Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
File: qfxWMNV7GXHzolbtbZg6-tayjXU.mft (raw, json)
Hash identifier: nslFsez+v5MQI85Vw34P+lMnVURenRC+g8TytvYZi9A=
Subject key identifier: EA:F9:4A:D1:C4:B8:B2:75:F1:98:12:1F:57:96:F8:EA:F5:F3:4F:1E
Authority key identifier: A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
Certificate issuer: /CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Certificate serial: 01A16B360463EEC36DF3631551A2D0884418
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
Manifest number: 1AC0
Signing time: Sat 24 Oct 2026 00:01:04 +0000
Manifest this update: Sat 24 Oct 2026 00:01:04 +0000
Manifest next update: Sun 25 Oct 2026 00:01:04 +0000
Files and hashes: 1: KIREq3B_mRi_ruYLjq_b_qaPiMU.roa (hash: XxQhGm3arKEfc0Jix82KOHGdF1oeChWiOIWCuWRPrpg=)
2: RLTq3d76GisC1LZTNSb9nCNxxt8.roa (hash: x4c1QBZG0KpP+BhZ849r1Wv8Cus10ftjdq8hO7xYuIU=)
3: qfxWMNV7GXHzolbtbZg6-tayjXU.crl (hash: OMUe4zd7tBxNmx8N0GVQSl802cV1YD3TEAjqf7o95CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:36:04:63:ee:c3:6d:f3:63:15:51:a2:d0:88:44:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9fc5630d57b1971f3a256ed6d983afad6b28d75
Validity
Not Before: Oct 24 00:01:04 2026 GMT
Not After : Oct 25 00:01:04 2026 GMT
Subject: CN=eaf94ad1c4b8b275f198121f5796f8eaf5f34f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:9b:99:e0:d4:de:2a:e9:a3:10:c2:4d:77:
91:ee:c2:d5:6e:a2:45:d9:5c:eb:bb:ed:07:83:39:
09:3f:8a:af:c2:b9:76:ba:a1:e6:63:6c:3b:48:81:
19:6b:49:77:80:cc:17:55:62:2d:06:e8:20:f0:e4:
3b:2d:6c:5e:71:80:20:0c:f8:d9:99:be:23:45:31:
05:36:ce:41:d7:72:bc:5e:03:46:a3:62:89:74:e4:
da:aa:9f:77:d7:3d:fc:4f:43:cc:06:4c:94:86:af:
0a:67:b0:d5:65:97:47:e6:88:03:92:42:6b:d3:c2:
8a:52:70:b4:52:3a:ef:e7:9e:f1:f6:6d:19:8b:03:
c0:91:71:27:a9:9f:66:3c:9c:d6:00:f4:ce:9a:d9:
1a:c9:8d:3f:bd:47:e6:26:db:0d:87:ae:c9:58:91:
5e:53:ab:0b:40:6d:de:18:b1:72:63:b1:84:ca:3a:
37:2f:1d:48:cc:78:64:9f:cc:0a:d0:cc:23:b7:36:
1d:9a:0d:39:55:c2:a8:12:14:70:9f:ce:29:57:29:
fc:65:52:99:49:ec:8c:fb:34:7f:d7:5d:5e:d8:19:
97:97:07:27:6d:fb:e8:69:b2:b6:5f:7e:ae:ac:26:
f3:2b:ef:0e:2f:38:ae:60:b1:f0:19:ff:4d:8d:97:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F9:4A:D1:C4:B8:B2:75:F1:98:12:1F:57:96:F8:EA:F5:F3:4F:1E
X509v3 Authority Key Identifier:
keyid:A9:FC:56:30:D5:7B:19:71:F3:A2:56:ED:6D:98:3A:FA:D6:B2:8D:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qfxWMNV7GXHzolbtbZg6-tayjXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0f0788-f1c4-4eae-b0c3-c5d4f0a00907/1/qfxWMNV7GXHzolbtbZg6-tayjXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b3:fe:4c:ff:72:f5:da:98:11:19:ff:50:73:b2:4f:0c:6e:
36:88:3c:c9:05:9a:10:81:f6:aa:1e:31:1e:f8:93:d6:37:3f:
c7:71:77:79:20:44:29:36:b9:5e:62:e0:fa:62:9b:d7:73:d8:
b0:1e:07:cf:47:d3:06:70:fa:73:58:a8:f4:d2:74:60:11:dd:
55:54:40:79:00:e5:fc:87:52:bb:2c:c8:6d:69:2f:85:62:4e:
9e:53:e9:b3:55:7a:33:f1:42:8e:50:aa:90:5a:f0:89:fc:89:
22:90:51:6a:6b:e9:8b:99:74:d2:b2:2a:ac:06:86:85:33:20:
f9:d7:ee:92:7b:99:83:a8:c6:7c:97:de:29:8f:c9:95:e1:31:
8d:46:6e:98:dc:3b:66:60:50:34:a0:56:91:c4:18:2c:59:4a:
ed:4b:fc:d5:d0:38:4a:e5:bc:45:42:5a:b5:e3:d1:2a:3b:af:
a3:f2:1b:d5:e4:b7:60:13:ed:af:ef:53:29:99:d5:6c:7e:5b:
a7:d2:27:7b:62:67:89:6f:29:f2:69:ef:6b:88:da:dd:00:93:
c2:67:03:4b:31:23:c9:23:aa:95:bb:63:b0:48:89:97:96:cc:
d5:12:f8:07:cf:fa:3e:82:52:1f:ba:0b:d3:a5:bb:85:24:f2:
7d:d3:f9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:21:35 2026 by rpki-client