Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
File: QftrFwgzUAawpqrGUL-v8_yNKSw.mft (raw, json)
Hash identifier: O3dhz0MRUx0eXJSkV+3ZXhi0hEXoYo6B/wobz+Hs7s4=
Subject key identifier: 50:F6:B0:95:DC:E8:75:7A:F9:09:AA:8F:8A:12:B7:44:DC:D1:96:F9
Authority key identifier: 41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
Certificate issuer: /CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Certificate serial: 01A17E187823436DCFDAF0C6FC3C853B678B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
Manifest number: 1ACB
Signing time: Tue 27 Oct 2026 16:01:35 +0000
Manifest this update: Tue 27 Oct 2026 16:01:35 +0000
Manifest next update: Wed 28 Oct 2026 16:01:35 +0000
Files and hashes: 1: 38IcWrFWJbqE37FYpFMigdsHVdo.roa (hash: jTZcDNir5nH2T9oJuhPtVnEcZ5OgfBAR2idpIej2Fr4=)
2: QftrFwgzUAawpqrGUL-v8_yNKSw.crl (hash: ZkfKiQPCJIUJYPy0mdaJ2AtPUbKLf5yRfFjr24amWlY=)
3: S9un40BglrRD8oUoRwpeEoCPKzQ.roa (hash: 63quj0FUggFB47Cme3ZNE0Mctu62nOnwW9NKWHljeOQ=)
4: nLIrARXN9dPSDCt_sdmjJM0dIgA.roa (hash: g+OtbxwAHIUNiByLd40WQVbq7MwXJk9aaDtEPJLR4Ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:78:23:43:6d:cf:da:f0:c6:fc:3c:85:3b:67:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fb6b1708335006b0a6aac650bfaff3fc8d292c
Validity
Not Before: Oct 27 16:01:35 2026 GMT
Not After : Oct 28 16:01:35 2026 GMT
Subject: CN=50f6b095dce8757af909aa8f8a12b744dcd196f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:d0:f9:12:a6:d1:c8:0c:ac:19:ed:04:83:
54:0b:b2:95:b2:b2:52:9a:9f:39:65:66:f6:90:29:
e4:67:c3:f0:79:2a:da:33:f1:90:c1:b7:83:0e:ce:
14:0d:b8:87:04:88:f1:b5:9d:3d:9c:46:b9:92:28:
b8:ae:61:95:9b:8f:f9:56:d1:b7:b0:9d:52:80:f3:
32:e7:b6:55:33:ec:49:22:59:15:25:35:df:5f:3c:
73:0e:1c:80:66:1b:de:72:a4:40:16:9c:62:90:95:
4b:9d:c6:2b:69:b7:7b:73:f1:33:3d:fa:fd:cf:99:
de:ef:6d:42:e2:0b:1e:85:a5:69:7f:8b:28:61:c1:
30:09:8b:86:55:08:6e:82:b5:f3:a8:f3:fe:7e:f5:
ff:5d:15:1c:b8:dd:fb:d5:ee:7a:cd:35:02:9a:77:
87:d3:f8:00:fd:33:b8:28:68:6a:8a:c4:39:8e:ee:
0c:07:1f:c5:40:5f:01:f9:45:79:92:b5:cf:6f:2e:
8a:41:49:b9:d0:23:7f:da:94:4c:d8:aa:47:53:f9:
e7:d9:52:9d:32:65:f4:26:8d:8b:bb:c4:25:6d:0c:
d1:7c:32:6f:bc:8a:f4:81:08:d2:29:8e:1b:0f:45:
7e:87:3e:65:b4:4f:c7:ad:d3:19:7f:b8:f3:26:45:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F6:B0:95:DC:E8:75:7A:F9:09:AA:8F:8A:12:B7:44:DC:D1:96:F9
X509v3 Authority Key Identifier:
keyid:41:FB:6B:17:08:33:50:06:B0:A6:AA:C6:50:BF:AF:F3:FC:8D:29:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QftrFwgzUAawpqrGUL-v8_yNKSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c771c3-ca90-4fd2-99ac-04c82ed6ed4c/1/QftrFwgzUAawpqrGUL-v8_yNKSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:57:20:83:b6:4d:95:93:27:25:9d:97:4a:d4:bf:1a:89:98:
bc:22:b7:04:64:89:73:16:58:77:17:21:65:24:2c:d0:63:26:
b5:22:ab:c2:78:45:8a:78:a2:32:26:52:b1:21:21:1b:1d:ed:
b9:e7:73:5c:3a:5d:c3:c8:03:4a:21:f6:a0:9c:eb:bf:f9:dd:
b2:5e:48:c1:07:c2:55:e0:a3:d1:b8:80:e6:8f:dd:d7:02:a6:
1c:3a:9e:da:d4:2d:18:40:c1:2b:c5:1f:ae:18:0d:75:6f:84:
85:83:0a:6d:63:a0:3a:0f:b6:fe:39:56:51:38:b7:02:a4:91:
6f:57:e6:3e:02:15:2d:35:44:8d:6e:51:2d:8d:2d:13:3e:80:
89:d9:06:8e:71:4b:8c:9c:d5:a2:c8:9c:0c:f7:10:88:0b:3a:
20:eb:48:1f:2e:f0:41:8b:a2:11:2f:da:0a:3c:df:35:34:d7:
3e:21:1a:50:29:89:bd:3c:3e:86:ba:60:f1:0d:0b:eb:6c:ec:
2e:08:ae:ba:15:16:b0:e8:82:ea:bd:7e:c8:7e:19:c2:b2:a5:
28:9b:2f:5e:96:b4:94:8e:4d:23:ce:9d:cb:96:23:e7:34:40:
97:30:bf:2f:f1:74:b3:62:54:5c:f5:51:eb:53:0a:84:91:25:
d3:79:80:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 02:19:06 2026 by rpki-client