Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
File: Qy_nD0zvEDdoNhUvOOTghTLMe58.mft (raw, json)
Hash identifier: OOfAGqNdoZ80W8AxNd9A/LaftOGTH5K8Po4Ftd/SNAE=
Subject key identifier: 13:A4:24:1E:5A:30:F7:5B:B8:4C:7F:A5:D0:DC:49:C2:B6:C7:1D:6E
Authority key identifier: 43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
Certificate issuer: /CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Certificate serial: 01A17BBB2DAAD70EFAB1457D291FDE3C7336
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
Manifest number: 096E
Signing time: Tue 27 Oct 2026 05:00:26 +0000
Manifest this update: Tue 27 Oct 2026 05:00:26 +0000
Manifest next update: Wed 28 Oct 2026 05:00:26 +0000
Files and hashes: 1: A9KPkngUXWXwoXMeh9I603GmeJg.roa (hash: dKQV+T7YqY4RYKx4LLE6fQsZ703AeKW3tQVyd7Sv7c8=)
2: Qy_nD0zvEDdoNhUvOOTghTLMe58.crl (hash: HlONxbC8aPLkDHPbvkF8DK4zypeyHh4aUZbjtIqNQKs=)
3: sKDKorvVElJgqwc1YL9x1RhoYEM.roa (hash: SXIrFPkLP5e0Dojj65FY1WNGEqYxxlyXHUyw6TzDiOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:bb:2d:aa:d7:0e:fa:b1:45:7d:29:1f:de:3c:73:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432fe70f4cef10376836152f38e4e08532cc7b9f
Validity
Not Before: Oct 27 05:00:26 2026 GMT
Not After : Oct 28 05:00:26 2026 GMT
Subject: CN=13a4241e5a30f75bb84c7fa5d0dc49c2b6c71d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:78:d1:76:c8:5e:ad:30:80:d8:c8:92:a4:5a:
44:7e:b3:33:89:f6:40:6b:47:e5:47:a2:b1:20:d8:
bc:71:30:07:78:ca:49:f6:9c:16:bc:d4:fd:b5:6f:
11:a7:67:bf:35:7e:b3:33:47:88:69:69:70:2e:b3:
af:16:79:98:b3:88:d3:93:c3:49:0a:39:cb:e0:d4:
60:3c:3c:29:f7:8c:4f:2d:33:d8:35:a6:a8:50:8d:
b4:83:39:0d:29:cf:d3:98:2f:f2:57:be:7f:96:95:
78:89:a5:97:b1:73:3e:5f:1f:20:57:b3:f3:f6:76:
06:b9:0b:45:82:2b:30:0d:4c:6a:7a:52:58:73:68:
dc:a8:53:be:13:fa:67:fe:aa:6a:9c:25:76:ce:2d:
7d:84:ff:31:df:9b:1f:1d:3f:60:b8:20:5e:f0:db:
22:2a:c9:b4:26:f4:ae:b2:c2:a2:44:5d:d6:da:30:
5a:4a:16:9c:94:aa:cf:04:48:46:8b:9a:96:33:3b:
08:57:68:d4:af:56:9b:1b:f5:a4:be:89:98:07:70:
8e:43:3e:8f:cd:7b:5a:95:da:b2:66:7b:32:34:8c:
0e:d0:08:b4:ce:95:8f:36:e7:35:fa:3b:60:13:6e:
49:00:bd:97:1f:a6:d0:02:6f:f1:20:c0:0d:24:44:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A4:24:1E:5A:30:F7:5B:B8:4C:7F:A5:D0:DC:49:C2:B6:C7:1D:6E
X509v3 Authority Key Identifier:
keyid:43:2F:E7:0F:4C:EF:10:37:68:36:15:2F:38:E4:E0:85:32:CC:7B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qy_nD0zvEDdoNhUvOOTghTLMe58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/307607-5706-4e44-bb8e-189d00a333ee/1/Qy_nD0zvEDdoNhUvOOTghTLMe58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:32:e9:46:88:a4:19:a4:e4:f8:83:f3:a9:9a:ed:4e:ba:af:
8e:8e:5a:8b:68:ef:40:92:3a:77:7b:c7:90:32:9b:b9:4b:0b:
fe:70:b0:40:2f:89:fe:f5:79:ac:e4:11:d2:40:91:d6:ce:2f:
39:4d:1b:fa:25:a9:0b:03:b3:5e:85:36:dd:48:8c:d4:62:fe:
35:66:e5:f3:7d:c5:78:b1:24:25:c7:10:39:b5:3c:88:e1:3d:
c5:f5:c9:0a:94:cb:33:49:90:8b:1d:24:7e:89:3e:41:48:91:
48:16:30:bc:14:7b:39:5c:89:c0:f9:10:92:f3:c0:0f:f4:0a:
e4:22:56:2b:a4:18:b1:da:ae:70:94:ea:d3:1d:cd:f4:da:f6:
8a:a1:78:61:02:ca:b9:d2:5d:a5:ee:14:52:f0:89:e2:a3:16:
d4:c5:36:6f:5b:aa:ea:8c:d1:81:c5:ef:27:94:d5:68:1b:c9:
3f:32:b7:89:a1:70:8d:ea:f7:11:8d:21:e1:4a:36:77:0c:d5:
02:37:d7:aa:06:aa:c1:7e:32:d2:96:cf:41:f3:2b:5f:56:7b:
26:c8:90:49:43:1d:41:37:7e:33:cb:c5:05:96:4a:89:a2:fa:
53:31:ff:20:4d:25:ab:5c:30:54:96:7d:c5:3b:33:81:57:3b:
14:fd:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:23:48 2026 by rpki-client