Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
File: QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft (raw, json)
Hash identifier: ZFDJpoRuJHgl9/Su8O2kPoeAqOio2fKeJQPartUIDzE=
Subject key identifier: 3C:23:CC:1A:D0:7E:73:AE:09:7F:11:A3:F6:56:1D:D3:AD:38:73:12
Authority key identifier: 42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
Certificate issuer: /CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Certificate serial: 01A11184A6EF8CF6F80EA7C224DC41FAA1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
Manifest number: 1A8F
Signing time: Tue 06 Oct 2026 14:01:08 +0000
Manifest this update: Tue 06 Oct 2026 14:01:08 +0000
Manifest next update: Wed 07 Oct 2026 14:01:08 +0000
Files and hashes: 1: 6P9heqcjWC1rgYXIRmhdx-97RQI.roa (hash: Wmt5NIZ7B735D829/2kh7N0lg+ZEmMiQ2DIicb7NPis=)
2: CeZNOwjANN4HMY30DhoMsqh7kc0.roa (hash: Eu0R/pH+qqACExevGNpBWZPYFKUIF3usiZ6pHAqzeUg=)
3: H9vdOoMnNvcj9O3pGR64p1cw7mI.roa (hash: IwVpFDPCmKPKuO6vfa3AZGtMLLchqRt7QtT34xytDoc=)
4: QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl (hash: bMvh6763CteDavt/Wjo0CESKdVHhmdrjx5eAqIbe8ws=)
5: lhRrxFX2ddbsLjVa14L7LqCeSk0.roa (hash: VWU2mBVhm/guPrYibtgL6oEOWFxdxHR0S2Eb5+SbI98=)
6: zjfJO2RH5SIxJF2laNjzaWPFUmE.roa (hash: CH64B9ZYUzeZok1rFlTbLuLN/vSRqUxl6QpPK+7D75o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:84:a6:ef:8c:f6:f8:0e:a7:c2:24:dc:41:fa:a1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427ce5719caa681adbd493a8d9a38a675d6bd639
Validity
Not Before: Oct 6 14:01:08 2026 GMT
Not After : Oct 7 14:01:08 2026 GMT
Subject: CN=3c23cc1ad07e73ae097f11a3f6561dd3ad387312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:15:15:28:70:d6:de:a5:4c:0a:71:63:71:d9:
26:5b:7e:37:9a:8f:cb:75:83:67:55:54:bd:7f:ac:
2c:a0:c0:1d:f8:08:a0:22:cb:a2:11:e3:4d:c8:07:
9d:83:66:dc:ab:a7:09:79:d5:c5:30:2a:b8:15:2a:
0b:ee:b5:bb:ed:54:17:af:25:24:08:fc:a5:b3:96:
fb:9c:71:8d:80:db:75:7c:4b:ff:80:4d:74:9a:f2:
61:2f:4b:df:e1:6d:33:0f:69:53:4c:0d:99:ad:58:
c6:db:1e:ac:09:97:1e:ce:5b:62:91:64:62:8d:ef:
c8:19:3b:d8:97:2c:61:d2:42:a7:78:28:d6:6c:28:
17:d3:23:c6:17:79:ad:c0:27:09:e4:e2:11:00:39:
00:96:ea:92:9c:ac:e8:36:55:6e:61:0b:f7:05:03:
92:25:50:9f:c3:87:03:53:76:20:c6:6a:28:f5:b8:
74:5a:e5:a6:c6:57:9f:c5:a6:9e:06:86:b3:42:87:
65:e6:68:bb:a7:9b:e5:cc:e3:c7:d9:ca:5c:70:f5:
e4:4c:af:c3:54:cd:84:74:23:6b:76:9d:41:7d:30:
3d:73:6c:9a:9a:87:0b:c7:db:5c:f4:d9:6c:1a:14:
26:b0:f5:81:22:05:8a:44:cb:f0:2f:57:ce:de:df:
2f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:23:CC:1A:D0:7E:73:AE:09:7F:11:A3:F6:56:1D:D3:AD:38:73:12
X509v3 Authority Key Identifier:
keyid:42:7C:E5:71:9C:AA:68:1A:DB:D4:93:A8:D9:A3:8A:67:5D:6B:D6:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnzlcZyqaBrb1JOo2aOKZ11r1jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3e3548-fdb5-4ded-ba59-091c2d303fe8/1/QnzlcZyqaBrb1JOo2aOKZ11r1jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:57:2b:3e:13:bd:4a:8c:e0:71:58:bd:f7:33:c7:e8:09:51:
a7:fd:22:02:d0:63:78:5a:11:d6:61:a0:8b:f9:7f:e5:77:76:
79:f9:db:03:d6:2a:b7:4b:75:56:b7:5f:c8:a9:f4:41:5d:e3:
ba:82:92:2d:0d:a1:da:a8:e9:89:34:b0:eb:d0:12:9d:df:2d:
9a:8a:a5:e7:ed:bb:66:f1:6f:38:08:47:db:a7:62:8a:89:94:
b8:59:2d:64:40:99:fd:7f:d0:05:ef:38:98:f0:6f:fe:03:5c:
03:f4:af:64:24:24:3c:bf:06:29:c0:05:be:fe:8e:9a:aa:c1:
69:47:e1:79:14:bd:ed:9f:de:db:93:d9:d4:ea:8b:9b:63:60:
88:e9:ec:34:04:52:5d:29:18:6b:28:7b:91:07:43:61:9a:80:
41:d9:3a:36:26:39:3b:73:6f:eb:9b:9a:92:5d:32:b0:5b:04:
24:6e:9f:6c:8b:fd:66:85:f5:0a:06:68:a8:40:93:c1:d4:c4:
5d:7b:dc:19:3f:e1:ef:5a:26:d0:c9:e4:34:d8:1d:ec:0e:bd:
25:47:ee:b3:a4:b1:b3:9a:1e:5c:4c:7c:49:f7:5c:7a:2f:44:
7d:63:c5:a1:d3:ba:72:cc:1b:eb:25:5c:87:ad:9f:d1:83:eb:
46:b0:bc:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaERhKbvjPb4DqfCJNxB+qGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyN2NlNTcxOWNhYTY4MWFkYmQ0OTNhOGQ5YTM4YTY3NWQ2
YmQ2MzkwHhcNMjYxMDA2MTQwMTA4WhcNMjYxMDA3MTQwMTA4WjAzMTEwLwYDVQQD
EygzYzIzY2MxYWQwN2U3M2FlMDk3ZjExYTNmNjU2MWRkM2FkMzg3MzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxUVKHDW3qVMCnFjcdkmW343mo/L
dYNnVVS9f6wsoMAd+AigIsuiEeNNyAedg2bcq6cJedXFMCq4FSoL7rW77VQXryUk
CPyls5b7nHGNgNt1fEv/gE10mvJhL0vf4W0zD2lTTA2ZrVjG2x6sCZcezltikWRi
je/IGTvYlyxh0kKneCjWbCgX0yPGF3mtwCcJ5OIRADkAluqSnKzoNlVuYQv3BQOS
JVCfw4cDU3Ygxmoo9bh0WuWmxlefxaaeBoazQodl5mi7p5vlzOPH2cpccPXkTK/D
VM2EdCNrdp1BfTA9c2yamocLx9tc9NlsGhQmsPWBIgWKRMvwL1fO3t8vLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwjzBrQfnOuCX8Ro/ZWHdOtOHMSMB8GA1UdIwQY
MBaAFEJ85XGcqmga29STqNmjimdda9Y5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTkt
MDkxYzJkMzAzZmU4LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8zZTM1NDgtZmRiNS00ZGVkLWJhNTktMDkxYzJkMzAzZmU4
LzEvUW56bGNaeXFhQnJiMUpPbzJhT0taMTFyMWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1crPhO9
SozgcVi99zPH6AlRp/0iAtBjeFoR1mGgi/l/5Xd2efnbA9Yqt0t1VrdfyKn0QV3j
uoKSLQ2h2qjpiTSw69ASnd8tmoql5+27ZvFvOAhH26diiomUuFktZECZ/X/QBe84
mPBv/gNcA/SvZCQkPL8GKcAFvv6OmqrBaUfheRS97Z/e25PZ1OqLm2NgiOnsNARS
XSkYayh7kQdDYZqAQdk6NiY5O3Nv65uakl0ysFsEJG6fbIv9ZoX1CgZoqECTwdTE
XXvcGT/h71om0MnkNNgd7A69JUfus6Sxs5oeXEx8Sfdcei9EfWPFodO6cswb6yVc
h62f0YPrRrC8zQ==
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:30:01 2026 by rpki-client