Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: Q8kyxUz1Hc+Yte17kIwhcIGXKp97Zaq7rO6kfgjLXF4=
Subject key identifier: 68:4B:8B:3D:D6:22:4C:1E:FC:35:15:39:EC:AD:30:1E:53:F0:A2:DE
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 01A187F6881B28A0229114EAB8EC1C76FED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 171A
Signing time: Thu 29 Oct 2026 14:00:43 +0000
Manifest this update: Thu 29 Oct 2026 14:00:43 +0000
Manifest next update: Fri 30 Oct 2026 14:00:43 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: fqx7HCszmoTfTGESxXOy/JgsgOPyoEDpU43P4as5d/8=)
2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:88:1b:28:a0:22:91:14:ea:b8:ec:1c:76:fe:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Oct 29 14:00:43 2026 GMT
Not After : Oct 30 14:00:43 2026 GMT
Subject: CN=684b8b3dd6224c1efc351539ecad301e53f0a2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:4a:c2:08:76:7c:be:3b:8f:69:b9:50:95:
ae:12:af:93:cc:2b:4c:47:9d:cf:14:f4:a5:1b:92:
f7:15:59:0e:29:58:9c:a7:58:99:a9:1d:0b:8c:7e:
d3:69:eb:88:56:81:01:ed:94:f8:73:6a:2e:20:9e:
eb:fe:c9:60:ca:37:cd:05:52:3e:88:74:82:cc:71:
ba:9a:b8:be:ab:be:35:c4:81:18:fd:f9:bb:b8:90:
b5:9b:ac:bb:b9:b0:b5:44:e0:59:60:6f:51:4c:cd:
2a:eb:9b:1a:dc:3b:de:16:d9:2c:15:3c:68:9d:30:
a1:74:8d:f1:01:37:29:ce:f6:ae:6c:b9:0e:f1:c8:
fd:92:dc:24:c8:04:52:52:2d:66:92:6b:49:9b:4d:
76:9c:5e:9b:be:fe:00:bc:e2:95:42:96:c4:bb:a3:
00:0b:a2:59:bd:e1:8d:74:b2:b1:4a:64:82:c4:6c:
88:52:93:ac:81:59:74:47:f5:29:7c:2b:c4:fa:47:
54:d9:05:68:a6:bd:d6:72:cd:d5:2a:53:2c:b6:46:
31:11:e3:ed:23:30:db:73:b3:69:70:7b:f3:3e:9b:
49:c4:cf:54:e3:e3:59:58:3b:c2:d5:c2:58:44:bf:
fc:71:41:32:24:cf:9f:64:ac:df:a5:1c:6b:3f:d2:
1c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4B:8B:3D:D6:22:4C:1E:FC:35:15:39:EC:AD:30:1E:53:F0:A2:DE
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:60:9d:50:ba:c9:33:a9:35:60:be:5f:c8:4b:9c:80:9e:2a:
e6:b1:7a:8f:cc:ae:a6:52:ef:35:28:7b:d5:f1:f9:5e:dd:24:
01:65:0e:66:45:60:72:f5:bf:7b:eb:47:3f:76:a2:1a:2c:48:
c6:d8:be:26:dd:a9:15:b8:dc:0d:4e:56:a6:e2:64:a4:97:eb:
38:5f:c0:bd:ab:41:e0:d5:c2:3a:2f:ca:ba:76:69:00:93:1f:
4e:8f:f5:e8:a3:e3:c2:76:80:9c:68:ac:a5:f8:09:9a:fb:8f:
70:a3:a6:44:ec:9b:fe:a6:3c:29:93:5e:17:16:09:eb:17:87:
83:c1:9c:ac:42:1d:79:1e:9b:60:df:fe:d8:d3:8d:3e:d0:aa:
c2:d3:e4:f1:4d:c9:fc:b3:31:a0:d6:cf:9d:39:3c:9f:14:c8:
c7:3b:ab:4f:0a:a4:66:b5:56:ba:54:9f:52:a0:8e:f0:d2:58:
49:ba:85:43:67:aa:45:e2:66:b1:c3:06:5c:c7:5b:38:fd:f4:
d4:e5:b8:e6:ef:85:1a:d7:99:c2:77:f3:13:96:a7:72:25:3f:
92:c6:c7:6d:b4:17:05:13:2e:80:1f:29:84:4a:2a:5e:07:40:
8f:eb:ab:49:32:07:44:9a:f7:14:7a:b7:b5:26:cd:80:fc:1a:
cd:4c:34:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:01:38 2026 by rpki-client