Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: CUeN03dNuSAVQk8qOy35EMhs37DtFy1VS3hQoZTzXuk=
Subject key identifier: 5C:F4:9C:10:18:8D:35:8E:2C:71:16:A3:55:CA:D8:92:C7:82:4E:61
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 01A17DE12105429B97D2B652172738D31321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 1AC8
Signing time: Tue 27 Oct 2026 15:01:08 +0000
Manifest this update: Tue 27 Oct 2026 15:01:08 +0000
Manifest next update: Wed 28 Oct 2026 15:01:08 +0000
Files and hashes: 1: MQeTf0MYRPYw_402BYO3IY08ZTI.roa (hash: ubuWvtB27a2rNunPzQvBhMbVlyiCsPYMuMsDZ/GM8W0=)
2: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
3: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: 97TYWQq3sayhp71DASNkncWeNU6/mH6JjNWygEKRock=)
4: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:21:05:42:9b:97:d2:b6:52:17:27:38:d3:13:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Oct 27 15:01:08 2026 GMT
Not After : Oct 28 15:01:08 2026 GMT
Subject: CN=5cf49c10188d358e2c7116a355cad892c7824e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7d:b2:de:0a:c9:8b:ac:1a:9b:ce:fe:71:75:
6d:dc:45:63:1f:de:b1:37:54:a6:1c:c1:a4:ac:4f:
94:bd:f2:b9:d8:8f:3a:e4:71:74:b9:de:0a:b6:c0:
0a:3e:4c:c4:9d:74:f1:85:78:bb:d7:2d:a4:f2:f7:
a5:45:29:28:89:e0:47:83:d9:90:70:f0:00:79:7e:
a7:f5:60:71:5f:52:10:13:24:e8:16:ea:35:dc:f2:
66:4f:ad:d8:97:be:ee:ee:3c:64:d0:72:f9:c8:38:
ce:f9:67:a9:f3:fa:54:1f:93:07:bb:55:41:af:d3:
69:64:23:f3:fc:6d:98:76:c0:6b:98:d5:3c:9a:99:
97:34:b9:c1:69:3f:fe:5f:91:76:7a:c2:85:19:fe:
58:9f:81:c9:7d:3b:87:fb:5b:ef:e7:46:1f:2e:6e:
2d:9f:1c:c6:99:c7:bc:fc:14:68:72:c0:69:33:37:
20:b2:13:f7:b1:c9:52:c3:38:ca:30:48:5d:5d:c9:
15:cb:ec:d2:1a:98:59:1d:0f:81:29:ee:3f:91:2e:
c7:d8:ab:b9:fa:ba:7c:4c:a5:7c:ca:fb:02:3b:6a:
0f:6b:f2:b0:fb:90:3f:90:1e:4e:e2:8d:8e:67:b4:
5a:a2:02:33:67:82:56:2c:85:27:71:f0:e7:a7:91:
0a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F4:9C:10:18:8D:35:8E:2C:71:16:A3:55:CA:D8:92:C7:82:4E:61
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e0:6b:e2:ce:bd:88:e0:dc:7f:1f:c0:c5:23:5e:39:58:7c:
28:b9:5f:7e:5f:20:43:0e:33:7b:9c:2c:92:7c:db:3e:bb:e2:
cb:00:50:e9:eb:41:0b:f0:1f:9e:39:45:ac:fd:42:68:9b:24:
35:2c:74:ba:4f:ad:4e:05:3d:44:ea:bc:85:14:1c:78:20:c4:
8d:2b:bf:ed:d6:29:8b:19:fe:7f:68:d7:2f:b7:63:d7:5d:38:
66:a8:4e:0c:62:55:92:19:1c:a4:67:2a:0c:0a:b2:c7:f3:fd:
fe:37:af:e2:b7:48:92:cf:4f:e5:91:0c:a6:1a:d5:f6:df:48:
cd:a4:db:d3:05:5b:51:ac:9f:e3:37:35:30:ad:43:e0:67:bf:
98:63:b2:fe:fa:30:91:07:27:58:09:ec:9c:72:d6:3a:fb:28:
4a:c0:61:bd:ca:b8:4d:c7:13:36:b1:29:4b:92:5e:e8:17:92:
6d:91:0e:10:45:c8:02:dc:d9:1a:3d:fb:25:94:ad:b7:cb:4f:
db:5a:22:2f:c5:21:9a:e1:85:46:5e:25:82:6e:dc:cc:33:24:
85:92:bd:0a:03:a7:f9:62:c5:18:2a:bc:ac:ae:d1:7f:4d:ba:
d6:3d:b9:bd:92:e9:8d:a5:b9:21:c0:d1:79:5f:81:88:ef:b7:
13:ae:71:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:48:50 2026 by rpki-client