Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: 4mFDdoSV9+ebeXrlhBI8nUVW6bjegvXY+VoxoGS+//I=
Subject key identifier: 2D:A3:26:20:BF:0E:1C:23:1D:52:F3:46:CA:15:38:81:0A:88:52:B2
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 01A118D02F11B4ACE68DFD656CABD7CEF1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 1A35
Signing time: Thu 08 Oct 2026 00:00:58 +0000
Manifest this update: Thu 08 Oct 2026 00:00:58 +0000
Manifest next update: Fri 09 Oct 2026 00:00:58 +0000
Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: XTNeg98FHUlOvSvD3Sl/TmQ8PLnXYtmp7SVzi3dE7SU=)
3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:d0:2f:11:b4:ac:e6:8d:fd:65:6c:ab:d7:ce:f1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Oct 8 00:00:58 2026 GMT
Not After : Oct 9 00:00:58 2026 GMT
Subject: CN=2da32620bf0e1c231d52f346ca1538810a8852b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bf:28:90:3c:59:a5:21:da:b2:34:7a:9a:52:
b0:a6:b7:3a:d6:ce:eb:4a:29:9b:2e:f3:11:53:8b:
c6:40:be:44:41:49:20:89:78:69:20:33:45:78:58:
cf:0a:2c:a4:1e:5e:fe:df:b3:82:8a:b2:35:5e:20:
54:43:9c:79:bf:52:f1:fd:f4:7c:c8:2b:6d:a4:f2:
b1:00:50:6d:d0:0d:39:42:d5:24:12:d1:2d:4d:7b:
d5:d0:f8:de:5e:ae:65:66:e8:ec:e0:90:51:92:c7:
03:18:2b:b5:1b:74:98:52:0c:9f:9b:ed:79:d8:fc:
25:ff:3b:f4:04:85:a5:c0:24:2c:a9:e4:f4:0f:cd:
e6:b4:4a:8d:a0:1d:83:cd:76:ce:93:3e:fa:6f:3d:
a3:e5:af:40:55:bd:99:0b:5c:aa:ee:2f:86:d8:91:
e5:6e:29:a6:41:2d:84:dc:00:52:c3:ef:6d:2d:00:
3c:56:28:62:ba:de:a4:a7:1c:55:0e:8a:64:94:31:
49:3f:34:bf:e6:f2:7b:d4:84:86:9d:ce:c4:2b:ed:
99:25:15:97:c7:1a:c4:bb:0e:7c:20:2b:9f:80:ae:
27:ea:e6:38:8d:50:96:04:09:3a:86:03:89:97:f1:
a0:51:ee:6d:37:34:43:56:b1:df:40:9d:36:71:1e:
9a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A3:26:20:BF:0E:1C:23:1D:52:F3:46:CA:15:38:81:0A:88:52:B2
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ba:24:59:16:33:81:ea:7b:10:65:ec:83:e6:d1:27:21:ad:
51:30:bc:a5:92:08:a4:01:1a:d0:0d:8e:78:80:f9:6c:75:ed:
66:5f:2a:72:d6:06:7d:64:dd:28:5b:79:80:0a:ca:36:40:f5:
77:13:8d:20:1c:9e:20:7e:a9:63:a3:60:64:4e:e9:d9:23:2b:
e0:b0:2b:99:82:bc:03:6e:f7:95:a9:8c:e6:74:63:9d:18:92:
f8:6f:14:9c:a6:14:3c:c8:a5:16:59:9f:03:f8:78:76:ce:47:
bd:55:e1:44:79:65:af:80:55:e6:f2:1e:33:78:44:b5:f0:d4:
2c:b0:23:d7:66:3a:04:31:68:81:9d:d7:fe:0e:e1:f9:e7:ac:
a5:b4:8f:de:52:f2:a5:47:a8:78:36:7c:e4:19:7f:8d:3b:1d:
6d:86:b3:4e:01:9f:5f:03:15:1d:39:92:bc:11:27:a9:6f:5f:
80:17:fc:e9:30:9d:5f:b2:01:d3:7f:64:52:1d:c3:3f:da:e4:
b6:c5:22:99:22:03:d3:ba:2b:02:50:d9:5f:e4:cf:e5:6f:1b:
7a:f2:8b:63:6a:39:e3:05:3b:d3:c5:e4:07:37:f2:42:7a:ed:
32:90:1f:25:43:ef:e0:96:e5:f3:af:92:a0:d1:ba:2f:3d:c6:
dd:34:a4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:40:54 2026 by rpki-client