxdCrlYjC4RyWA.roa (hash: 5ukMlR12Rye0g+suC8BFsAQhk/pWlg5h05IGSX13iYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:41:63:a6:21:7e:35:ab:04:db:50:03:2b:70:18:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Sep 29 13:01:20 2026 GMT
Not After : Sep 30 13:01:20 2026 GMT
Subject: CN=51d58582e6ec13f60d81beaeb23b4cc31a61f65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:06:03:25:ea:ec:e9:1c:7c:a6:d1:e9:95:
ed:ff:75:39:a2:94:2b:c1:1a:a7:ad:f4:ec:df:21:
fb:dd:89:ed:db:b0:91:99:bc:c7:32:ff:72:3b:22:
09:45:f8:45:cd:65:1a:c4:44:4e:88:14:ff:93:2f:
98:64:1a:c4:96:13:2e:31:a4:75:0c:e8:52:fe:81:
f0:86:ec:98:71:54:e8:40:3d:c4:3f:bc:d7:0e:8d:
dc:97:5e:fe:fe:69:17:f1:cd:a2:af:c8:18:44:5e:
11:46:8f:dc:aa:e7:2e:98:bd:ea:d6:ae:04:39:5e:
65:17:26:f0:06:62:fc:44:a2:e0:6b:00:bd:a9:56:
5d:24:04:c6:e1:79:03:3d:80:66:36:af:34:8f:7e:
35:f0:84:ea:fe:ad:d7:ad:a9:7a:45:69:27:a6:3d:
9f:b8:9a:b4:ef:bb:7b:fa:00:f3:fc:29:11:bf:91:
e0:c3:74:40:b0:bc:28:77:d2:69:d5:8a:a2:5c:1d:
63:46:eb:c0:b1:5c:a1:ac:35:b6:41:f6:1f:8d:25:
02:28:a4:73:fe:af:45:11:2f:be:02:ac:c3:fd:0e:
a0:38:ca:7f:24:65:8c:3a:bc:9c:08:a8:af:8e:0f:
80:9e:41:1b:f8:9d:dc:30:2a:2f:77:61:25:05:f7:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D5:85:82:E6:EC:13:F6:0D:81:BE:AE:B2:3B:4C:C3:1A:61:F6:5C
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:9b:6f:26:ce:4c:51:db:2d:5e:f0:c9:78:70:11:2e:80:ef:
71:5f:b1:c6:83:4f:76:97:dc:57:75:6e:f6:08:e9:f0:82:ad:
57:41:31:35:a8:e7:ff:60:79:2c:55:c5:18:63:fc:54:cd:54:
83:4d:ad:04:e8:96:58:08:63:c4:94:82:c7:92:24:99:29:6c:
d1:10:1b:0b:36:42:28:d4:91:fb:c8:8f:b5:de:78:21:b3:52:
93:8f:1f:3a:97:b1:82:68:d1:48:f9:da:14:57:33:84:91:28:
91:40:ae:af:39:d1:ed:d6:67:7f:ff:81:80:f8:cb:7b:d2:ca:
13:6d:2e:1b:1d:2c:5a:9b:f0:40:6b:82:86:58:56:bf:6c:bf:
13:e2:fd:d2:28:09:40:63:60:6e:ca:e0:07:a5:4d:12:36:9a:
79:ef:16:29:f2:65:a6:19:15:a6:35:70:dd:ce:1b:64:a8:3d:
65:43:85:ad:d7:90:c7:04:d8:a2:73:7b:6d:20:b8:85:47:7c:
d7:9d:70:43:a1:9a:c5:33:f9:df:dd:e4:86:04:5f:7e:99:c9:
e5:2a:ef:4d:90:06:53:76:e3:a2:2c:16:af:48:91:32:23:d5:
dd:6f:a8:98:be:4a:04:43:68:50:ec:b4:e9:08:ab:6f:22:c5:
17:54:e3:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtQWOmIX41qwTbUAMrcBhRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNzRhNzg5NTg3NWNmMmM2Nzg1NDRmNmNlNmY0YjIzOWY0
OTI5ZmIwHhcNMjYwOTI5MTMwMTIwWhcNMjYwOTMwMTMwMTIwWjAzMTEwLwYDVQQD
Eyg1MWQ1ODU4MmU2ZWMxM2Y2MGQ4MWJlYWViMjNiNGNjMzFhNjFmNjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9oGAyXq7OkcfKbR6ZXt/3U5opQr
wRqnrfTs3yH73Ynt27CRmbzHMv9yOyIJRfhFzWUaxEROiBT/ky+YZBrElhMuMaR1
DOhS/oHwhuyYcVToQD3EP7zXDo3cl17+/mkX8c2ir8gYRF4RRo/cqucumL3q1q4E
OV5lFybwBmL8RKLgawC9qVZdJATG4XkDPYBmNq80j3418ITq/q3Xral6RWknpj2f
uJq077t7+gDz/CkRv5Hgw3RAsLwod9Jp1YqiXB1jRuvAsVyhrDW2QfYfjSUCKKRz
/q9FES++AqzD/Q6gOMp/JGWMOrycCKivjg+AnkEb+J3cMCovd2ElBffHfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHVhYLm7BP2DYG+rrI7TMMaYfZcMB8GA1UdIwQY
MBaAFEB0p4lYdc8sZ4VE9s5vSyOfSSn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kMTc3ZGMtNDNiMy00YmRkLThiZjUt
ZjUyZDYwNjRkZDhiLzEvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kMTc3ZGMtNDNiMy00YmRkLThiZjUtZjUyZDYwNjRkZDhi
LzEvUUhTbmlWaDF6eXhuaFVUMnptOUxJNTlKS2ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATptvJs5M
UdstXvDJeHARLoDvcV+xxoNPdpfcV3Vu9gjp8IKtV0ExNajn/2B5LFXFGGP8VM1U
g02tBOiWWAhjxJSCx5IkmSls0RAbCzZCKNSR+8iPtd54IbNSk48fOpexgmjRSPna
FFczhJEokUCurznR7dZnf/+BgPjLe9LKE20uGx0sWpvwQGuChlhWv2y/E+L90igJ
QGNgbsrgB6VNEjaaee8WKfJlphkVpjVw3c4bZKg9ZUOFrdeQxwTYonN7bSC4hUd8
151wQ6GaxTP5393khgRffpnJ5SrvTZAGU3bjoiwWr0iRMiPV3W+omL5KBENoUOy0
6QirbyLFF1TjFg==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:53:05 2026 by rpki-client