Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: BCozWcRzq6rJocGtxnZj6AK2b/caI+l7O22dpOJGDyw=
Subject key identifier: 57:88:92:E8:FF:6D:3F:94:EA:0F:A2:B3:A2:67:62:2A:55:17:7A:7D
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 01A17DAA0EDB9B542CC3A93716BED2DE4776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 096F
Signing time: Tue 27 Oct 2026 14:00:59 +0000
Manifest this update: Tue 27 Oct 2026 14:00:59 +0000
Manifest next update: Wed 28 Oct 2026 14:00:59 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: 4yYulm7rRrQ0TH/xDnqxCI/Ba0Db6/gcfpB91K1+ml0=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:0e:db:9b:54:2c:c3:a9:37:16:be:d2:de:47:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Oct 27 14:00:59 2026 GMT
Not After : Oct 28 14:00:59 2026 GMT
Subject: CN=578892e8ff6d3f94ea0fa2b3a267622a55177a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:d7:64:20:0b:9a:ca:28:8a:9c:7d:fe:a3:
32:23:71:6e:e5:25:80:12:52:d6:1e:13:47:0b:75:
62:89:ce:ce:33:7a:fe:b5:ea:10:da:06:42:c2:02:
f3:30:ba:77:86:70:25:56:40:46:ad:4c:79:b2:b8:
f2:84:57:e3:25:b4:17:a0:e3:a1:36:be:d9:3e:33:
2e:21:46:dc:65:03:a0:a9:4c:e6:ea:67:87:ba:2a:
d5:6e:49:82:04:4c:0d:a3:3e:ac:01:92:96:5a:29:
bf:53:38:8d:c3:06:4c:33:20:93:b4:29:25:a8:8b:
70:16:cc:f7:25:3c:a9:31:bb:96:e8:fe:d1:d4:9f:
bf:06:cf:0a:31:de:0c:22:54:73:c9:13:e2:7f:ca:
60:49:c8:ed:e5:ea:0a:fc:28:14:04:e4:19:36:76:
58:84:63:e0:90:c4:ef:22:82:6f:dd:f6:4f:a5:54:
f9:e6:e7:a4:29:5e:1a:3e:85:bf:18:40:4c:06:8c:
7e:be:fd:7a:98:04:03:5b:7a:0b:44:87:f2:80:62:
3b:20:82:7d:25:5f:24:c0:5c:a1:ac:b3:57:f0:cb:
75:16:d4:49:dd:a8:23:21:ef:5d:a0:2b:55:2a:0b:
b5:f3:0e:80:13:7e:0f:e2:eb:83:8f:44:b0:b5:fe:
dc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:88:92:E8:FF:6D:3F:94:EA:0F:A2:B3:A2:67:62:2A:55:17:7A:7D
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:3c:1d:40:fe:d6:8c:22:6c:22:57:4a:7c:70:72:cf:cb:a7:
42:12:0e:f1:d9:b5:35:f2:f3:ff:fd:ee:63:53:43:5a:70:e4:
88:fd:cb:99:71:1a:dd:77:31:69:01:34:25:4f:a6:8a:cd:39:
d1:6d:23:59:38:9b:52:6b:df:ee:12:87:b2:6f:94:4f:97:14:
61:06:44:57:0c:5d:f6:9f:68:5d:26:08:a9:71:bd:47:3d:1b:
c7:cc:c9:9d:17:2b:90:78:d9:a5:b8:22:9f:15:03:e6:dc:af:
35:e5:35:c1:44:f5:79:8b:13:f5:13:91:6c:71:31:f0:97:d8:
37:b8:0b:67:48:c1:0b:c4:84:18:de:ba:59:e1:6d:3f:af:37:
fc:d8:46:ab:ca:7b:0d:6f:d5:a9:16:11:81:bc:1c:e1:ba:de:
60:54:56:ee:ff:35:11:5b:95:5f:f5:5d:94:f4:f4:62:2f:05:
c8:b3:83:bb:44:64:61:cf:2b:2e:ae:66:e6:ea:8b:9f:e6:11:
73:5c:6e:15:c7:36:ca:57:e6:23:98:1b:6f:f2:81:01:04:ec:
62:83:ff:83:73:81:db:50:53:71:71:61:20:0f:10:28:b9:47:
94:57:75:e4:62:4a:d0:b8:43:25:68:3e:1c:42:74:a4:86:0d:
4d:5c:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:27:16 2026 by rpki-client