Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: mg3zkLTyFSRGWxghv6vGfeJbJ+ybbtcjEque0FC4ND4=
Subject key identifier: FF:93:F6:2A:00:47:C4:C3:48:81:D9:36:F3:D3:45:19:96:2A:17:D3
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 01A0D2006DC898E27FFCF62BEB465C87ACB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 17F7
Signing time: Thu 24 Sep 2026 06:00:38 +0000
Manifest this update: Thu 24 Sep 2026 06:00:38 +0000
Manifest next update: Fri 25 Sep 2026 06:00:38 +0000
Files and hashes: 1: 4lRlhSc9Jzpgo2qyOZgRPmeBS8E.roa (hash: fe25PIHE4R92mruy7bWhmhbyquYQv4J/2uT5rEcGMtI=)
2: Ik2OaILqhCdfNq-06I4Cq0Y22cQ.asa (hash: vilGb0G2dWsSUB/y/NcWpZIkxcNLagnLK2paHPZtJZk=)
3: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: o6ReYN2Q2zJcahf3EsYj8oQOXGdLoSGa55Cs4ijPUB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:6d:c8:98:e2:7f:fc:f6:2b:eb:46:5c:87:ac:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Sep 24 06:00:38 2026 GMT
Not After : Sep 25 06:00:38 2026 GMT
Subject: CN=ff93f62a0047c4c34881d936f3d34519962a17d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:b7:d2:31:8e:bd:65:c6:a1:d5:db:36:b3:
5a:ae:75:4e:0e:f2:97:42:e5:0f:e9:7c:f2:02:70:
e5:57:77:38:7e:f8:5b:fd:f9:b7:52:1f:8a:23:67:
19:d4:fb:51:ef:a4:03:f6:16:0d:28:09:40:4f:42:
0b:09:61:6c:a8:e1:fe:1a:02:b5:f2:d7:05:02:17:
cc:9d:d1:e0:cb:a4:49:59:ae:a0:bf:46:de:86:6a:
bb:7d:ca:d1:b6:2b:1f:8a:4f:c6:44:52:96:0e:fb:
38:25:74:df:8f:2d:55:d3:1a:70:d0:03:4c:a3:76:
f9:06:ba:c0:c8:81:ac:74:c4:f9:98:e6:ac:da:a7:
d1:18:25:6f:c4:7e:ad:dd:27:d5:f0:4c:68:82:07:
8e:a6:d7:c0:61:05:88:94:79:3b:dc:ef:32:c3:b6:
f9:3b:e4:38:7a:63:79:76:89:60:de:6f:0a:bb:8f:
91:7d:5c:dc:de:b9:79:a1:97:07:d5:cd:f0:19:1b:
0f:cc:4d:40:c1:44:e7:25:11:02:7e:94:ed:50:df:
c7:00:04:d4:cd:15:dd:83:9d:ea:7a:55:a7:8c:b0:
be:75:c8:f4:71:e5:69:00:c5:bf:1d:63:f9:ff:ea:
9e:4a:38:6e:82:14:8b:71:a9:c7:e6:38:1f:b7:6c:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:93:F6:2A:00:47:C4:C3:48:81:D9:36:F3:D3:45:19:96:2A:17:D3
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:12:aa:85:09:09:7a:0b:21:3e:2d:62:06:d5:6c:fa:52:e0:
b6:96:78:6a:64:b1:9d:76:6f:ff:aa:8d:de:f7:a4:1f:a0:df:
90:05:a2:2c:14:32:37:dc:5d:05:c0:d3:b3:6f:43:71:b2:e4:
aa:89:3f:27:f5:56:49:76:3e:8f:bc:0e:61:93:26:20:36:1a:
bd:5c:de:e6:c2:cf:5c:aa:9a:78:2a:25:ff:15:80:6f:67:cc:
38:b8:34:cd:8e:f7:0d:d9:27:78:61:31:68:74:f4:26:15:2d:
e5:45:7a:10:4f:a5:5d:02:5d:bb:b5:22:af:b7:45:6e:1d:78:
40:36:cf:76:ce:19:76:e9:71:d0:97:8b:77:14:c5:59:3b:a5:
f4:ee:ac:93:51:42:9a:ea:32:29:42:9e:54:46:b2:c8:1f:d2:
4d:19:6a:9c:6b:24:18:96:42:91:56:42:60:ff:b6:48:ea:f0:
38:df:fc:49:95:30:8f:12:d8:c2:e4:91:d4:93:7c:a2:84:9c:
85:73:c5:53:9f:49:7a:6b:72:7a:0f:1b:85:37:cc:6e:58:15:
40:07:ae:18:1d:8a:eb:3e:b7:92:05:3e:9b:e0:7a:96:30:50:
31:34:1d:de:dc:ac:48:2c:55:a5:fc:9a:e8:7f:ea:0c:70:8d:
c9:28:b5:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAG3ImOJ//PYr60Zch6y3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOTJjNDdkYjhhMjE5MzExNTQ2MDVkNTc2YzNiNzM0MWQw
NmI0YjQwHhcNMjYwOTI0MDYwMDM4WhcNMjYwOTI1MDYwMDM4WjAzMTEwLwYDVQQD
EyhmZjkzZjYyYTAwNDdjNGMzNDg4MWQ5MzZmM2QzNDUxOTk2MmExN2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPe30jGOvWXGodXbNrNarnVODvKX
QuUP6XzyAnDlV3c4fvhb/fm3Uh+KI2cZ1PtR76QD9hYNKAlAT0ILCWFsqOH+GgK1
8tcFAhfMndHgy6RJWa6gv0behmq7fcrRtisfik/GRFKWDvs4JXTfjy1V0xpw0ANM
o3b5BrrAyIGsdMT5mOas2qfRGCVvxH6t3SfV8ExoggeOptfAYQWIlHk73O8yw7b5
O+Q4emN5dolg3m8Ku4+RfVzc3rl5oZcH1c3wGRsPzE1AwUTnJRECfpTtUN/HAATU
zRXdg53qelWnjLC+dcj0ceVpAMW/HWP5/+qeSjhughSLcanH5jgft2wuuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+T9ioAR8TDSIHZNvPTRRmWKhfTMB8GA1UdIwQY
MBaAFECSxH24ohkxFUYF1XbDtzQdBrS0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYt
OGEzNmE2ZmFjZDUwLzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iMjI4ZDktN2ZmMy00YzQwLTk1YTYtOGEzNmE2ZmFjZDUw
LzEvUUpMRWZiaWlHVEVWUmdYVmRzTzNOQjBHdExRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxKqhQkJ
egshPi1iBtVs+lLgtpZ4amSxnXZv/6qN3vekH6DfkAWiLBQyN9xdBcDTs29DcbLk
qok/J/VWSXY+j7wOYZMmIDYavVze5sLPXKqaeCol/xWAb2fMOLg0zY73DdkneGEx
aHT0JhUt5UV6EE+lXQJdu7Uir7dFbh14QDbPds4Zdulx0JeLdxTFWTul9O6sk1FC
muoyKUKeVEayyB/STRlqnGskGJZCkVZCYP+2SOrwON/8SZUwjxLYwuSR1JN8ooSc
hXPFU59Jemtyeg8bhTfMblgVQAeuGB2K6z63kgU+m+B6ljBQMTQd3tysSCxVpfya
6H/qDHCNySi1sA==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:41:22 2026 by rpki-client