Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: 1/lVU57WV4x7Yk5xQxDVj5YegMqlCohwsvrEy2Ej2Is=
Subject key identifier: FE:BD:28:6B:78:B3:00:C6:B7:FE:A0:3A:9F:54:F9:0B:CD:A7:96:C6
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 019F92EDC89B0E83D10ABF1B65622630F6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 0677
Signing time: Fri 24 Jul 2026 07:01:24 +0000
Manifest this update: Fri 24 Jul 2026 07:01:24 +0000
Manifest next update: Sat 25 Jul 2026 07:01:24 +0000
Files and hashes: 1: 1V2N8PP3W6pg2dn86MMXMCFavbg.roa (hash: 6GyZmIlJdg5hYdJcaopJTcDcXE9f3YbiakWtgZ82HCg=)
2: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: lfJQj+sKSC96WutgtfgD5Y9XCvfGxkmmoz9nkKl0V9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:c8:9b:0e:83:d1:0a:bf:1b:65:62:26:30:f6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Jul 24 07:01:24 2026 GMT
Not After : Jul 25 07:01:24 2026 GMT
Subject: CN=febd286b78b300c6b7fea03a9f54f90bcda796c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:3f:c5:00:9f:95:2a:a7:91:88:4d:6a:53:
a9:63:8a:35:17:82:00:46:64:9d:73:24:32:fb:9e:
7e:e6:ec:f5:72:e9:35:fd:8c:4d:5d:ae:2f:42:91:
76:30:d2:42:fa:ad:62:7b:f0:b2:27:e7:8b:58:93:
d3:55:f6:f8:4b:db:9a:c2:cd:17:d6:48:42:f0:4d:
ab:d1:a0:f7:02:ad:0a:a3:95:d4:06:4d:4b:83:71:
ca:87:c7:9f:fd:a1:b3:a4:2a:e1:79:d1:e2:36:47:
e5:51:da:23:d1:e9:0e:6a:62:3d:01:c7:67:ce:0f:
72:62:b7:2e:9f:59:fd:31:60:f9:89:38:4c:66:96:
8e:c2:9a:b0:21:73:b3:98:aa:dd:5b:8f:57:5b:40:
93:aa:70:d3:29:57:54:a8:48:9d:ae:c5:3f:59:d6:
a8:f1:36:da:b3:de:66:ed:6b:3f:b4:45:f8:0e:8f:
6b:3a:ff:b2:fb:c4:28:2e:55:e9:1b:0d:ce:ae:7c:
ed:4a:f5:c1:e3:6b:2e:76:bc:c3:46:25:c4:82:7c:
f6:7c:30:18:27:5d:89:e2:4e:59:a5:3c:cb:f5:d8:
ef:86:20:35:41:e2:75:1d:c4:97:d1:b2:92:73:67:
36:8e:80:64:21:14:f6:c2:76:07:73:3d:ea:5a:f7:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:BD:28:6B:78:B3:00:C6:B7:FE:A0:3A:9F:54:F9:0B:CD:A7:96:C6
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b1:65:97:a1:e3:3c:9f:09:1e:82:bc:96:5f:3b:5c:ee:8e:
ab:a9:51:fb:bb:84:ea:0a:7e:db:fa:f2:50:57:e2:00:49:38:
6e:2f:d2:06:95:3b:84:28:ec:54:97:77:bf:ab:45:ed:92:18:
42:a8:7b:3a:e2:c5:84:cf:05:e3:02:d0:4a:fc:ea:71:47:c7:
2b:55:61:92:e8:75:50:f1:f3:d8:84:66:de:20:38:9f:73:0f:
37:74:74:09:4a:8c:eb:cf:cc:91:a0:07:9b:1f:91:ee:ab:2f:
81:be:4b:3d:bd:f7:bd:8f:fb:5e:4f:dc:38:51:f1:99:ba:c2:
19:a7:95:40:47:72:28:08:ef:3b:72:c8:5b:0c:33:45:01:6e:
c2:41:a8:74:58:9d:b1:ee:96:59:cc:71:be:f9:d8:25:10:c7:
e9:aa:50:86:65:27:ef:86:cf:ef:28:ce:1b:8a:6d:73:ce:0d:
84:d9:43:28:8d:05:d2:5f:a0:bf:96:36:c1:5d:0a:84:e6:1e:
fe:4c:d9:1b:b7:78:6b:3c:53:2e:2c:6d:77:2d:e0:1b:90:e6:
4d:5c:11:7a:c8:92:c5:ed:f2:e2:33:08:17:d1:0b:19:ea:37:
89:5d:bf:39:f6:be:39:bb:59:c2:26:9f:28:26:35:28:f9:4d:
16:e8:ad:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7cibDoPRCr8bZWImMPb/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNDMyYTMxOWY1NGIwNTgzNzJmZDMyNTI4ZWFlNTFmYzkw
YzE1YjIwHhcNMjYwNzI0MDcwMTI0WhcNMjYwNzI1MDcwMTI0WjAzMTEwLwYDVQQD
EyhmZWJkMjg2Yjc4YjMwMGM2YjdmZWEwM2E5ZjU0ZjkwYmNkYTc5NmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7I/xQCflSqnkYhNalOpY4o1F4IA
RmSdcyQy+55+5uz1cuk1/YxNXa4vQpF2MNJC+q1ie/CyJ+eLWJPTVfb4S9uaws0X
1khC8E2r0aD3Aq0Ko5XUBk1Lg3HKh8ef/aGzpCrhedHiNkflUdoj0ekOamI9Acdn
zg9yYrcun1n9MWD5iThMZpaOwpqwIXOzmKrdW49XW0CTqnDTKVdUqEidrsU/Wdao
8Tbas95m7Ws/tEX4Do9rOv+y+8QoLlXpGw3OrnztSvXB42sudrzDRiXEgnz2fDAY
J12J4k5ZpTzL9djvhiA1QeJ1HcSX0bKSc2c2joBkIRT2wnYHcz3qWvdoLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP69KGt4swDGt/6gOp9U+QvNp5bGMB8GA1UdIwQY
MBaAFEJDKjGfVLBYNy/TJSjq5R/JDBWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMt
MTMxZGMyYmEyZWM4LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMtMTMxZGMyYmEyZWM4
LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbFll6Hj
PJ8JHoK8ll87XO6Oq6lR+7uE6gp+2/ryUFfiAEk4bi/SBpU7hCjsVJd3v6tF7ZIY
Qqh7OuLFhM8F4wLQSvzqcUfHK1Vhkuh1UPHz2IRm3iA4n3MPN3R0CUqM68/MkaAH
mx+R7qsvgb5LPb33vY/7Xk/cOFHxmbrCGaeVQEdyKAjvO3LIWwwzRQFuwkGodFid
se6WWcxxvvnYJRDH6apQhmUn74bP7yjOG4ptc84NhNlDKI0F0l+gv5Y2wV0KhOYe
/kzZG7d4azxTLixtdy3gG5DmTVwResiSxe3y4jMIF9ELGeo3iV2/Ofa+ObtZwiaf
KCY1KPlNFuitxQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:37 2026 by rpki-client