Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.mft
File: QQSvokfAz2tt091yE_kF8WvsnsY.mft (raw, json)
Hash identifier: M3x77HW6QSKgijDi8VFs/RcTop8opLb136uLRDHcyh4=
Subject key identifier: 49:D4:F8:C1:96:C4:85:56:FC:BB:4F:09:BC:6A:AD:48:52:7F:05:ED
Authority key identifier: 41:04:AF:A2:47:C0:CF:6B:6D:D3:DD:72:13:F9:05:F1:6B:EC:9E:C6
Certificate issuer: /CN=4104afa247c0cf6b6dd3dd7213f905f16bec9ec6
Certificate serial: 01A0D98354C926945AFCCEC330AB8561C8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSvokfAz2tt091yE_kF8WvsnsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.mft
Manifest number: E3
Signing time: Fri 25 Sep 2026 17:00:57 +0000
Manifest this update: Fri 25 Sep 2026 17:00:57 +0000
Manifest next update: Sat 26 Sep 2026 17:00:57 +0000
Files and hashes: 1: OO2Y7VfCOCAEA1xX--BhFozBJiM.asa (hash: lYuSARYdNRnDCAxFwpus22XdP7lxlSBl150uyfdYAxc=)
2: QQSvokfAz2tt091yE_kF8WvsnsY.crl (hash: gfqXFNCLkj2fW6LPDM8wsk6+itslUDub47kczHUUNG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSvokfAz2tt091yE_kF8WvsnsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:54:c9:26:94:5a:fc:ce:c3:30:ab:85:61:c8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104afa247c0cf6b6dd3dd7213f905f16bec9ec6
Validity
Not Before: Sep 25 17:00:57 2026 GMT
Not After : Sep 26 17:00:57 2026 GMT
Subject: CN=49d4f8c196c48556fcbb4f09bc6aad48527f05ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:96:b9:35:ce:98:47:40:65:e5:db:11:be:cd:
ef:bc:51:18:b3:a6:07:1b:9b:ee:55:7a:99:7f:23:
7d:72:24:25:68:a4:3e:9e:b5:94:27:24:52:5e:00:
5a:49:b4:08:a3:5f:6a:ff:3a:aa:2b:aa:4e:5a:e6:
64:3d:06:11:58:c4:dd:ad:29:6d:58:04:38:14:fa:
fc:77:e1:15:06:6e:e4:fb:14:fb:21:ba:fb:9d:ec:
22:44:5f:23:6a:fa:cc:d8:5b:9c:c1:a2:ce:b5:78:
7e:13:d9:81:11:fb:09:15:39:b9:ba:1d:62:c3:ae:
7d:dd:16:34:1d:af:01:a6:d3:9d:b1:34:85:00:43:
0a:c9:54:da:4e:36:84:aa:9d:67:07:14:31:cb:07:
a9:39:b1:04:da:cf:3c:89:2e:49:c6:d5:8c:42:0b:
19:d2:d8:99:a0:11:a2:29:fb:2e:5d:f1:cd:09:70:
0f:c9:6b:6c:ac:14:a4:af:3a:02:49:4e:e9:d6:69:
1b:a0:b8:62:f5:6e:6f:2b:98:da:0e:71:3c:56:1d:
45:cc:2f:5b:8e:2d:c4:79:e8:03:f6:54:05:23:35:
5c:8a:ab:87:af:4c:9e:71:36:e7:ae:2e:8f:ad:3d:
41:c6:16:93:5f:05:2e:23:1b:c9:50:73:52:f4:11:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:F8:C1:96:C4:85:56:FC:BB:4F:09:BC:6A:AD:48:52:7F:05:ED
X509v3 Authority Key Identifier:
keyid:41:04:AF:A2:47:C0:CF:6B:6D:D3:DD:72:13:F9:05:F1:6B:EC:9E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSvokfAz2tt091yE_kF8WvsnsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/46a4e0-0ec4-490b-89be-c4cde6977c04/1/QQSvokfAz2tt091yE_kF8WvsnsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a5:e6:28:39:b4:47:dd:23:06:94:f7:6c:7a:c7:8d:7c:db:
64:4d:af:be:03:4c:fd:97:34:d7:ef:d5:51:2a:93:6f:44:c8:
e1:1f:47:9f:4a:6a:ad:eb:98:30:cf:0f:a3:d2:5b:95:d6:b8:
c4:e7:31:6c:b6:6f:9e:26:74:c8:0a:f7:54:d4:ce:dd:b0:eb:
3e:92:b0:64:16:a6:e3:20:f7:6a:b0:c8:b5:33:10:e2:5f:fe:
2b:0d:35:23:b7:96:f4:11:62:aa:c9:cb:e4:06:6e:42:4c:f7:
fe:5d:84:17:fb:fb:8f:e3:ee:87:c7:60:43:a3:aa:7e:66:8e:
2a:7e:53:c4:52:1e:35:49:93:e0:cc:94:d4:16:24:05:b7:24:
ce:fe:30:02:43:7a:9c:a6:54:b1:a8:35:ce:fa:19:0d:4c:ca:
8a:60:34:42:4f:dc:1d:06:0a:f6:6a:b1:4f:8e:94:19:ac:22:
4c:ea:0f:c9:fa:db:dc:34:de:a6:78:e3:c4:64:d5:c8:8a:e4:
8c:90:b3:4f:58:36:be:a6:42:4b:78:88:27:5b:b6:cd:6d:6d:
fc:ab:9f:ef:55:d9:b1:d5:e9:79:22:79:6a:eb:e3:7b:d5:38:
cb:46:f6:65:0f:4f:52:ac:d6:23:3e:e3:b6:75:65:90:bc:8b:
d2:9d:a1:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZg1TJJpRa/M7DMKuFYci8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMDRhZmEyNDdjMGNmNmI2ZGQzZGQ3MjEzZjkwNWYxNmJl
YzllYzYwHhcNMjYwOTI1MTcwMDU3WhcNMjYwOTI2MTcwMDU3WjAzMTEwLwYDVQQD
Eyg0OWQ0ZjhjMTk2YzQ4NTU2ZmNiYjRmMDliYzZhYWQ0ODUyN2YwNWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJa5Nc6YR0Bl5dsRvs3vvFEYs6YH
G5vuVXqZfyN9ciQlaKQ+nrWUJyRSXgBaSbQIo19q/zqqK6pOWuZkPQYRWMTdrSlt
WAQ4FPr8d+EVBm7k+xT7Ibr7newiRF8javrM2FucwaLOtXh+E9mBEfsJFTm5uh1i
w6593RY0Ha8BptOdsTSFAEMKyVTaTjaEqp1nBxQxywepObEE2s88iS5JxtWMQgsZ
0tiZoBGiKfsuXfHNCXAPyWtsrBSkrzoCSU7p1mkboLhi9W5vK5jaDnE8Vh1FzC9b
ji3EeegD9lQFIzVciquHr0yecTbnri6PrT1BxhaTXwUuIxvJUHNS9BEYtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnU+MGWxIVW/LtPCbxqrUhSfwXtMB8GA1UdIwQY
MBaAFEEEr6JHwM9rbdPdchP5BfFr7J7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVFTdm9rZkF6MnR0MDkxeUVfa0Y4V3ZzbnNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS80NmE0ZTAtMGVjNC00OTBiLTg5YmUt
YzRjZGU2OTc3YzA0LzEvUVFTdm9rZkF6MnR0MDkxeUVfa0Y4V3ZzbnNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS80NmE0ZTAtMGVjNC00OTBiLTg5YmUtYzRjZGU2OTc3YzA0
LzEvUVFTdm9rZkF6MnR0MDkxeUVfa0Y4V3ZzbnNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAraXmKDm0
R90jBpT3bHrHjXzbZE2vvgNM/Zc01+/VUSqTb0TI4R9Hn0pqreuYMM8Po9Jblda4
xOcxbLZvniZ0yAr3VNTO3bDrPpKwZBam4yD3arDItTMQ4l/+Kw01I7eW9BFiqsnL
5AZuQkz3/l2EF/v7j+Puh8dgQ6OqfmaOKn5TxFIeNUmT4MyU1BYkBbckzv4wAkN6
nKZUsag1zvoZDUzKimA0Qk/cHQYK9mqxT46UGawiTOoPyfrb3DTepnjjxGTVyIrk
jJCzT1g2vqZCS3iIJ1u2zW1t/Kuf71XZsdXpeSJ5auvje9U4y0b2ZQ9PUqzWIz7j
tnVlkLyL0p2hnw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:08:34 2026 by rpki-client