Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: UC8HlwJB4GqOR303xgeOayGzT1Rfw0o4oLkQ92FurWk=
Subject key identifier: AC:5B:56:88:FC:4A:A4:0C:F1:17:FE:C9:F3:4A:D2:E9:BA:9A:DF:50
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 01A03E2894D42305152644D91BE819301830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1A21
Signing time: Wed 26 Aug 2026 13:00:41 +0000
Manifest this update: Wed 26 Aug 2026 13:00:41 +0000
Manifest next update: Thu 27 Aug 2026 13:00:41 +0000
Files and hashes: 1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: hWtrFYsW1gy2vvL+b/nRcmweF6asmnk7A+p33v9loNA=)
3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:28:94:d4:23:05:15:26:44:d9:1b:e8:19:30:18:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Aug 26 13:00:41 2026 GMT
Not After : Aug 27 13:00:41 2026 GMT
Subject: CN=ac5b5688fc4aa40cf117fec9f34ad2e9ba9adf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a8:ed:9c:db:67:ba:bf:7f:75:74:9a:aa:39:
62:9b:b7:cc:08:0f:77:2e:e4:e1:48:1a:bd:14:35:
9a:f6:83:a8:9e:41:5f:de:c1:f4:fd:f4:47:4b:88:
62:0c:ca:0b:53:ad:2c:0a:77:f2:a8:e6:d5:1a:63:
5e:78:a5:0a:06:40:35:78:e9:e8:b3:66:21:4e:ba:
13:f0:e7:ca:80:72:40:3c:b3:35:e1:61:d4:fb:7e:
74:eb:98:10:e2:cf:b1:34:e2:a3:51:b3:a0:64:0e:
9f:a8:05:c8:89:05:5c:fe:99:3b:59:9b:db:7f:58:
37:d7:79:a4:80:5a:48:cd:33:61:7f:3d:66:4c:23:
1d:68:e8:25:67:58:68:ed:54:c4:67:f0:a6:9a:95:
41:7d:a7:0f:75:26:68:42:ee:50:e1:3f:05:69:7d:
bb:d6:cc:f6:c2:35:58:02:ea:ef:ae:18:e7:fc:b4:
71:91:5e:4b:13:82:31:3b:d1:c7:c4:f0:ed:ce:f5:
81:46:c3:9b:3b:84:a2:e4:60:ae:0c:1c:a4:2f:36:
d8:5b:e6:3b:16:61:9f:ad:7e:46:de:aa:f8:58:91:
dc:da:0c:81:36:c1:4a:1f:7e:00:30:01:3e:50:a6:
91:6b:a6:54:2a:19:06:9f:e3:9c:86:67:25:66:f6:
df:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:56:88:FC:4A:A4:0C:F1:17:FE:C9:F3:4A:D2:E9:BA:9A:DF:50
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:90:51:76:cf:a5:8d:9d:c6:63:00:34:68:8f:57:dd:78:88:
b6:b5:5f:be:16:68:12:d8:ed:d5:13:f1:05:8e:63:fc:9c:0a:
7f:3e:88:47:e2:03:e0:bb:6f:33:2c:05:13:e9:86:64:ab:6e:
e4:72:31:b7:96:41:de:c0:b0:f9:f1:e6:09:e4:60:8e:80:b5:
65:be:e3:59:a7:ee:61:95:19:2e:df:43:3b:54:ab:8a:b3:9f:
50:df:f1:51:93:f7:92:ff:94:09:e4:85:95:24:4f:65:9f:9e:
0b:08:3d:0f:7c:2a:cb:f9:71:d0:93:1e:b9:35:41:af:c6:00:
8c:5f:e1:37:7f:19:7a:a1:8e:43:27:bb:a8:25:98:80:70:39:
33:73:a6:09:47:86:74:bf:38:d0:40:26:56:62:73:ad:76:99:
5b:8d:c2:35:cb:86:be:6a:61:b8:54:84:77:70:de:5b:5d:67:
e8:c8:28:9a:36:7a:5b:34:b1:45:82:16:f7:04:98:ed:ef:29:
df:46:4c:09:29:1e:f2:9e:b6:a8:a0:f4:b7:cc:ab:12:34:e4:
9d:0c:d8:a0:e1:d1:60:0d:0d:0c:4e:3d:e6:6c:5a:23:8d:39:
5e:8e:11:79:a8:77:e0:c7:68:41:1c:cc:47:6d:34:16:00:1f:
98:d6:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:23 2026 by rpki-client