Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: Z2lDpgQ3XWgKVPB6aF3RqYbJmwQGKjZr07+icHpPwhY=
Subject key identifier: E2:86:4B:BA:B5:8C:55:EF:3B:45:87:1F:84:07:A7:48:37:F9:95:81
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 01A1396D8C0B42E7B0973557FC9DC405DB2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 1234
Signing time: Wed 14 Oct 2026 08:00:42 +0000
Manifest this update: Wed 14 Oct 2026 08:00:42 +0000
Manifest next update: Thu 15 Oct 2026 08:00:42 +0000
Files and hashes: 1: 9l35f4vtEnwERy91rSIzMefrFvk.roa (hash: o4NZxjI3TjEffFvPCpSdso698d9KA9gU7jcbU25ovX4=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: zTN4XvN9iC67KTGGvJ/8eE6wHAuDBKVm+6Cx/9v3Aac=)
3: _DMWomZ-zw9r2w8AsNSptLxDmfA.roa (hash: 5DRqqMVL9GM/PG8SfYwPRoOqjNYLEPPU5+fO2uX+eWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:6d:8c:0b:42:e7:b0:97:35:57:fc:9d:c4:05:db:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Oct 14 08:00:42 2026 GMT
Not After : Oct 15 08:00:42 2026 GMT
Subject: CN=e2864bbab58c55ef3b45871f8407a74837f99581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f7:23:e2:de:b9:9b:e0:d4:5e:5c:92:fd:f3:
d2:15:c7:fc:2d:b3:51:07:a7:7b:0e:7c:22:41:e5:
1d:00:5b:b7:27:41:85:80:f7:00:c3:c1:f9:ee:92:
4e:ce:52:ef:8e:36:4a:13:be:9a:e1:57:05:cd:08:
f3:21:c0:90:df:b1:b1:10:de:55:8a:eb:71:98:51:
fd:9a:5b:74:98:df:82:ac:dc:39:d8:48:8c:cc:87:
af:4f:f6:bc:61:a6:cc:44:14:4b:ae:6d:14:68:6a:
52:9f:cc:f9:c6:06:51:a1:a9:31:90:b1:fe:82:fb:
28:6c:77:b6:4d:ee:60:e1:17:a9:bd:e2:05:c3:e5:
dc:c4:bc:7a:3e:34:f5:bf:09:c1:d1:6d:f8:8c:70:
af:7f:f1:e6:85:7d:ae:70:fa:95:5f:05:3f:33:35:
7c:51:2e:5f:8b:92:5d:a1:fe:35:ca:63:d4:0d:8d:
a5:06:4e:f3:da:32:ae:79:2e:12:4b:ea:1c:92:bf:
ec:18:66:ff:40:bd:da:cc:65:f7:28:45:6c:b1:f8:
d0:e9:4d:69:68:93:3e:33:bd:39:59:37:89:2a:2f:
79:90:79:b8:38:ee:e6:b2:d2:d2:5e:a9:a6:31:a0:
94:bc:4c:ef:5e:be:77:91:25:77:50:e8:a0:4c:87:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:86:4B:BA:B5:8C:55:EF:3B:45:87:1F:84:07:A7:48:37:F9:95:81
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ab:6f:06:20:fa:6d:7b:a7:e3:c7:2e:a1:95:8b:70:d3:15:
29:a7:a3:09:c1:55:5f:8e:26:fc:f4:d5:23:23:60:51:3b:e7:
4b:f0:62:3f:93:74:9d:65:3a:09:5c:0d:fc:81:68:47:b5:1f:
19:37:85:d6:48:7d:bd:9a:fc:37:98:0e:5d:f3:52:aa:f5:fd:
96:78:d2:b1:03:3c:b1:a2:da:70:eb:98:0e:56:d7:ce:10:c9:
d3:fc:1e:c1:a4:34:a6:cd:db:e0:f9:7c:43:8e:a6:52:a4:9e:
88:3f:84:cd:24:5d:e5:88:1b:60:82:25:81:f6:39:de:80:34:
79:08:77:30:c1:8c:6d:13:c1:b1:37:70:47:9c:57:52:c2:93:
9d:45:76:99:d3:d5:4a:dc:6c:b4:48:5a:9d:66:c2:d5:2a:4a:
81:db:44:eb:d5:06:ce:a4:2c:70:94:d4:e5:6b:08:35:22:76:
1d:b0:ef:eb:1d:8e:63:ad:2d:bd:4b:c8:80:c8:78:2a:77:e4:
c4:ad:b9:a8:61:20:5b:99:74:2c:b4:e4:74:35:8c:3e:33:30:
39:78:62:e9:d5:6b:81:d5:e6:38:20:5b:79:1b:0e:e0:2e:a9:
b8:94:dc:76:05:8e:7d:1a:f6:7b:5b:ef:e9:e7:64:b0:c7:89:
e6:76:5a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:14:13 2026 by rpki-client