Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: cm1X9MGaIi+QcElNETuXR4PwxeNbXH2YRk9u/elee7M=
Subject key identifier: B7:0C:70:87:08:F2:AA:74:E9:D1:EF:83:D2:C4:39:EF:1D:37:F0:E5
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 01A0D94C81EB4C945389ED2D48B30DE1C7DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 16:01:04 +0000
Manifest this update: Fri 25 Sep 2026 16:01:04 +0000
Manifest next update: Sat 26 Sep 2026 16:01:04 +0000
Files and hashes: 1: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: jHAQDt5Ol2Q0Rpu+ef8PdTSVrVl3b0BjwKY7ha+XMps=)
2: gWRBDddMyWqh-LIfhr099iJ3yoM.roa (hash: miOqJ9LKG8Eyc/AIL8Ov13TsNXdMaSWxli/p6/FIhTs=)
3: nkIfu7bImABod5-85N1FwAXx42g.roa (hash: 9hvhnUz5j9QQtDK6csAcjLrvvxwu/x+GSH7qTRDcSxc=)
4: uHGjwPoMHu2IEBccrs2elf1N18A.roa (hash: g4Yg85Lk+WZoS7yWIAuAp+ehz/I0N5gf+zz3O65XQ14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:81:eb:4c:94:53:89:ed:2d:48:b3:0d:e1:c7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Sep 25 16:01:04 2026 GMT
Not After : Sep 26 16:01:04 2026 GMT
Subject: CN=b70c708708f2aa74e9d1ef83d2c439ef1d37f0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:af:33:84:54:bc:0c:6d:78:2e:f9:1a:e3:
bc:d4:fd:c3:fd:54:9c:d5:3a:e5:86:27:59:96:de:
2d:1b:b3:a6:df:84:89:76:8e:5c:1e:9e:5b:05:d2:
ef:b0:c6:ed:75:ac:84:2c:cc:22:45:88:6e:47:11:
88:40:73:a0:fb:c6:12:90:18:89:11:2b:ab:dc:a7:
5a:e7:05:b1:a1:0a:e9:96:6d:c5:d6:70:5a:75:54:
97:f8:7e:02:71:30:59:37:a5:93:4e:c6:21:7d:bf:
d5:4b:82:90:07:c7:1e:d3:40:48:29:c9:e8:75:8f:
e3:27:e3:90:6e:43:27:4d:0e:ff:ec:ef:31:a2:6f:
5c:c0:dd:3a:5a:aa:40:24:19:07:5d:2f:e3:38:a2:
af:4c:d6:24:d5:b8:97:ed:82:e8:fa:af:6c:70:f6:
ae:99:29:b4:54:23:58:b8:00:d3:77:64:6c:6e:90:
f3:51:86:a0:d9:6c:e7:03:69:82:da:8d:ee:ba:ec:
db:f1:11:d5:ab:c2:60:d9:da:f7:c3:95:ac:c9:24:
87:ab:a6:5e:14:92:eb:61:25:38:e0:e5:bc:d2:a6:
53:11:dc:a7:9c:1a:ba:cb:9e:e4:eb:5a:eb:e7:70:
d6:df:81:68:55:25:0c:44:19:db:a8:9a:4b:a5:ea:
0f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0C:70:87:08:F2:AA:74:E9:D1:EF:83:D2:C4:39:EF:1D:37:F0:E5
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b4:2d:06:5b:aa:be:b0:2d:2b:c6:dc:53:27:5d:94:2a:3b:
bf:60:34:b1:be:c5:6a:c0:f1:5f:2d:c7:8d:50:39:e8:2b:26:
01:64:cf:06:15:22:71:7d:b2:18:dc:3b:a6:13:18:5e:21:ee:
f6:95:10:93:cb:a3:62:0a:7a:2a:c8:a2:50:02:11:e6:c3:3f:
5b:94:ca:41:99:05:8b:53:33:7a:98:ca:43:89:9d:f0:2b:eb:
99:4e:45:8d:16:37:7d:93:96:f1:1d:7b:9f:ef:35:5d:a5:ae:
80:03:a3:27:22:45:0a:0f:2c:91:eb:a9:71:e8:2c:6b:a1:83:
02:e4:16:99:cc:f8:d6:02:56:1f:b4:29:4d:dc:92:b3:01:eb:
bb:23:a5:49:f1:95:b0:6e:4e:3a:bf:1d:34:b9:07:04:dd:60:
eb:b1:2c:72:bb:2b:2e:26:2b:fc:4f:ec:b1:3e:e5:ac:b8:ea:
b5:31:9b:d4:65:6c:16:b5:e2:c7:4b:3a:a5:b3:3e:4a:9f:12:
ee:67:4d:58:01:c3:45:69:ea:04:d9:14:fd:0a:99:8d:03:43:
78:04:7b:bd:0f:c3:21:2a:4f:88:46:e1:1f:5b:dd:26:a2:f3:
c9:e7:3f:da:5c:a1:3d:ff:a0:fb:0c:ef:f3:e1:19:90:18:31:
3a:e2:c3:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTIHrTJRTie0tSLMN4cfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZmFkNzk1NDhhZmM1YzgzZTU5YmJmZTM4OGM2NDQ5MmNi
NTUwMTMwHhcNMjYwOTI1MTYwMTA0WhcNMjYwOTI2MTYwMTA0WjAzMTEwLwYDVQQD
EyhiNzBjNzA4NzA4ZjJhYTc0ZTlkMWVmODNkMmM0MzllZjFkMzdmMGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMavM4RUvAxteC75GuO81P3D/VSc
1TrlhidZlt4tG7Om34SJdo5cHp5bBdLvsMbtdayELMwiRYhuRxGIQHOg+8YSkBiJ
ESur3Kda5wWxoQrplm3F1nBadVSX+H4CcTBZN6WTTsYhfb/VS4KQB8ce00BIKcno
dY/jJ+OQbkMnTQ7/7O8xom9cwN06WqpAJBkHXS/jOKKvTNYk1biX7YLo+q9scPau
mSm0VCNYuADTd2RsbpDzUYag2WznA2mC2o3uuuzb8RHVq8Jg2dr3w5WsySSHq6Ze
FJLrYSU44OW80qZTEdynnBq6y57k61rr53DW34FoVSUMRBnbqJpLpeoPRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcMcIcI8qp06dHvg9LEOe8dN/DlMB8GA1UdIwQY
MBaAFEP615VIr8XIPlm7/jiMZEkstVATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWIt
ZmU4NTVkYWJiNzVlLzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWItZmU4NTVkYWJiNzVl
LzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHLQtBluq
vrAtK8bcUyddlCo7v2A0sb7FasDxXy3HjVA56CsmAWTPBhUicX2yGNw7phMYXiHu
9pUQk8ujYgp6KsiiUAIR5sM/W5TKQZkFi1MzepjKQ4md8CvrmU5FjRY3fZOW8R17
n+81XaWugAOjJyJFCg8skeupcegsa6GDAuQWmcz41gJWH7QpTdySswHruyOlSfGV
sG5OOr8dNLkHBN1g67EscrsrLiYr/E/ssT7lrLjqtTGb1GVsFrXix0s6pbM+Sp8S
7mdNWAHDRWnqBNkU/QqZjQNDeAR7vQ/DISpPiEbhH1vdJqLzyec/2lyhPf+g+wzv
8+EZkBgxOuLDsg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:27:23 2026 by rpki-client