Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: +xG04+yUSdTKai7LdsBmB72FLG+hd7Q1RJwPXXpivjA=
Subject key identifier: 39:86:86:AB:E4:D7:16:F4:EB:E3:7E:D6:F9:EF:BB:AD:F0:FB:D6:37
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 01A1841A1A791D5FBA9E925B9F3FC3C39F20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1718
Signing time: Wed 28 Oct 2026 20:01:05 +0000
Manifest this update: Wed 28 Oct 2026 20:01:05 +0000
Manifest next update: Thu 29 Oct 2026 20:01:05 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: FTDRhmdtUtO9JK++BbZR7k5gpChdJX4cLcz4iBi+sPQ=)
2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:1a:79:1d:5f:ba:9e:92:5b:9f:3f:c3:c3:9f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Oct 28 20:01:05 2026 GMT
Not After : Oct 29 20:01:05 2026 GMT
Subject: CN=398686abe4d716f4ebe37ed6f9efbbadf0fbd637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0a:61:87:cd:4d:6e:6c:3e:06:ab:89:36:b2:
25:90:98:08:f1:d8:15:16:bc:83:43:e5:6f:75:53:
03:f0:bc:bd:74:11:81:4f:9b:ee:a1:fc:31:5f:07:
49:83:37:c0:73:de:9e:36:30:65:d9:eb:a1:5c:2a:
39:7d:85:7d:50:83:a4:d8:64:1c:17:05:37:28:24:
c9:a6:ee:f0:c9:3e:5d:41:d0:cd:6a:ba:9e:b1:81:
a2:b7:34:76:f8:26:50:a2:ce:59:87:d7:f0:99:fe:
59:11:72:71:d2:78:df:ed:83:45:99:be:57:b3:b9:
96:ab:67:a7:c3:86:ab:02:f8:4b:fd:1d:d3:ac:e2:
1a:61:ab:6e:90:88:0f:83:2a:ad:2d:9f:67:59:9e:
de:2f:b6:e6:96:7f:69:7e:57:a4:76:7f:a4:e7:63:
7a:01:3a:40:c8:64:30:7b:8f:a6:19:68:6f:3a:a7:
d6:5a:56:67:12:b3:3c:42:2c:97:d5:ec:8c:32:7d:
c0:bf:76:cb:61:c4:4c:f7:2c:a0:2a:ad:c7:93:95:
cf:8d:80:52:c8:88:c6:e7:d3:92:01:7b:81:0b:7f:
1d:8a:a0:cb:2d:c0:c9:22:7e:78:23:d6:19:a1:43:
c5:44:35:ed:b7:3d:c1:ed:58:be:00:f1:57:88:f8:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:86:86:AB:E4:D7:16:F4:EB:E3:7E:D6:F9:EF:BB:AD:F0:FB:D6:37
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:9b:15:d8:8d:d2:e5:43:0a:5b:2b:93:76:9a:26:c8:77:c4:
80:52:f7:f5:31:62:8b:19:4e:92:5e:69:40:dd:6b:2c:a8:d9:
2e:34:c3:b1:df:43:dc:f9:80:de:2d:4e:e1:4f:93:df:78:06:
7b:45:98:11:eb:52:45:c7:2e:41:84:56:65:aa:da:3b:76:eb:
f1:73:4a:a5:0a:3e:90:1b:6f:9a:1d:49:3e:ca:d9:03:1e:9c:
4c:7e:5d:24:f0:10:7a:e8:9b:90:60:a5:36:d6:ee:c2:b7:61:
c9:3a:7b:2b:3a:12:d8:07:66:5e:ab:9f:72:f0:f6:41:cc:a8:
c8:b8:8b:dd:72:b9:1e:34:79:21:4c:56:38:0b:47:92:2d:5b:
e5:99:82:e4:a4:f1:81:f1:d1:22:77:c5:45:a3:92:b4:84:ea:
de:4d:6e:50:5d:04:c9:89:e7:ae:4f:bc:37:03:d8:ff:3c:04:
6f:87:2e:53:bd:d4:f7:d0:66:a7:6c:16:f4:f4:01:c6:de:35:
17:c7:01:25:89:ea:01:3c:b9:c5:02:19:de:7c:b5:ae:c9:1d:
f4:ca:53:01:c2:97:81:f7:f2:2e:3c:ed:3d:5e:68:55:03:ee:
1f:11:f2:2a:19:56:9f:4e:a8:41:c9:1c:3b:95:af:14:66:2b:
73:7b:e3:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGEGhp5HV+6npJbnz/Dw58gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyMTE2Nzc0YWZiNWVkMWFjOTkyNmIwYmMyZDU3ZjhiODA1
OGIzZTcwHhcNMjYxMDI4MjAwMTA1WhcNMjYxMDI5MjAwMTA1WjAzMTEwLwYDVQQD
EygzOTg2ODZhYmU0ZDcxNmY0ZWJlMzdlZDZmOWVmYmJhZGYwZmJkNjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwphh81Nbmw+BquJNrIlkJgI8dgV
FryDQ+VvdVMD8Ly9dBGBT5vuofwxXwdJgzfAc96eNjBl2euhXCo5fYV9UIOk2GQc
FwU3KCTJpu7wyT5dQdDNarqesYGitzR2+CZQos5Zh9fwmf5ZEXJx0njf7YNFmb5X
s7mWq2enw4arAvhL/R3TrOIaYatukIgPgyqtLZ9nWZ7eL7bmln9pflekdn+k52N6
ATpAyGQwe4+mGWhvOqfWWlZnErM8QiyX1eyMMn3Av3bLYcRM9yygKq3Hk5XPjYBS
yIjG59OSAXuBC38diqDLLcDJIn54I9YZoUPFRDXttz3B7Vi+APFXiPhsAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmGhqvk1xb06+N+1vnvu63w+9Y3MB8GA1UdIwQY
MBaAFEIRZ3Svte0ayZJrC8LVf4uAWLPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEt
ZTk3Y2QzYWQ0ZGEzLzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xNzQ2MjctZTUyZi00ZmE2LWIzMzEtZTk3Y2QzYWQ0ZGEz
LzEvUWhGbmRLLTE3UnJKa21zTHd0Vl9pNEJZcy1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh5sV2I3S
5UMKWyuTdpomyHfEgFL39TFiixlOkl5pQN1rLKjZLjTDsd9D3PmA3i1O4U+T33gG
e0WYEetSRccuQYRWZaraO3br8XNKpQo+kBtvmh1JPsrZAx6cTH5dJPAQeuibkGCl
NtbuwrdhyTp7KzoS2AdmXqufcvD2QcyoyLiL3XK5HjR5IUxWOAtHki1b5ZmC5KTx
gfHRInfFRaOStITq3k1uUF0EyYnnrk+8NwPY/zwEb4cuU73U99Bmp2wW9PQBxt41
F8cBJYnqATy5xQIZ3ny1rskd9MpTAcKXgffyLjztPV5oVQPuHxHyKhlWn06oQckc
O5WvFGYrc3vjEg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 05:47:32 2026 by rpki-client