Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: RxcYS+cMOHk14HN8jSizllSbgZnqX0jlGF+YkKAVdu8=
Subject key identifier: 6E:05:CD:EE:7F:CE:E0:5E:1C:56:89:A4:96:C9:75:D0:F3:FD:09:1F
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 01A16F12580D07CD93C0429E029341CB89BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 1AC0
Signing time: Sat 24 Oct 2026 18:00:35 +0000
Manifest this update: Sat 24 Oct 2026 18:00:35 +0000
Manifest next update: Sun 25 Oct 2026 18:00:35 +0000
Files and hashes: 1: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: fq6WEnqnjPMI2tZGGCRKNMiffe4KxCQBp9H4mOB9qRs=)
2: dzTzYf-TKYJMVkOvvaBfstjTJ9w.roa (hash: ZIgS2/isxUOPCfVNIh153dBZ1pmUGjEqXD0BSekDaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:12:58:0d:07:cd:93:c0:42:9e:02:93:41:cb:89:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Oct 24 18:00:35 2026 GMT
Not After : Oct 25 18:00:35 2026 GMT
Subject: CN=6e05cdee7fcee05e1c5689a496c975d0f3fd091f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f3:2a:b1:e3:d2:1e:ca:62:5f:fa:74:54:77:
86:6e:eb:50:eb:77:d1:c4:fc:ba:ec:7f:c1:ba:87:
ff:37:cd:51:58:db:41:ea:0a:b4:09:cc:2f:75:d5:
aa:55:2c:ed:03:c2:f0:c0:a0:9c:06:17:b7:4e:5b:
6b:0f:9d:ed:b6:0a:bc:8c:5c:46:b7:33:15:7e:81:
81:05:ee:48:0f:74:c2:d4:01:c9:4b:9f:70:3b:0e:
ee:1c:9e:a1:34:24:6e:d9:0f:4d:b1:b5:90:04:f7:
9c:b8:f4:8b:3b:d6:0b:5d:37:99:82:4f:a5:b6:55:
95:8c:54:32:0b:ca:16:bd:94:01:cf:59:44:23:1b:
fb:62:6f:1b:5b:36:cf:b2:fa:da:11:3d:45:6e:3f:
5b:f8:00:0d:00:23:15:0a:e4:fb:3c:27:8b:c3:4a:
19:ac:f6:7c:83:31:52:cb:69:e4:72:b7:96:c0:7f:
14:cd:87:4e:b8:82:47:b6:a8:06:65:1e:4e:d4:f5:
e1:84:4d:93:2b:c7:c3:fc:fc:df:ee:d9:88:8a:6e:
2d:de:94:22:02:22:49:e7:3b:d5:da:40:97:78:71:
36:08:90:96:d0:ed:63:e4:d2:d8:44:d5:12:45:da:
63:1a:cf:6a:66:cd:c7:c7:03:5e:3f:e4:cb:b4:c3:
ca:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:05:CD:EE:7F:CE:E0:5E:1C:56:89:A4:96:C9:75:D0:F3:FD:09:1F
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:0f:7b:55:7f:79:07:bd:da:5c:28:85:7a:fb:27:8f:12:07:
a3:8c:ed:69:8e:2f:4b:7f:12:e4:9d:30:11:3e:ca:0a:e4:ff:
18:c8:9e:fd:60:fd:da:cf:96:ad:a5:f0:d3:37:fd:fd:1a:91:
32:ec:03:3b:f4:4e:dd:a8:4a:59:e7:c7:34:76:9c:f3:fd:0f:
e5:30:09:be:cd:83:bb:60:53:32:d9:de:e8:6d:63:97:1c:5c:
89:90:f7:b7:44:ba:05:34:40:01:74:19:c5:07:07:95:b8:eb:
42:92:f0:e1:ed:f4:b0:c9:a6:86:7b:00:93:ab:1d:80:d1:af:
43:e5:3a:98:09:2c:3e:aa:39:76:73:94:4c:4f:aa:e4:df:56:
36:50:61:6b:48:bc:38:e9:27:dc:43:6b:ea:37:56:5e:7f:41:
81:3e:5f:8c:59:e2:2d:be:43:13:75:1c:7c:4d:9f:f6:01:3a:
3c:48:bb:f9:bc:df:50:e1:bc:51:f6:33:21:e3:1b:75:3c:53:
43:18:dd:92:8e:fa:89:e8:10:00:c6:5d:6c:07:6c:a4:ad:fc:
38:3c:75:22:ee:c6:7f:19:57:a8:b0:0a:26:5c:f1:38:41:a6:
d0:7e:b4:18:e5:3c:62:5c:f7:32:13:81:28:ec:e1:56:e3:64:
dd:90:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:57:36 2026 by rpki-client