Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
File: QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft (raw, json)
Hash identifier: pBFk2X8fijJyQGdwHFL9NHrLWAyKDRXwlwxpt2CKAKg=
Subject key identifier: 5E:72:EE:91:F5:C7:9F:60:D7:39:F1:3B:BC:BE:A4:DD:F3:F0:E4:F0
Authority key identifier: 41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
Certificate issuer: /CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Certificate serial: 019E1F479F9BB59E17568C49BCDE3F7E81CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
Manifest number: 160D
Signing time: Wed 13 May 2026 03:00:48 +0000
Manifest this update: Wed 13 May 2026 03:00:48 +0000
Manifest next update: Thu 14 May 2026 03:00:48 +0000
Files and hashes: 1: 7AZcdK-2iSMlF0mV6xbUMSO3Xnw.roa (hash: G5rGJtONXIdV22l8uGfiFrqq42pAnIm3ZbpijKWWsuw=)
2: QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl (hash: 9hHPxEZfhP70W4/mbZiHsDt1aG2aTqz3TafDCj7lTzg=)
3: SED4pOneSK1Nz4GXJ8sxeamW4bA.roa (hash: rv2mx30pNaTbk2/jVNoTsekRApJk2qpOrI2G/ZbcQfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:9f:9b:b5:9e:17:56:8c:49:bc:de:3f:7e:81:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fc55ee2488fb9401c4b668abac54110ebb8092
Validity
Not Before: May 13 03:00:48 2026 GMT
Not After : May 14 03:00:48 2026 GMT
Subject: CN=5e72ee91f5c79f60d739f13bbcbea4ddf3f0e4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:43:10:17:77:02:6f:b8:a6:31:b9:22:ad:
7b:b2:1c:fa:13:ce:20:52:e6:5d:11:66:0a:a2:87:
d4:dc:5c:18:7c:d9:eb:da:8d:be:06:f8:9f:87:23:
e4:25:dd:be:71:90:19:33:85:eb:34:7f:54:8d:53:
03:1f:a3:f8:93:57:b2:67:11:03:a5:df:f8:57:1e:
da:18:55:ed:7a:bf:2d:99:0e:b9:5e:94:76:79:19:
bf:0d:ae:59:c2:b0:33:84:a9:ee:d6:3d:03:2b:c0:
1a:83:a2:5d:15:3c:76:d8:8f:66:49:45:34:d4:9e:
bb:49:46:3e:6a:c4:42:84:36:bd:f3:40:5c:b3:69:
3d:65:fd:0f:13:92:8c:7d:2d:b2:cd:a8:2c:70:23:
90:45:a3:fb:f7:73:7f:63:fb:77:69:ed:78:18:88:
88:f1:c8:dc:2f:c0:ff:8a:d9:6c:31:10:66:73:fb:
33:42:c9:19:30:56:16:20:1f:45:6d:a3:bd:4f:19:
7c:45:bb:ed:23:72:8d:4b:4f:eb:3f:8e:fa:c3:02:
7e:2f:ab:95:68:2b:8a:c6:43:ef:de:ef:10:0e:87:
4b:8f:de:03:00:42:7a:16:6d:98:15:49:a2:27:89:
09:4f:53:f2:79:09:0c:22:6d:83:8a:2c:80:c3:fd:
e0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:EE:91:F5:C7:9F:60:D7:39:F1:3B:BC:BE:A4:DD:F3:F0:E4:F0
X509v3 Authority Key Identifier:
keyid:41:FC:55:EE:24:88:FB:94:01:C4:B6:68:AB:AC:54:11:0E:BB:80:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfxV7iSI-5QBxLZoq6xUEQ67gJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/aa3661-deb3-45a4-8693-3881a8b827ac/1/QfxV7iSI-5QBxLZoq6xUEQ67gJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:11:e7:78:83:3e:34:fa:af:99:7c:08:f6:e9:4f:a9:f6:34:
2f:95:f9:49:ee:96:6a:4f:22:68:05:e0:6e:71:1c:5d:1c:7b:
e2:9d:7f:aa:b6:4c:31:b1:6c:7e:6f:60:46:01:43:d7:17:cd:
85:c7:46:9f:40:fe:41:d7:0d:26:d4:cc:3d:f2:4a:a8:43:50:
36:8c:71:f7:75:c3:5c:d7:12:40:3a:a4:bc:cc:07:16:63:e7:
08:e5:30:ec:6e:1b:4d:52:73:9c:db:2f:ee:f5:04:e5:4e:ec:
08:b8:b4:cf:1a:dd:f3:8b:18:dd:dc:01:64:6f:88:4b:43:5f:
06:38:35:6d:ca:ac:30:60:b2:f8:ac:41:d4:17:01:10:4a:01:
ff:32:e4:82:bd:b6:d6:70:f7:7d:91:94:40:f4:55:c9:d0:dc:
ee:80:71:aa:d1:0c:50:4e:a7:25:11:f5:a0:56:94:b3:88:9b:
7a:75:f7:83:4e:16:05:65:6c:8f:ab:47:20:42:ac:61:fc:a3:
7e:cf:4c:0a:f7:ab:56:da:e2:f3:26:b2:09:d1:77:b3:00:04:
1c:98:fa:c7:18:95:bc:20:e9:83:74:ad:ae:20:5a:64:5f:b3:
1c:73:8f:40:10:2c:1e:a9:53:74:78:7e:1a:f3:2b:76:36:e9:
1b:a6:e8:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR5+btZ4XVoxJvN4/foHOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmM1NWVlMjQ4OGZiOTQwMWM0YjY2OGFiYWM1NDExMGVi
YjgwOTIwHhcNMjYwNTEzMDMwMDQ4WhcNMjYwNTE0MDMwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZTcyZWU5MWY1Yzc5ZjYwZDczOWYxM2JiY2JlYTRkZGYzZjBlNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRxDEBd3Am+4pjG5Iq17shz6E84g
UuZdEWYKoofU3FwYfNnr2o2+BvifhyPkJd2+cZAZM4XrNH9UjVMDH6P4k1eyZxED
pd/4Vx7aGFXter8tmQ65XpR2eRm/Da5ZwrAzhKnu1j0DK8Aag6JdFTx22I9mSUU0
1J67SUY+asRChDa980Bcs2k9Zf0PE5KMfS2yzagscCOQRaP793N/Y/t3ae14GIiI
8cjcL8D/itlsMRBmc/szQskZMFYWIB9FbaO9Txl8RbvtI3KNS0/rP476wwJ+L6uV
aCuKxkPv3u8QDodLj94DAEJ6Fm2YFUmiJ4kJT1PyeQkMIm2DiiyAw/3glQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF5y7pH1x59g1znxO7y+pN3z8OTwMB8GA1UdIwQY
MBaAFEH8Ve4kiPuUAcS2aKusVBEOu4CSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMt
Mzg4MWE4YjgyN2FjLzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hYTM2NjEtZGViMy00NWE0LTg2OTMtMzg4MWE4YjgyN2Fj
LzEvUWZ4VjdpU0ktNVFCeExab3E2eFVFUTY3Z0pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxHneIM+
NPqvmXwI9ulPqfY0L5X5Se6Wak8iaAXgbnEcXRx74p1/qrZMMbFsfm9gRgFD1xfN
hcdGn0D+QdcNJtTMPfJKqENQNoxx93XDXNcSQDqkvMwHFmPnCOUw7G4bTVJznNsv
7vUE5U7sCLi0zxrd84sY3dwBZG+IS0NfBjg1bcqsMGCy+KxB1BcBEEoB/zLkgr22
1nD3fZGUQPRVydDc7oBxqtEMUE6nJRH1oFaUs4ibenX3g04WBWVsj6tHIEKsYfyj
fs9MCverVtri8yayCdF3swAEHJj6xxiVvCDpg3StriBaZF+zHHOPQBAsHqlTdHh+
GvMrdjbpG6bonA==
-----END CERTIFICATE-----
Generated at Wed May 13 11:31:00 2026 by rpki-client