Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
File: QRxDIgghkceeLYbbThv50HGOJ-k.mft (raw, json)
Hash identifier: nzQtN4duNPCKxEE6CopEdA+eKeJULIkAmvgRe2Q28Tw=
Subject key identifier: 0C:FB:CC:E8:2B:AF:AC:FF:DD:33:05:43:DA:96:D7:EA:42:40:D6:3E
Authority key identifier: 41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
Certificate issuer: /CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Certificate serial: 01A18006CDDFE1B1C91D92888151AAA31A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
Manifest number: 1AC7
Signing time: Wed 28 Oct 2026 01:01:31 +0000
Manifest this update: Wed 28 Oct 2026 01:01:31 +0000
Manifest next update: Thu 29 Oct 2026 01:01:31 +0000
Files and hashes: 1: QRxDIgghkceeLYbbThv50HGOJ-k.crl (hash: TlCpzN2WnZ9+OukCGvRVuZtet5+QOcPAsEIxFqRk8dA=)
2: hGGdrn8Q-dhLWfi_gTkJoK3l29E.roa (hash: 9MCdA6GuzpZs6FZt15tnmy+ZE9OMe0TMy0YGpKngBio=)
3: iNjCT_BLZd9vl0rv4dLzCKK08gs.roa (hash: mlyMniHzelFP8RaHqU3fioWDlio2eP7RJTE7Lvl+uWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:cd:df:e1:b1:c9:1d:92:88:81:51:aa:a3:1a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411c4322082191c79e2d86db4e1bf9d0718e27e9
Validity
Not Before: Oct 28 01:01:31 2026 GMT
Not After : Oct 29 01:01:31 2026 GMT
Subject: CN=0cfbcce82bafacffdd330543da96d7ea4240d63e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9a:a7:a6:0d:5f:9f:d3:fc:68:b5:65:77:f7:
14:e1:f7:aa:68:dd:85:f1:e9:ca:66:70:21:2f:c4:
5b:54:c6:e5:84:d5:d5:ee:e1:fd:89:77:2b:c2:72:
6b:4f:73:34:35:6d:dc:4d:00:b0:1a:c2:a0:71:37:
f3:df:dc:13:87:ae:e7:29:c2:e2:6f:f5:35:3d:c0:
56:7c:4d:5a:bd:c0:3f:03:a7:6f:2a:0b:16:69:c3:
1a:f5:bb:37:3b:14:3b:db:c6:fe:62:b3:aa:b5:0e:
c9:79:ee:5a:a9:a2:23:2b:7f:c9:04:f4:e7:d7:b6:
3a:b4:cc:5f:d8:e1:ab:cc:77:70:86:37:53:af:e4:
fa:ae:8d:21:df:d0:89:48:95:77:d8:d3:00:d8:bf:
12:cd:06:4d:46:b7:28:0d:b5:1c:be:2e:f8:62:3b:
f3:32:cd:59:dd:2a:9c:59:50:c0:f2:41:4b:2a:1d:
38:ea:0f:2a:f4:05:67:a7:20:f3:af:35:1b:cf:5d:
a0:c4:9d:92:69:8f:99:03:c8:48:4e:3d:b5:81:ff:
03:5c:69:38:db:e3:98:46:d7:db:72:e5:57:2d:05:
99:72:56:7d:b7:fe:dd:13:9e:cc:5f:3d:a8:7a:f9:
fa:a2:1d:3f:88:df:d9:fc:74:86:61:ba:f4:53:28:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FB:CC:E8:2B:AF:AC:FF:DD:33:05:43:DA:96:D7:EA:42:40:D6:3E
X509v3 Authority Key Identifier:
keyid:41:1C:43:22:08:21:91:C7:9E:2D:86:DB:4E:1B:F9:D0:71:8E:27:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRxDIgghkceeLYbbThv50HGOJ-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a7938f-7c9a-43c9-95f3-f3810bd70376/1/QRxDIgghkceeLYbbThv50HGOJ-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:9f:b1:32:1d:29:7a:12:fa:d3:6f:44:2a:d9:c9:ff:ae:0e:
9f:d1:84:a9:38:70:e8:76:d9:7e:55:30:da:13:e4:15:33:6c:
5f:b1:fd:ce:03:38:1e:64:91:f1:59:45:94:bc:3e:56:ea:0a:
5f:6e:80:13:dc:ba:86:cd:c9:94:cf:56:40:dd:0a:eb:25:f9:
a1:98:96:d9:22:ad:12:04:cf:87:85:92:8a:db:48:98:d5:91:
c1:84:86:75:8a:90:d2:92:11:00:8c:61:8d:28:b7:4b:5e:d7:
9e:88:b0:6c:50:22:25:54:22:95:ee:7f:d5:c4:0a:55:fe:2a:
68:2c:32:34:5d:b0:60:fa:88:e1:a7:ed:ca:bc:9c:39:af:65:
9c:85:2a:51:88:99:4e:a9:fe:53:3b:46:8a:54:3a:02:90:2b:
85:54:e3:b8:fc:fc:ae:5a:a7:27:2c:6b:7e:6f:0d:d3:69:12:
8e:e5:9c:1f:bf:fe:09:e2:e3:c4:26:9f:4c:b9:4f:95:fc:1e:
e5:c4:ca:22:98:94:2f:4e:b6:6b:27:9c:70:22:02:c5:bd:40:
ac:a1:91:95:12:cb:a0:31:2b:36:4d:2d:11:43:0a:c4:aa:c5:
d1:d5:1e:74:7d:57:dd:a8:65:3a:ba:5a:bf:ce:e4:40:16:2d:
36:50:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:46:53 2026 by rpki-client