Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: +wooGLTyQpv5pblw7XgWQuJVxlTFJyT+dI89TBhnYAY=
Subject key identifier: 86:F7:E9:DB:64:21:60:E7:CD:02:F7:61:5C:54:9A:35:50:E4:4B:59
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 019F932411AE8094E8E28A8B457B0EC8B960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 08:00:42 +0000
Manifest this update: Fri 24 Jul 2026 08:00:42 +0000
Manifest next update: Sat 25 Jul 2026 08:00:42 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: fT5coh9EhSG7hPqwN6SL8lsSTnlIRUKp32NXmR0t++s=)
2: QJ1CsNmZtrMfqsM-LahkitaRmoc.roa (hash: 16917vIR1cAkmi46t8D1rEf6dQGk7zBSOY9QqyvHf5E=)
3: ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa (hash: DDgrDiLhVwMu1oS2zAdeQKa6HlRGjZ92/REsC3Si5kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:11:ae:80:94:e8:e2:8a:8b:45:7b:0e:c8:b9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Jul 24 08:00:42 2026 GMT
Not After : Jul 25 08:00:42 2026 GMT
Subject: CN=86f7e9db642160e7cd02f7615c549a3550e44b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:1a:2e:78:ec:53:88:a6:e2:a6:d8:9e:ee:
27:08:e8:89:91:dd:e7:87:15:a9:aa:05:20:4c:5f:
95:50:74:39:e3:7d:28:8a:d4:cf:3a:01:6a:d4:25:
4e:38:e4:d1:a0:a8:cc:b1:e9:8d:b6:39:f0:c7:14:
bb:e2:07:1a:c7:fc:22:d1:47:a5:a5:c1:b9:d4:ac:
3f:f0:ee:fe:24:7a:4c:f7:09:32:2e:a0:bf:b2:95:
b4:5f:38:94:f6:35:17:12:60:e6:e4:58:bb:6c:5d:
0c:04:80:72:e7:03:55:23:da:7c:d3:0e:8c:ef:92:
4d:93:c7:83:e6:37:03:15:e3:f7:33:e5:a2:9e:a4:
e1:47:63:01:cc:95:ae:d8:d8:37:98:d7:4a:0b:1d:
2a:a7:75:69:e2:8e:54:78:c4:72:dd:7f:f6:6f:7b:
c1:78:0b:fc:5d:b4:d3:aa:a5:de:2f:1e:6f:47:a4:
fa:86:aa:e6:98:60:b8:cc:75:44:3e:0f:97:91:64:
34:9a:74:9e:11:1f:1f:63:b5:8e:56:50:7b:01:96:
ec:96:60:21:54:bd:b0:0b:25:fc:50:67:bf:52:8a:
80:ba:e4:81:10:13:89:81:a6:e2:9f:c4:69:cc:b7:
6d:62:a7:d1:c5:b5:c6:18:8c:a1:11:d4:a1:d8:ad:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F7:E9:DB:64:21:60:E7:CD:02:F7:61:5C:54:9A:35:50:E4:4B:59
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:75:38:f8:e3:fe:7f:fd:cd:db:64:54:30:f8:4e:ca:ad:46:
db:5e:f4:f3:7a:13:03:33:79:f9:1a:8f:a5:1e:da:06:a4:bf:
58:06:51:95:8e:54:71:80:29:55:f7:22:b4:ff:f0:b0:6f:fa:
5d:4b:aa:b3:a6:11:ea:97:04:70:a6:ba:b5:4a:e6:4b:65:20:
cf:8f:9b:85:2e:67:a4:68:5c:50:02:11:74:3c:37:52:31:bc:
95:18:16:2f:d1:ee:ad:bd:28:30:54:c6:2a:54:de:e8:96:b9:
f4:8f:ad:24:40:13:33:72:6c:5b:82:14:36:62:d3:d1:a8:72:
6c:4e:69:d6:1e:e3:72:81:28:f1:3b:a3:dd:82:b6:c0:9d:c5:
d7:71:d6:a5:82:f6:5b:41:e0:b8:c9:74:9e:f4:fd:01:5c:8a:
f6:6c:29:be:59:cb:10:7b:f9:d1:2d:44:49:ac:8d:8c:87:d0:
ac:40:ea:df:e8:9a:08:c0:35:ef:f2:50:2f:60:e1:b9:8d:e4:
2b:df:e4:76:89:a7:3a:23:07:e9:84:52:7f:66:af:69:ad:61:
b0:f8:f1:48:fa:fd:fe:e3:b7:69:d4:51:e0:6e:34:c4:63:06:
54:97:7c:5c:28:6d:8e:47:e3:91:a5:72:02:27:fa:45:fd:9e:
63:0f:d3:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJBGugJTo4oqLRXsOyLlgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmE5MjI1MGMyODU4MGYyYWQ0Y2MxYzM1N2IwMmEyNWE3
OTBjZjcwHhcNMjYwNzI0MDgwMDQyWhcNMjYwNzI1MDgwMDQyWjAzMTEwLwYDVQQD
Eyg4NmY3ZTlkYjY0MjE2MGU3Y2QwMmY3NjE1YzU0OWEzNTUwZTQ0YjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOgaLnjsU4im4qbYnu4nCOiJkd3n
hxWpqgUgTF+VUHQ5430oitTPOgFq1CVOOOTRoKjMsemNtjnwxxS74gcax/wi0Uel
pcG51Kw/8O7+JHpM9wkyLqC/spW0XziU9jUXEmDm5Fi7bF0MBIBy5wNVI9p80w6M
75JNk8eD5jcDFeP3M+WinqThR2MBzJWu2Ng3mNdKCx0qp3Vp4o5UeMRy3X/2b3vB
eAv8XbTTqqXeLx5vR6T6hqrmmGC4zHVEPg+XkWQ0mnSeER8fY7WOVlB7AZbslmAh
VL2wCyX8UGe/UoqAuuSBEBOJgabin8RpzLdtYqfRxbXGGIyhEdSh2K3UFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb36dtkIWDnzQL3YVxUmjVQ5EtZMB8GA1UdIwQY
MBaAFEBqkiUMKFgPKtTMHDV7AqJaeQz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMt
N2YyMGVmMDJmMjY0LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMtN2YyMGVmMDJmMjY0
LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3U4+OP+
f/3N22RUMPhOyq1G217083oTAzN5+RqPpR7aBqS/WAZRlY5UcYApVfcitP/wsG/6
XUuqs6YR6pcEcKa6tUrmS2Ugz4+bhS5npGhcUAIRdDw3UjG8lRgWL9Hurb0oMFTG
KlTe6Ja59I+tJEATM3JsW4IUNmLT0ahybE5p1h7jcoEo8Tuj3YK2wJ3F13HWpYL2
W0HguMl0nvT9AVyK9mwpvlnLEHv50S1ESayNjIfQrEDq3+iaCMA17/JQL2DhuY3k
K9/kdomnOiMH6YRSf2avaa1hsPjxSPr9/uO3adRR4G40xGMGVJd8XChtjkfjkaVy
Aif6Rf2eYw/TGQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:37:44 2026 by rpki-client