Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: z56DjkXGEkXcTYRd5b5OcF1rRVsqFm/DBvU9qjeFjjY=
Subject key identifier: 39:A7:9B:AE:79:4A:66:2B:11:25:B5:90:C7:9A:95:3C:FE:02:63:F9
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 01A1822BCC2ABF6F661A49E4CAB3805FC7F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 173B
Signing time: Wed 28 Oct 2026 11:01:10 +0000
Manifest this update: Wed 28 Oct 2026 11:01:10 +0000
Manifest next update: Thu 29 Oct 2026 11:01:10 +0000
Files and hashes: 1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: bo1q43YT/98rp+SBkLOlla/m6OE7xr6PigovaGmvYx0=)
2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:cc:2a:bf:6f:66:1a:49:e4:ca:b3:80:5f:c7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Oct 28 11:01:10 2026 GMT
Not After : Oct 29 11:01:10 2026 GMT
Subject: CN=39a79bae794a662b1125b590c79a953cfe0263f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:87:ec:e2:e5:ad:c0:d4:1b:72:dd:e2:33:
9f:09:aa:78:e4:f5:01:bd:62:50:4f:eb:c2:af:4f:
d1:80:fb:f1:38:7a:f6:ec:80:03:59:b3:a2:f7:c6:
d9:4a:f6:67:be:50:8f:d7:d1:bc:d0:68:9a:d5:b7:
a0:60:50:81:06:e6:57:02:b0:55:9c:7c:14:e3:1d:
a5:93:32:b3:8e:4a:59:fa:04:33:12:c5:b9:15:d9:
98:35:cf:27:72:ad:cb:4a:89:77:67:b2:47:70:db:
f2:ed:48:36:e6:bb:cd:ce:e4:a3:f2:b7:44:da:70:
d3:14:f8:ba:c7:2f:78:a4:68:32:61:da:30:07:9f:
eb:1d:87:c9:bd:5f:12:44:c9:00:2c:65:4f:22:e8:
79:a0:45:d1:a2:68:a2:18:54:9b:ae:b0:59:57:d8:
88:24:20:54:69:e7:4c:1e:71:ea:b4:37:cf:de:71:
a0:9a:ad:0d:a8:eb:ff:24:cf:41:f8:a6:8b:64:b7:
dd:1e:7b:b4:fa:4f:58:c6:d5:18:b1:28:d1:44:3b:
b9:fb:0e:35:55:0b:64:ba:13:d6:6e:ed:9a:48:4f:
d6:b6:b4:d7:63:c1:2b:d5:cf:d3:8d:f5:ec:3e:83:
c3:bf:e2:72:61:9c:5e:94:5d:d6:1a:f8:82:ee:6c:
64:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A7:9B:AE:79:4A:66:2B:11:25:B5:90:C7:9A:95:3C:FE:02:63:F9
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:15:79:0b:98:0b:a1:8a:fa:a9:b4:64:2d:f8:2c:eb:0a:f3:
9f:08:a6:51:f8:a4:54:58:2d:91:0c:96:70:52:e5:fe:a5:1d:
d9:bc:2f:f2:ea:34:ac:2d:13:19:62:a5:af:e5:01:66:9a:b6:
cc:6a:a0:9c:a2:2c:14:9b:7d:3d:08:6f:1b:99:1f:3a:3e:ae:
2f:c6:a7:36:50:ef:24:ad:b5:a7:ca:d5:a4:a0:e8:66:6c:8b:
d7:fe:41:b8:ea:c4:08:41:95:ba:67:d0:56:79:62:7c:43:1a:
f9:c3:92:62:ec:cd:91:ea:bd:e1:91:1e:4b:62:a9:1f:19:67:
10:8c:1f:01:79:ab:91:ff:c9:29:fa:93:b2:11:a7:92:52:fc:
5a:47:84:b3:d4:f2:e1:9f:c3:7c:7a:51:e6:9a:9a:af:5b:fd:
2b:50:1b:09:ec:43:6a:e7:c3:35:53:cc:9e:77:bd:ed:6e:b9:
79:5c:25:72:21:57:b1:02:39:53:80:36:92:f6:a0:07:54:8d:
9a:37:34:28:49:15:28:2a:08:59:df:21:1f:52:86:bb:b3:cb:
05:e7:89:80:62:fc:df:97:fd:90:50:cc:1e:6f:21:83:c4:07:
52:15:9b:7e:f8:fc:1e:cb:93:1b:e4:03:ea:93:48:c1:3d:f6:
14:e7:bf:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:17:20 2026 by rpki-client