Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
File: qft75iSm8jMZjio089nZhCmrpGE.mft (raw, json)
Hash identifier: mrtOKA6pg7mhzxp34YneKxEkdDzieycr9UPIUmMcqVA=
Subject key identifier: 87:BF:0A:A0:7A:96:F4:F5:CC:71:68:A7:38:C4:18:24:0D:F0:8E:79
Authority key identifier: A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
Certificate issuer: /CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Certificate serial: 019F935C1145F063380053972855B695F2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
Manifest number: 0227
Signing time: Fri 24 Jul 2026 09:01:52 +0000
Manifest this update: Fri 24 Jul 2026 09:01:52 +0000
Manifest next update: Sat 25 Jul 2026 09:01:52 +0000
Files and hashes: 1: DEtXANHZs-ySfJ2DbeIG2FY0feA.roa (hash: CiC1X69cIhHbTBPnPYg9pS10KzYxN0NPXzJ/qp7bwgE=)
2: qft75iSm8jMZjio089nZhCmrpGE.crl (hash: ideaPhttDw1G3Dpb/rJnj0K07QLFBKkju5R8ulAQmXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:11:45:f0:63:38:00:53:97:28:55:b6:95:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fb7be624a6f233198e2a34f3d9d98429aba461
Validity
Not Before: Jul 24 09:01:52 2026 GMT
Not After : Jul 25 09:01:52 2026 GMT
Subject: CN=87bf0aa07a96f4f5cc7168a738c418240df08e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:5b:2f:8b:6f:0b:5a:b3:be:a3:f9:cd:bf:b6:
7f:af:49:60:f0:31:04:07:15:73:36:52:82:96:40:
5c:85:c6:4c:80:58:bb:d1:c0:90:97:00:2f:33:7a:
c3:58:d5:84:cc:01:06:fc:6e:e8:b6:c7:82:8c:29:
72:fa:5c:0a:c3:d6:54:95:44:bb:c8:06:d1:6f:8e:
3b:8a:fc:48:42:b0:f5:ef:28:ed:b8:c7:9a:b3:aa:
84:da:8e:d7:3d:1d:cd:78:50:0d:3b:3c:8e:b0:12:
89:df:92:65:65:99:b8:da:a9:9c:90:a0:6c:b1:60:
25:71:ce:ca:f9:fc:7e:29:8f:3c:3a:4b:b8:27:ca:
cb:43:9d:c0:f5:da:af:ea:da:0e:e5:8b:77:5a:7b:
12:b5:d0:74:51:9c:83:5c:28:08:53:2c:86:01:88:
af:75:1c:77:ea:e8:03:0f:f5:59:76:12:c1:2b:c3:
9d:6c:c1:dd:a3:f3:75:42:72:e8:96:e9:52:7d:d8:
f1:9e:c1:8f:80:60:93:d0:60:16:b8:c3:4d:fb:3b:
e0:5c:a0:14:8c:53:c4:0e:78:58:b0:56:41:50:e3:
65:78:1b:c9:f9:3c:f5:be:f9:94:29:a1:ef:0e:75:
56:2e:19:42:5e:2e:93:c5:78:d0:e7:49:6a:ca:4a:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BF:0A:A0:7A:96:F4:F5:CC:71:68:A7:38:C4:18:24:0D:F0:8E:79
X509v3 Authority Key Identifier:
keyid:A9:FB:7B:E6:24:A6:F2:33:19:8E:2A:34:F3:D9:D9:84:29:AB:A4:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qft75iSm8jMZjio089nZhCmrpGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/95b216-52b8-4053-a4ba-0a97bbf5f456/1/qft75iSm8jMZjio089nZhCmrpGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e4:de:07:a2:6d:91:1a:aa:c0:96:be:b0:7e:fd:49:34:7b:
9a:a9:dc:e1:61:e7:6c:70:cf:eb:09:23:a2:41:1c:16:55:9d:
71:4b:17:58:82:73:f7:b6:89:80:e6:45:1c:e1:bc:6e:7a:e1:
09:a7:dd:04:ff:e7:87:8c:60:00:93:65:05:ad:2c:9d:57:11:
61:ce:3f:e1:76:18:83:70:47:1b:6f:da:22:91:29:c8:43:d5:
3e:4a:64:99:93:ac:3e:a7:33:0e:cd:c9:40:a9:63:48:f4:ef:
f3:f1:ed:3c:67:25:6f:3e:40:1a:0c:2f:90:6c:5f:53:ed:55:
8f:50:4e:ae:77:1a:33:5b:e6:fc:e4:fb:1b:35:43:5f:db:38:
d3:b7:9f:fd:6a:fe:c4:84:00:65:fe:d7:c5:01:fe:b6:4b:03:
ed:e6:2e:c9:9e:b9:8f:f8:3f:cd:66:89:ff:89:79:d3:3e:0d:
8b:1a:c8:06:5a:32:ed:57:ea:7c:a2:8f:bf:5d:e3:4f:31:24:
b5:16:e0:de:90:5c:5e:50:a2:a7:5f:a6:3d:f5:ac:31:68:0a:
0a:00:36:f0:42:52:af:fe:6e:7a:0f:84:5a:09:7f:cf:e7:f3:
5c:b4:02:3f:f1:5b:cf:33:29:69:d2:3c:78:78:78:9f:1c:a1:
24:61:23:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TXBFF8GM4AFOXKFW2lfLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5ZmI3YmU2MjRhNmYyMzMxOThlMmEzNGYzZDlkOTg0Mjlh
YmE0NjEwHhcNMjYwNzI0MDkwMTUyWhcNMjYwNzI1MDkwMTUyWjAzMTEwLwYDVQQD
Eyg4N2JmMGFhMDdhOTZmNGY1Y2M3MTY4YTczOGM0MTgyNDBkZjA4ZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA81svi28LWrO+o/nNv7Z/r0lg8DEE
BxVzNlKClkBchcZMgFi70cCQlwAvM3rDWNWEzAEG/G7otseCjCly+lwKw9ZUlUS7
yAbRb447ivxIQrD17yjtuMeas6qE2o7XPR3NeFANOzyOsBKJ35JlZZm42qmckKBs
sWAlcc7K+fx+KY88Oku4J8rLQ53A9dqv6toO5Yt3WnsStdB0UZyDXCgIUyyGAYiv
dRx36ugDD/VZdhLBK8OdbMHdo/N1QnLolulSfdjxnsGPgGCT0GAWuMNN+zvgXKAU
jFPEDnhYsFZBUONleBvJ+Tz1vvmUKaHvDnVWLhlCXi6TxXjQ50lqykq+7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIe/CqB6lvT1zHFopzjEGCQN8I55MB8GA1UdIwQY
MBaAFKn7e+YkpvIzGY4qNPPZ2YQpq6RhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEt
MGE5N2JiZjVmNDU2LzEvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC85NWIyMTYtNTJiOC00MDUzLWE0YmEtMGE5N2JiZjVmNDU2
LzEvcWZ0NzVpU204ak1aamlvMDg5blpoQ21ycEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+TeB6Jt
kRqqwJa+sH79STR7mqnc4WHnbHDP6wkjokEcFlWdcUsXWIJz97aJgOZFHOG8bnrh
CafdBP/nh4xgAJNlBa0snVcRYc4/4XYYg3BHG2/aIpEpyEPVPkpkmZOsPqczDs3J
QKljSPTv8/HtPGclbz5AGgwvkGxfU+1Vj1BOrncaM1vm/OT7GzVDX9s407ef/Wr+
xIQAZf7XxQH+tksD7eYuyZ65j/g/zWaJ/4l50z4NixrIBloy7VfqfKKPv13jTzEk
tRbg3pBcXlCip1+mPfWsMWgKCgA28EJSr/5ueg+EWgl/z+fzXLQCP/FbzzMpadI8
eHh4nxyhJGEjeg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:45 2026 by rpki-client