Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: hxGCRHKKlCZOcQFhcp9lzrcKNzByP/ZZkEd9oL0/Wvg=
Subject key identifier: D9:1D:25:62:9A:4D:0A:02:6A:9D:7E:CB:80:1C:47:5E:C6:07:5E:92
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 01A17C291A55446E7E211D6E78C7355841DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 1AD0
Signing time: Tue 27 Oct 2026 07:00:30 +0000
Manifest this update: Tue 27 Oct 2026 07:00:30 +0000
Manifest next update: Wed 28 Oct 2026 07:00:30 +0000
Files and hashes: 1: 1-ojtBFfG2H1rWqjbXk4N7WD3PpY.roa (hash: 33NVVlGbTWQg3lb1uDpxYt5Pr6SGR6CWL3Kw3mH/dfw=)
2: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: j3plDCyxgpEaKse9XqxblKPArYcGM82mFY4QMQGhGfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:1a:55:44:6e:7e:21:1d:6e:78:c7:35:58:41:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Oct 27 07:00:30 2026 GMT
Not After : Oct 28 07:00:30 2026 GMT
Subject: CN=d91d25629a4d0a026a9d7ecb801c475ec6075e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:49:f8:e1:01:2a:c9:56:5a:45:a1:48:2a:
23:f3:a9:bd:25:48:60:08:18:2d:19:48:94:c4:c1:
85:69:0a:7d:dc:bb:a8:60:62:8d:e6:7a:af:1b:eb:
b0:c4:72:ce:da:04:e2:c8:e8:d3:55:fe:e4:59:a1:
7b:70:84:c8:e9:ab:fe:f6:42:6f:a5:eb:56:1f:99:
76:46:50:2b:d9:17:fa:4e:ea:0a:c9:b6:18:f4:97:
22:07:d2:4b:11:3b:15:ca:77:52:fc:6b:7e:75:2d:
cc:67:08:28:56:3a:c0:7f:fb:22:38:a6:6c:18:07:
97:a8:cc:a3:f8:67:56:1a:b8:7c:45:37:e0:65:5e:
0e:e3:14:d4:2e:61:3d:1f:76:46:45:c9:1f:ea:b3:
0d:9e:85:62:f5:ff:ac:38:85:ee:18:68:69:b2:2d:
6d:3f:0c:95:94:26:15:01:62:3c:d9:ca:80:08:70:
c0:33:1e:af:4a:f9:b9:0a:56:7d:e6:ca:16:47:c0:
28:14:a3:32:63:6b:bd:bd:0a:7f:5e:cc:67:9e:d4:
f0:c0:1b:0b:15:9d:7e:9d:21:c1:e8:54:36:d4:d9:
a1:c1:d7:7a:60:03:87:35:8b:0f:e0:f2:70:6c:98:
a2:2c:54:9a:44:02:5f:9b:a3:e0:27:64:87:29:27:
55:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:25:62:9A:4D:0A:02:6A:9D:7E:CB:80:1C:47:5E:C6:07:5E:92
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:0e:7d:d0:9e:ab:14:c9:24:90:06:b4:f9:12:aa:70:8b:37:
e8:cf:13:c1:75:d8:6d:ea:d1:74:ac:b5:13:27:29:a9:47:00:
60:11:f3:ac:16:86:06:ea:39:7b:58:bc:9d:8c:c5:fb:43:ed:
60:60:a3:51:48:53:c3:98:91:0e:c6:dd:b1:60:eb:6e:ef:bd:
c2:9a:69:79:46:19:0a:85:2a:a0:4b:2e:b8:8d:4a:40:6b:05:
49:48:1d:93:14:76:64:da:22:ec:3f:80:7f:6a:e2:b8:ff:16:
a5:b2:9f:b9:0c:ad:27:87:c4:93:2d:37:14:ff:3f:4e:94:d8:
fa:5e:3e:5c:66:83:5b:3c:ea:51:f0:5d:43:7b:ab:0b:4d:b5:
87:2f:0e:c2:82:b5:61:35:88:1b:29:4a:a1:31:18:3e:cc:8e:
3c:e6:d4:68:03:b5:b7:c0:f4:02:38:aa:c5:ee:fa:c0:52:63:
ef:8e:0f:ea:92:a4:7f:9c:05:bb:2d:bc:82:ed:46:04:8e:25:
ca:85:68:3c:10:19:f2:95:af:02:54:c4:4c:6d:af:49:77:96:
95:f5:5c:4b:13:1c:93:b3:13:19:33:1b:fd:74:7e:c6:94:6c:
f3:34:06:e2:b4:dd:a9:5a:49:3a:a4:6f:34:08:4f:77:59:1a:
6d:11:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:52:14 2026 by rpki-client