Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
File: QCHf817fDObkKNav_CEsRxdnnuE.mft (raw, json)
Hash identifier: 9wpAk4x/K+uX6kIJR2rMSgRbhNERKHZ/TQsa9cgQRXo=
Subject key identifier: E2:6B:64:A3:AA:8D:56:10:47:46:34:C0:4A:81:52:5D:A3:D1:54:6E
Authority key identifier: 40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
Certificate issuer: /CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Certificate serial: 01A197D807E30697641B0C4B083B651FCFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
Manifest number: 1AD4
Signing time: Sun 01 Nov 2026 16:01:19 +0000
Manifest this update: Sun 01 Nov 2026 16:01:19 +0000
Manifest next update: Mon 02 Nov 2026 16:01:19 +0000
Files and hashes: 1: 5aiPK-AjdStx2wVba_jLR8yEmJE.asa (hash: 0IErVbdaESGxXE+QIywfXtfH1IshFTMGY+X2vmTVMAE=)
2: QCHf817fDObkKNav_CEsRxdnnuE.crl (hash: iZ11zmBrGtoa4KQpH/EUXA/J+9TJIVL3OPx3Ib7wZ5w=)
3: oH1r4igjZpHu8rKsfXxiqzBUl84.roa (hash: X0wT9e0aq2sCh5h0E8HXfviT92xXoJ7QSCDrREimpr8=)
4: r8t0mnOfuf-XZlUByZSmwxL5C8U.roa (hash: NIHY9VYRcz1i7SUH3PrDl1wZP8mWVi3+Xuf3Zc+uw+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:d8:07:e3:06:97:64:1b:0c:4b:08:3b:65:1f:cf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4021dff35edf0ce6e428d6affc212c4717679ee1
Validity
Not Before: Nov 1 16:01:19 2026 GMT
Not After : Nov 2 16:01:19 2026 GMT
Subject: CN=e26b64a3aa8d5610474634c04a81525da3d1546e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:50:c9:69:70:04:8a:a6:9d:ac:24:6e:ee:ee:
90:f0:6b:e9:71:98:a0:71:cc:42:ec:9b:f4:12:2c:
65:9d:47:77:a0:9f:f6:5f:c1:23:42:59:67:7d:af:
34:d1:41:05:d3:3d:50:5f:ec:0d:d2:cb:e1:b5:e9:
0d:f1:9f:e9:a0:95:58:f5:a3:1e:96:f9:a6:ec:be:
3e:22:05:54:b8:0b:b5:1c:2f:e2:41:84:40:e3:b0:
da:d3:dd:a1:f0:ad:d1:47:b9:48:6a:ba:00:c4:48:
93:f1:6b:a5:75:b0:13:fe:6c:93:eb:63:80:9d:b5:
d0:4f:a7:5a:9e:32:bf:1f:ed:b0:d7:95:83:12:ce:
3d:62:8d:d8:31:c9:3c:ac:d5:de:d2:5a:ad:09:da:
de:cd:8b:cd:92:63:e0:a6:ed:85:a2:35:ed:67:85:
03:a2:60:48:50:8c:49:c0:6e:da:a5:fd:52:c1:b5:
49:82:26:c7:be:45:7a:74:82:5c:9e:1c:10:3a:c4:
0e:a1:83:6a:97:83:89:3e:fd:c4:9e:69:70:fa:f9:
3c:5e:2b:56:e0:31:c9:25:8f:88:b1:9c:d0:03:d0:
73:97:66:4f:eb:b3:d2:03:79:4c:41:f0:ef:87:33:
54:be:24:1e:fc:7e:87:37:0c:6f:4f:fa:dc:d8:be:
96:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6B:64:A3:AA:8D:56:10:47:46:34:C0:4A:81:52:5D:A3:D1:54:6E
X509v3 Authority Key Identifier:
keyid:40:21:DF:F3:5E:DF:0C:E6:E4:28:D6:AF:FC:21:2C:47:17:67:9E:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCHf817fDObkKNav_CEsRxdnnuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/014088-5684-49c2-b630-eb53a518c263/1/QCHf817fDObkKNav_CEsRxdnnuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b2:23:0b:99:73:2b:60:0a:0e:27:4c:fa:dc:82:85:4e:67:
48:8e:7d:c6:ee:eb:10:f9:a2:9c:08:35:d4:c8:cd:9f:d0:c3:
e3:6c:cc:bf:34:93:31:d0:26:00:c3:a7:be:06:13:40:08:d0:
d2:b2:f0:ac:de:a1:ef:67:b0:a7:fe:73:1c:b0:0b:15:28:81:
b0:90:85:95:d3:29:02:58:92:04:9e:28:74:53:af:69:23:f1:
fe:f8:8b:2b:23:01:84:69:0b:c2:f0:ba:5c:7a:ad:ed:0b:60:
1c:50:4b:43:68:03:2d:d5:6e:99:63:fe:85:fa:8b:21:75:0a:
a5:f3:10:6c:7e:8d:21:74:f6:40:2e:ce:e5:cf:f8:9c:35:8f:
14:cf:4c:43:f0:7a:73:0b:46:9b:37:3c:94:6b:a5:0e:84:19:
d0:4d:2c:40:02:bb:a7:26:b9:ff:04:57:94:83:dc:98:4f:d1:
cc:b5:24:17:e7:d5:5d:a2:48:01:28:bf:94:ef:08:b3:4f:5a:
a6:23:5b:3a:3c:35:44:0a:ff:19:40:17:8a:86:29:fd:a8:af:
e9:93:0e:bb:d3:b0:72:a2:75:66:db:7f:15:b6:c6:33:62:99:
3a:3b:19:b9:d0:16:3f:ff:e2:49:ba:c9:9e:24:fd:d8:b6:5a:
75:16:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 03:17:50 2026 by rpki-client