Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: jPN92Z9pbjEHl1lxKF8UYwoNRND+5YhdExkCCE4CgDA=
Subject key identifier: 0C:AF:D1:67:AD:96:64:24:59:FC:56:E8:AF:6A:A6:CD:97:A4:EF:2D
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 01A199C6672033F53672F2E63DC4B3C71B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1AD5
Signing time: Mon 02 Nov 2026 01:01:18 +0000
Manifest this update: Mon 02 Nov 2026 01:01:18 +0000
Manifest next update: Tue 03 Nov 2026 01:01:18 +0000
Files and hashes: 1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: BxXGC2GK0wyQVSPWOHqmi4b5lEIBf92+tPxVnPMcNgc=)
3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:c6:67:20:33:f5:36:72:f2:e6:3d:c4:b3:c7:1b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Nov 2 01:01:18 2026 GMT
Not After : Nov 3 01:01:18 2026 GMT
Subject: CN=0cafd167ad96642459fc56e8af6aa6cd97a4ef2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5d:f5:43:e4:ea:bc:4a:b4:5f:02:f9:d8:e2:
27:92:4f:f5:df:6f:36:c2:64:4e:97:a7:c9:37:c4:
cc:7d:c1:d0:1e:27:09:62:af:85:01:35:3e:bf:8b:
d7:d3:59:c8:5e:31:e9:41:1a:d1:1c:10:7c:ea:7a:
42:63:ac:32:fd:8e:5d:b4:18:70:1e:79:21:61:c2:
96:11:b2:77:15:fc:2e:4e:76:ac:18:c8:e4:9d:f3:
f7:b8:ef:37:9e:05:0f:8e:6b:f8:59:c3:e1:8f:30:
c1:67:1d:e1:08:94:0d:2f:75:f3:03:13:05:b0:f1:
eb:ac:15:c8:88:05:96:e8:fb:3d:e9:9f:1a:0b:ad:
12:0f:b4:34:85:98:bd:50:06:12:79:2e:e4:e6:2e:
20:71:b3:a1:f7:f6:30:aa:34:00:64:48:5a:c5:80:
13:28:eb:bc:3a:49:c8:d3:00:c6:2b:3c:37:f6:1f:
91:50:b2:a4:bc:19:70:f8:63:2c:8d:5d:35:1e:fc:
c6:79:6a:38:05:03:8a:dd:c0:82:26:8d:41:ea:0d:
5d:c9:ae:f0:be:ff:69:97:0f:1a:b3:86:4f:25:04:
5e:c0:c4:5a:0c:12:d5:56:8a:29:04:96:c3:5d:8b:
44:1c:be:65:39:f5:f8:6a:f0:ee:de:bb:39:75:21:
a3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:AF:D1:67:AD:96:64:24:59:FC:56:E8:AF:6A:A6:CD:97:A4:EF:2D
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:83:ae:d0:1e:97:64:ae:a6:43:01:29:31:39:8e:bc:9b:fb:
d8:17:d3:47:a0:a8:52:84:4d:23:3c:42:06:e6:c7:b7:9e:5d:
70:2d:e0:d1:17:44:a3:33:bc:8c:5a:d1:09:0f:09:be:84:a2:
e6:c0:15:8a:f0:a8:bb:3c:6c:14:2e:60:47:74:0b:12:4c:5b:
af:7c:be:46:05:5e:ea:7a:6e:92:72:d4:8a:a6:62:e3:fc:95:
d2:ff:b5:a1:fb:54:b0:72:12:3f:e9:27:e2:5e:93:48:5a:c2:
2b:69:9c:27:5f:e5:6f:da:86:ff:36:73:b8:d7:d7:d5:13:88:
b3:7f:da:f5:cb:ff:f3:4b:36:8c:51:60:14:12:39:a5:b4:73:
d4:be:f4:ca:e6:41:c8:89:f2:b6:af:43:55:12:d5:95:3e:8d:
6e:31:1a:6b:75:29:0f:9c:a4:c7:13:28:6e:66:3f:28:cc:f6:
6a:8d:e6:58:7a:0e:2f:2c:9c:28:de:77:cd:ac:2a:d1:98:65:
a2:6e:0c:18:b3:52:73:8c:72:62:93:43:cd:ac:35:ca:96:6d:
65:11:fd:47:a7:6c:cd:71:05:30:bf:e5:1d:71:b8:3b:21:be:
56:64:4e:bb:32:74:1e:04:35:a4:2b:f4:eb:cc:2c:2e:06:42:
59:c4:bb:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:28:03 2026 by rpki-client