Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: 2Kmr59TfCkHlQbvTGVkb8MzIWbDYCsQ8GAxE0dTDcV4=
Subject key identifier: B0:E9:22:42:A9:E9:02:8B:7D:E7:22:AC:20:94:9D:74:C9:C1:13:7A
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 01A17BF2BA20AED3D4F72EB86D79EB8430EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 06:01:07 +0000
Manifest this update: Tue 27 Oct 2026 06:01:07 +0000
Manifest next update: Wed 28 Oct 2026 06:01:07 +0000
Files and hashes: 1: MQeTf0MYRPYw_402BYO3IY08ZTI.roa (hash: ubuWvtB27a2rNunPzQvBhMbVlyiCsPYMuMsDZ/GM8W0=)
2: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
3: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: DN1XSQOjbZeoZY1GCkeuOfgjvqNpzgKshGIqYI7IDTc=)
4: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:ba:20:ae:d3:d4:f7:2e:b8:6d:79:eb:84:30:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Oct 27 06:01:07 2026 GMT
Not After : Oct 28 06:01:07 2026 GMT
Subject: CN=b0e92242a9e9028b7de722ac20949d74c9c1137a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:e3:ab:a3:76:d7:6b:e4:8b:cf:8f:e7:8c:
0b:c0:e1:23:42:6f:de:4f:2e:26:bf:a4:24:d3:ae:
1a:2c:f6:e0:93:1b:53:3c:97:17:6c:b1:2d:e6:56:
fd:3b:a4:4d:cb:8d:cd:53:d2:f3:10:f7:d0:58:97:
a8:11:33:fa:76:19:dc:7c:02:c9:38:6e:48:d2:d5:
07:a7:67:59:f2:3f:f5:69:a2:46:ce:fa:d4:a6:05:
b0:0d:7a:48:ab:9b:16:8b:05:16:32:7a:67:66:c7:
50:e9:13:a3:4f:e2:83:31:9f:cb:1a:7b:64:f7:60:
09:c3:a5:46:7f:d6:af:02:6d:f0:a4:a6:24:fd:5c:
a5:aa:08:4d:dc:b4:e0:33:a9:94:94:03:2f:cc:3e:
d9:26:cb:d7:9f:18:65:cb:7c:b9:37:e5:d1:22:5f:
81:5c:e6:c0:ea:62:70:e0:12:7a:be:39:c7:0f:8e:
b3:90:ed:fc:aa:4a:9f:73:14:71:9f:4a:f6:33:f2:
27:37:07:e4:b7:8a:43:96:2e:74:c0:ee:29:9c:c1:
6a:10:b2:4c:ee:1e:b0:98:ac:32:48:4a:fd:46:b8:
1c:74:6c:1f:ed:5e:e3:bd:ce:81:fa:49:0c:08:53:
8e:66:70:32:80:e8:8a:63:ed:4d:31:f2:4e:e3:84:
bd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E9:22:42:A9:E9:02:8B:7D:E7:22:AC:20:94:9D:74:C9:C1:13:7A
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:35:39:7b:80:18:7d:1b:15:ae:56:4e:e2:f6:f9:cf:ba:5d:
6f:38:a4:58:63:06:90:36:0e:f9:2d:65:7a:96:46:94:6f:29:
7e:5f:7c:b6:34:67:59:9f:8b:45:e1:9f:d0:90:dd:87:73:4f:
78:a0:b4:f9:d7:d7:84:3b:05:75:20:c2:28:e3:eb:b4:a6:54:
e1:52:7b:79:11:dc:db:7a:eb:23:98:18:f3:47:6f:e9:41:02:
da:6e:87:2d:22:99:f6:e7:89:11:ac:28:59:84:ae:ec:e6:1e:
c3:36:70:e6:a9:99:0f:30:b4:63:02:d4:ab:15:92:4e:3a:8d:
14:5d:a7:f0:8e:c9:aa:41:0b:24:0a:a1:3e:2e:b2:ae:9b:eb:
07:75:c4:9a:98:29:16:7c:23:38:f1:e1:fe:16:79:12:e3:d3:
e0:b0:61:9b:fd:3a:b0:24:03:29:71:0e:d0:09:39:4a:18:7e:
9a:93:18:20:ba:b4:f0:db:4e:ec:a4:bf:9d:bb:b6:63:72:13:
68:62:1a:f4:97:25:34:7b:e3:6a:de:d8:60:43:91:5d:54:a3:
dd:75:79:65:3f:8a:2b:8d:1e:e1:7a:b9:ec:c1:b3:06:b9:4e:
6f:5d:6b:16:7e:e6:99:5e:85:07:07:ef:a0:9a:2c:fe:8b:5a:
78:cd:ea:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:49:57 2026 by rpki-client