Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: 5ITxR0mvE5OzjF8yRKxzmfaZ+h5/5tj3By+WPb0wvy0=
Subject key identifier: 33:C6:D8:C3:1F:C4:67:7B:D7:90:DD:07:04:3B:E9:6A:B5:FD:58:56
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 01A1765DE3C9CD45B890EC2ED5C67305D790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 1AC6
Signing time: Mon 26 Oct 2026 04:00:26 +0000
Manifest this update: Mon 26 Oct 2026 04:00:26 +0000
Manifest next update: Tue 27 Oct 2026 04:00:26 +0000
Files and hashes: 1: 4646eK1Tkwjccpu4DCzx2JumzS8.roa (hash: lg2Dl0touPmWfPjJx+g7bMR8N5f9QX+NTtoNaXQCBJU=)
2: EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa (hash: X80Gqz0nE+6UFtGApp5Wktmc8Oc2CPQtKl4rwvAFscI=)
3: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: pMC0RZIEvysp5aAhHSF3GenXHbenHGv4yX5TFLDlRWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:5d:e3:c9:cd:45:b8:90:ec:2e:d5:c6:73:05:d7:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Oct 26 04:00:26 2026 GMT
Not After : Oct 27 04:00:26 2026 GMT
Subject: CN=33c6d8c31fc4677bd790dd07043be96ab5fd5856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:10:0b:10:27:46:50:4b:55:3f:b3:67:33:
bd:a3:53:9f:08:31:41:fa:4c:3b:f8:65:e5:4a:7b:
74:97:aa:fc:77:d1:80:d4:b9:4a:b3:6a:77:e1:c6:
09:aa:1c:ad:5b:81:7b:0d:7e:67:fd:e1:3b:ef:07:
d0:6f:1d:25:3e:f1:0c:31:7f:2c:63:ef:df:1c:69:
7b:ef:d9:77:18:f5:e7:ed:22:70:81:cb:c0:93:51:
53:03:ee:ab:99:23:2c:ec:ff:34:53:76:fc:89:c6:
6d:a4:6d:c5:e7:6e:e1:c4:af:78:f1:b1:26:c9:96:
c4:12:d2:2e:f2:4f:e9:1d:4c:b7:9c:87:23:05:b0:
38:54:3e:ae:11:24:98:c2:ee:02:51:00:f1:41:1d:
78:bf:1d:20:4e:ff:9b:70:b9:ea:39:8d:35:23:a6:
c5:88:c4:bf:45:a9:bc:ad:e1:fe:cc:f0:4c:83:5f:
d2:3b:c5:a4:39:30:9d:19:64:a3:2a:12:ad:95:70:
f1:61:06:01:c6:3a:fa:f4:87:77:83:93:23:f1:9a:
5e:ef:a5:9e:fa:b6:c8:1e:ec:b4:65:69:42:e4:bc:
c9:8f:b1:63:fb:ed:93:b5:88:85:33:20:e5:f9:7d:
aa:6c:38:36:23:00:1a:9f:b4:fb:21:e9:51:6e:47:
82:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C6:D8:C3:1F:C4:67:7B:D7:90:DD:07:04:3B:E9:6A:B5:FD:58:56
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:43:a6:b3:bd:fd:dc:6b:f3:87:8a:d9:02:ac:4d:2a:a7:86:
d8:44:6e:4e:c7:29:c0:a6:a7:22:a6:19:3a:bd:1a:97:89:fd:
34:b8:97:89:21:cd:1f:da:ed:28:8d:be:44:da:2f:3e:13:6c:
44:d7:f8:4b:4c:39:9c:ce:f1:db:0d:76:f8:b1:91:2d:bc:f6:
51:3e:57:6a:b6:ec:98:a8:7f:b8:6a:9e:75:be:d5:68:28:19:
ea:72:23:1b:b2:b5:fb:28:b4:e1:ba:1a:e3:60:04:69:a1:81:
14:8c:0a:8b:d8:f3:3c:52:a8:10:79:e8:da:f3:b0:96:75:da:
f6:94:f5:09:e6:13:f1:94:31:47:ed:00:a0:20:45:ef:8d:4e:
c3:6f:05:a7:14:cd:85:f2:42:16:3e:d5:9a:70:89:bb:af:02:
cd:74:c3:be:5f:cc:01:f1:9f:23:44:44:53:a0:8f:a3:10:cd:
43:6c:e8:a6:ae:3f:a1:0a:dd:7a:ae:8d:db:57:66:de:66:b7:
53:4e:27:b3:56:c6:8e:8a:e0:db:0c:39:a8:48:0b:3e:8c:e1:
6a:78:ec:27:94:ce:da:f3:3d:f1:07:0d:01:3e:46:e5:3c:50:
35:71:00:69:47:e5:91:4a:fc:79:fe:47:07:9c:4e:6e:7d:73:
18:c8:e9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:42:32 2026 by rpki-client