Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: qGdT7VH1GCU3w6Wwp7OY9b1gvqtGv49vqRFd6FSnOrs=
Subject key identifier: 76:2A:C9:7E:B1:7C:FE:EE:16:26:A9:CD:24:3E:BD:92:5E:39:9F:32
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 01A18AF72A731F2393DB3D817D3282047364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 066F
Signing time: Fri 30 Oct 2026 04:00:16 +0000
Manifest this update: Fri 30 Oct 2026 04:00:16 +0000
Manifest next update: Sat 31 Oct 2026 04:00:16 +0000
Files and hashes: 1: G8uE_YXvAUsbhoJ7QQgS2ptGK4I.roa (hash: BCzWL8FjjNpuELNVuLODI9jH/96WSdwiWl+ywyyb3Cc=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: 0UEo5wfB6LDKqbmoV7jqAIQdXT7JzcMxzi7xLXI9fZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:f7:2a:73:1f:23:93:db:3d:81:7d:32:82:04:73:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Oct 30 04:00:16 2026 GMT
Not After : Oct 31 04:00:16 2026 GMT
Subject: CN=762ac97eb17cfeee1626a9cd243ebd925e399f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:52:b9:ba:79:1b:19:78:ee:f0:13:21:12:93:
63:a9:2b:91:77:d5:2e:65:34:3b:7d:a9:b4:41:75:
54:b4:01:b0:60:68:f0:30:b0:a5:e7:63:70:ab:3d:
cd:39:7f:c3:9b:4b:1a:f9:b4:ac:8f:c7:f9:51:ad:
d9:46:04:1c:59:0b:e9:94:c2:27:75:e1:79:f5:d9:
a5:b3:c2:b2:6a:6d:70:c0:c3:cd:8a:21:9a:5e:c6:
50:75:4d:b7:bd:e0:90:3d:f9:5b:15:dc:39:84:f7:
97:31:b5:ce:ae:7d:38:b9:7d:53:7a:7f:d9:26:b3:
e8:01:22:1c:93:bd:77:7b:c7:2e:ba:d2:c9:75:04:
18:e4:7d:fe:fb:69:7d:28:13:a1:a0:8a:fd:3c:c5:
04:8e:f0:37:54:7f:c8:5d:c5:bb:22:cd:47:c7:8f:
1a:d5:67:85:e8:bb:cd:2d:71:5e:54:7a:de:2a:83:
3d:00:c2:27:2a:19:92:d7:9f:76:9e:c9:40:4f:5a:
bd:8d:d0:5d:9e:c8:8a:fd:f7:7e:14:25:27:65:ca:
d4:06:38:d0:dd:b2:08:a8:a6:2c:22:31:38:fb:0c:
8b:94:82:96:c9:e5:6f:b3:09:e7:23:50:1b:bd:ea:
07:f5:33:15:82:9c:a7:90:47:22:4d:1e:b8:93:51:
7d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2A:C9:7E:B1:7C:FE:EE:16:26:A9:CD:24:3E:BD:92:5E:39:9F:32
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:78:b6:07:63:51:2f:77:bc:64:da:71:da:d3:12:57:7b:f6:
75:42:72:c5:e3:1f:b7:47:b3:49:53:5a:a3:e2:eb:ea:af:94:
86:f0:17:21:24:79:be:9b:fb:95:ee:37:bc:c6:61:b6:ca:84:
23:78:85:e0:5b:94:bc:b0:61:c7:d1:d9:ee:ff:6b:ea:fe:9a:
2a:44:01:06:4e:34:28:b2:8e:26:ec:53:12:74:e4:4d:21:e0:
ba:d6:a1:44:20:32:ef:e8:6f:2b:da:a8:9f:30:2b:2b:46:bb:
46:97:48:65:db:bc:a6:70:10:83:70:b6:0b:eb:11:ed:56:d6:
ab:45:25:db:de:45:56:8d:66:dd:17:52:b8:10:b5:e7:f8:e7:
3d:09:6e:b9:59:bc:a4:ff:b4:ab:73:58:27:52:ef:d4:c9:94:
d2:92:79:7e:1b:94:30:be:83:ae:ef:7b:05:59:3e:58:97:66:
59:2b:32:3c:b3:ef:76:f9:1f:a0:55:94:10:80:22:8a:f7:61:
0a:62:14:2f:37:1e:57:cf:81:cf:75:03:1b:89:9a:65:04:cc:
6d:36:a0:61:00:eb:2d:1a:b6:f4:26:86:67:bc:cf:0c:6f:87:
81:24:0c:6b:f5:a8:64:c0:2a:75:f5:ad:cf:81:0a:cf:f8:a1:
29:96:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:23:43 2026 by rpki-client