Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: UCyST78cuic8UHTugtR67cAmS6nC+xhak0wPDzm6wjE=
Subject key identifier: 12:04:E0:6D:0A:7F:4A:8C:E7:4A:4A:F3:AE:2A:5C:9F:7D:B1:09:4C
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 01A17A3AFB998E41442E7E35ABD2B6663749
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 0C29
Signing time: Mon 26 Oct 2026 22:00:48 +0000
Manifest this update: Mon 26 Oct 2026 22:00:48 +0000
Manifest next update: Tue 27 Oct 2026 22:00:48 +0000
Files and hashes: 1: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: as0afh0uiykgSM6YYg7qWvOrHOzgpoNld+bWvPSACDM=)
2: aPWLJM6IziuoIQ-9dg15aPOtRRI.roa (hash: nW9Lbvb0zK8UkUgMG6xc5L/WUYzGO8kQcti52apyWJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:fb:99:8e:41:44:2e:7e:35:ab:d2:b6:66:37:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: Oct 26 22:00:48 2026 GMT
Not After : Oct 27 22:00:48 2026 GMT
Subject: CN=1204e06d0a7f4a8ce74a4af3ae2a5c9f7db1094c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9f:33:ea:8f:d8:3c:e5:3f:34:eb:d4:84:cf:
f3:5e:c5:49:a8:67:a5:8b:ef:73:7c:25:d4:f8:77:
ce:3c:ce:86:ca:a8:a1:7c:cb:9d:99:38:fc:63:32:
d8:d5:56:b2:24:27:a5:8e:1e:82:60:a1:8a:5c:98:
50:b2:69:8e:fa:da:38:e7:15:a1:38:ab:06:76:0c:
9e:66:56:4e:33:85:6d:a0:61:a3:49:95:e5:74:ba:
4e:fc:47:80:92:08:76:d0:dc:55:2d:7b:1f:ce:83:
87:f8:db:52:06:1c:86:d5:f0:bb:a3:28:b1:b7:4f:
be:e9:7c:e3:f0:b1:03:46:b1:8b:ed:5d:7d:d6:c2:
31:cd:54:4b:c8:92:50:58:1d:69:51:33:6d:c6:7b:
87:72:b0:ec:46:79:5c:c0:5a:ea:73:cb:a7:48:dd:
3f:35:2c:45:43:8c:d5:9a:82:15:98:13:8d:df:cd:
fe:79:91:da:35:af:a8:dc:0b:73:d8:3f:62:3b:9f:
1f:b3:ff:5f:7d:f3:53:0a:52:dc:5f:72:dc:85:38:
60:5e:9e:cd:c3:1b:72:08:c3:ef:80:11:84:f8:47:
95:c8:14:c1:ea:35:dc:6b:80:9f:f6:96:c9:bb:92:
91:d6:07:b5:63:5e:f7:67:5f:71:82:ef:85:e3:9c:
bc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:E0:6D:0A:7F:4A:8C:E7:4A:4A:F3:AE:2A:5C:9F:7D:B1:09:4C
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:1d:95:37:5d:68:de:f7:3f:e3:52:52:37:30:1a:83:38:3d:
2d:4f:0f:bc:81:40:5d:a4:5d:4f:6b:e1:23:9b:49:52:53:46:
da:61:c8:70:77:95:39:58:08:b0:c5:fa:fe:f7:76:65:b5:5f:
a2:0a:48:be:7b:84:c5:7c:d0:9f:e2:ef:a5:93:f2:f0:97:08:
44:62:79:ff:a1:a2:af:01:d0:66:6b:7c:5c:1d:42:f0:ff:f1:
79:da:ed:08:c5:c2:1c:1a:bc:a6:fb:e9:27:95:5f:b6:c7:7b:
06:a9:54:9d:e4:33:b1:b7:49:ea:84:cf:9e:1f:17:14:9c:b2:
14:73:14:45:4a:43:2b:85:cc:32:1a:41:6d:3b:38:b8:96:78:
f1:38:09:4e:12:84:fc:55:02:67:0c:da:75:1f:2d:63:88:4c:
1f:d8:e9:b3:b2:ca:54:0e:c4:c1:2f:d6:f2:d4:e6:6a:7a:19:
b9:88:f4:8b:79:fc:14:a8:49:c5:1e:5d:e4:f6:12:61:e4:b5:
07:37:b6:d2:87:4d:74:75:15:76:22:d4:44:6c:15:e2:f0:b9:
8f:77:46:0a:a6:51:92:aa:59:39:fd:26:25:46:d5:50:41:35:
78:2a:ad:7f:df:8a:e6:dc:32:0c:63:cf:79:3c:5a:ba:68:88:
8c:cb:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:26:22 2026 by rpki-client