Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: eL3UwCzpDIJYnsCePB71/4zOAGwdwFm8GcqeH+uSuNA=
Subject key identifier: A9:47:13:9D:5D:3B:84:E0:3C:68:ED:96:5E:8E:4A:FC:3A:B2:69:B8
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 01A0D56FA9198BD96D82A0B93EBB0088CBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 071E
Signing time: Thu 24 Sep 2026 22:00:59 +0000
Manifest this update: Thu 24 Sep 2026 22:00:59 +0000
Manifest next update: Fri 25 Sep 2026 22:00:59 +0000
Files and hashes: 1: 1V2N8PP3W6pg2dn86MMXMCFavbg.roa (hash: 6GyZmIlJdg5hYdJcaopJTcDcXE9f3YbiakWtgZ82HCg=)
2: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: FHgKD3eI+UZcUj2xxiSgu9av9yDqip7TZ2yDwa7H0ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:6f:a9:19:8b:d9:6d:82:a0:b9:3e:bb:00:88:cb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Sep 24 22:00:59 2026 GMT
Not After : Sep 25 22:00:59 2026 GMT
Subject: CN=a947139d5d3b84e03c68ed965e8e4afc3ab269b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:06:3b:20:55:76:92:d5:90:cd:b2:d1:05:fb:
f9:aa:84:d0:3e:6b:70:c8:ca:50:6b:0e:b2:6d:14:
c5:dc:b1:ad:a3:42:1b:4d:e8:78:f0:83:da:83:8f:
32:c9:f4:e0:26:09:b4:d6:a2:eb:67:00:ac:ad:ac:
1a:d0:2c:da:e5:9b:50:a0:f9:95:9a:f7:ba:97:7c:
7f:3b:18:de:57:f2:f2:f8:1e:7d:74:db:51:dc:4b:
a6:bf:3c:ca:9f:8e:00:e3:05:88:ab:43:db:9e:6b:
3b:87:31:c8:55:ea:66:a0:ae:e1:21:83:fe:56:cf:
dd:ae:dd:36:ec:fd:5a:7c:e9:38:9a:fd:f1:f0:4d:
03:98:8f:01:d6:ce:72:03:ef:ad:ae:34:44:7f:ca:
3f:59:00:56:ab:64:f2:fa:2b:8d:66:91:e7:33:bd:
d1:c4:d2:54:78:06:d8:9d:1d:11:58:1e:f5:b5:20:
78:85:83:17:27:b5:47:d2:6f:aa:d1:5e:90:24:a3:
31:ac:e5:38:08:7f:96:3e:66:de:d8:c1:10:0e:a7:
32:4e:b8:b4:57:75:ea:47:73:2a:50:9f:89:01:38:
5e:a3:54:cd:6b:15:c7:f2:06:b3:0a:67:61:c5:ff:
9c:b2:44:5d:20:3f:a6:34:84:dc:45:60:18:7a:8e:
db:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:47:13:9D:5D:3B:84:E0:3C:68:ED:96:5E:8E:4A:FC:3A:B2:69:B8
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4c:c6:91:55:59:b2:6f:e0:7e:a3:d3:2d:61:28:0d:d5:ab:
fb:36:79:e7:67:6a:ac:ca:b8:a2:d8:6c:a0:e9:e4:12:a2:ea:
a6:6c:01:8d:d4:08:1e:7d:ff:5b:cb:d1:fd:b7:1b:79:f8:69:
02:21:6f:e4:83:33:5e:57:73:03:6c:1a:e0:1c:c6:27:29:2f:
f2:0c:43:e0:fc:ce:0a:2b:21:3e:2b:34:be:e7:62:b6:a1:99:
a6:f9:31:19:8a:07:02:c2:dd:72:e0:4b:d6:c1:55:0e:d5:b6:
5d:b5:26:bb:80:c5:ec:03:74:f6:47:f6:d9:c0:d5:4e:f3:65:
bb:4b:ca:1e:e7:bb:e4:a6:e5:83:6b:69:44:86:75:c2:a7:67:
3a:ae:e7:ad:f0:73:fb:8f:8a:df:15:af:c2:17:de:d2:5f:83:
72:8e:f5:4b:66:cc:8d:4f:59:dd:c7:f0:89:da:73:00:ad:e9:
e2:b3:38:b1:aa:5c:01:b1:38:ef:0d:81:a5:46:b3:50:55:6f:
f8:3a:41:06:cf:cd:d9:fb:f7:37:ee:86:d0:71:eb:37:e1:2c:
5b:e0:b0:27:88:85:ce:4d:21:4e:f6:ad:40:9a:14:82:88:ed:
0d:ae:4c:c4:44:56:4a:56:4b:33:17:bd:6d:6a:86:39:81:e4:
4f:83:1f:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVb6kZi9ltgqC5PrsAiMurMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyNDMyYTMxOWY1NGIwNTgzNzJmZDMyNTI4ZWFlNTFmYzkw
YzE1YjIwHhcNMjYwOTI0MjIwMDU5WhcNMjYwOTI1MjIwMDU5WjAzMTEwLwYDVQQD
EyhhOTQ3MTM5ZDVkM2I4NGUwM2M2OGVkOTY1ZThlNGFmYzNhYjI2OWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gY7IFV2ktWQzbLRBfv5qoTQPmtw
yMpQaw6ybRTF3LGto0IbTeh48IPag48yyfTgJgm01qLrZwCsrawa0Cza5ZtQoPmV
mve6l3x/OxjeV/Ly+B59dNtR3EumvzzKn44A4wWIq0Pbnms7hzHIVepmoK7hIYP+
Vs/drt027P1afOk4mv3x8E0DmI8B1s5yA++trjREf8o/WQBWq2Ty+iuNZpHnM73R
xNJUeAbYnR0RWB71tSB4hYMXJ7VH0m+q0V6QJKMxrOU4CH+WPmbe2MEQDqcyTri0
V3XqR3MqUJ+JATheo1TNaxXH8gazCmdhxf+cskRdID+mNITcRWAYeo7beQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKlHE51dO4TgPGjtll6OSvw6smm4MB8GA1UdIwQY
MBaAFEJDKjGfVLBYNy/TJSjq5R/JDBWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMt
MTMxZGMyYmEyZWM4LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS83YWI3OWMtOWRmZi00YTVkLWFlODMtMTMxZGMyYmEyZWM4
LzEvUWtNcU1aOVVzRmczTDlNbEtPcmxIOGtNRmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEzGkVVZ
sm/gfqPTLWEoDdWr+zZ552dqrMq4othsoOnkEqLqpmwBjdQIHn3/W8vR/bcbefhp
AiFv5IMzXldzA2wa4BzGJykv8gxD4PzOCishPis0vuditqGZpvkxGYoHAsLdcuBL
1sFVDtW2XbUmu4DF7AN09kf22cDVTvNlu0vKHue75Kblg2tpRIZ1wqdnOq7nrfBz
+4+K3xWvwhfe0l+Dco71S2bMjU9Z3cfwidpzAK3p4rM4sapcAbE47w2BpUazUFVv
+DpBBs/N2fv3N+6G0HHrN+EsW+CwJ4iFzk0hTvatQJoUgojtDa5MxERWSlZLMxe9
bWqGOYHkT4MfnQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 01:07:14 2026 by rpki-client