
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: Ed8tMgRB/iMWRGcjXjGRlCG6CLfQByGrLOETIEg0fIA=
Subject key identifier: 17:E8:6B:AF:33:26:CB:96:16:F6:17:99:F8:8B:79:45:77:08:60:36
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 01A0B6F74A116AAB0987D13D795DFE6CA74C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 1538
Signing time: Sat 19 Sep 2026 00:00:54 +0000
Manifest this update: Sat 19 Sep 2026 00:00:54 +0000
Manifest next update: Sun 20 Sep 2026 00:00:54 +0000
Files and hashes: 1: AOYNyLogCuZgfBQZ_rhFiasTEas.roa (hash: zOItC91i7X4F3quOK9yoQD+KspwFkw26V76frNAHPSc=)
2: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: HVaBlRqdkNeHCacKow3rT0RO0C6y5/XzBuGi01RNYPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f7:4a:11:6a:ab:09:87:d1:3d:79:5d:fe:6c:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Sep 19 00:00:54 2026 GMT
Not After : Sep 20 00:00:54 2026 GMT
Subject: CN=17e86baf3326cb9616f61799f88b794577086036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:57:e9:a0:fb:59:30:f7:b8:a9:fd:55:bf:
28:4a:68:56:0d:38:74:ee:7f:dc:7a:a7:77:88:5c:
03:e6:83:54:76:15:c0:ae:04:8b:72:c4:56:47:1e:
e2:e7:34:0f:00:59:62:3f:74:cb:68:5c:ea:e4:2f:
bf:d8:d2:7d:5b:fd:53:20:e0:88:c3:a3:30:b6:0e:
be:42:f3:3e:15:8c:99:00:f0:f9:a7:f8:de:15:40:
62:9a:cd:31:14:99:ab:ba:30:8c:27:d7:7c:d3:16:
86:2e:70:ff:9d:61:3e:4d:a9:14:b8:94:76:8a:6e:
59:bb:1c:77:25:2f:6d:d9:b1:24:a3:54:1c:8e:bd:
02:fc:5f:fe:55:a6:8d:57:29:5a:de:a8:ce:6f:3a:
ea:f5:aa:ce:87:63:51:40:55:c5:e2:53:7a:bc:71:
42:8c:29:19:26:aa:46:59:21:9b:22:09:3e:0b:6d:
ea:e7:62:6c:e6:05:de:07:75:62:3b:9f:66:cb:5f:
c3:76:e1:93:4a:d9:6b:cf:f4:db:51:94:e8:24:0d:
0a:25:08:57:9d:3a:ec:a5:72:65:ca:ba:32:c4:af:
70:fd:c9:d7:b8:7f:9b:5b:4f:73:aa:4c:85:9d:cc:
07:fc:9a:23:d3:81:9b:64:5d:de:b1:c3:e9:ec:49:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E8:6B:AF:33:26:CB:96:16:F6:17:99:F8:8B:79:45:77:08:60:36
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a9:fe:d3:f8:a8:84:9f:f9:40:db:7e:25:d9:46:82:f7:4b:
e7:10:1f:b0:72:a3:90:0e:7f:ad:3f:58:11:91:88:62:24:b7:
fc:62:4c:f2:83:93:55:07:c1:96:4e:fe:54:58:dd:f2:26:5a:
c7:51:7f:39:87:64:9c:c4:f0:c0:60:9f:ea:2d:e5:06:64:09:
e7:8b:99:68:8c:73:58:49:6c:55:5e:0d:3f:b7:ff:21:49:03:
43:0c:f5:3e:be:63:98:61:8d:a8:6c:12:d6:a8:fd:b1:1d:67:
82:b5:d8:63:91:97:db:dd:61:d6:c9:f5:4a:2a:70:a5:61:99:
00:43:30:e9:c5:22:70:26:ad:b7:5f:e5:95:93:a1:d9:4b:87:
16:8e:48:13:0f:71:84:ee:a9:65:e6:df:78:73:9c:8e:40:c4:
f9:84:be:99:cb:38:af:5a:eb:dc:3e:59:17:85:72:ce:c7:6a:
ee:f2:18:a0:aa:e2:41:70:04:90:15:ab:8a:d2:7f:c0:19:71:
ae:f1:7f:cb:91:6a:38:aa:a6:d1:90:d5:b1:d1:21:63:ad:83:
0f:58:5a:ac:e1:1f:1d:6a:5d:d1:f9:d2:be:3e:3a:5b:6d:c3:
54:1b:f6:7b:16:e0:c0:dd:4b:73:e7:31:d9:6c:56:54:a8:62:
3c:e1:fa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:58:58 2026 by rpki-client