Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: ruKYxLaNgS6YNvNIvOg6qLMIZdN7Sp9cxwNsH/vbGhg=
Subject key identifier: 87:4B:E8:48:52:3B:4A:67:F4:42:B3:09:0A:28:10:7B:5C:F2:59:AA
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 01A17C2926BE6ECFE01B1A744B9941510ACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 0C2A
Signing time: Tue 27 Oct 2026 07:00:33 +0000
Manifest this update: Tue 27 Oct 2026 07:00:33 +0000
Manifest next update: Wed 28 Oct 2026 07:00:33 +0000
Files and hashes: 1: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: jIEc+Z/F3OTpXFshA+TE/WBjHx0Yj1F2+eoWuqtYmoc=)
2: aPWLJM6IziuoIQ-9dg15aPOtRRI.roa (hash: nW9Lbvb0zK8UkUgMG6xc5L/WUYzGO8kQcti52apyWJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 07:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:26:be:6e:cf:e0:1b:1a:74:4b:99:41:51:0a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: Oct 27 07:00:33 2026 GMT
Not After : Oct 28 07:00:33 2026 GMT
Subject: CN=874be848523b4a67f442b3090a28107b5cf259aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:16:29:a8:03:5d:24:7a:29:53:ce:1e:21:04:
27:1e:e3:e3:67:d7:ed:46:1c:73:41:fb:94:ef:df:
b9:1b:8d:d0:bb:f5:86:91:2e:c3:e7:e0:a8:ec:df:
36:a7:e2:7c:e6:15:ff:15:b3:f8:1b:ed:c4:38:7d:
2f:c0:f8:41:53:49:d6:84:24:9f:8d:0c:c4:ce:b6:
f6:8b:b6:4b:73:87:5f:a2:a0:3d:8f:bc:b9:f8:1b:
dd:a5:e0:92:dd:c8:ac:1b:16:2e:4e:17:1e:6d:c4:
0d:5e:5b:bb:7a:2d:e9:cd:ec:ab:ff:68:eb:66:75:
9a:10:9a:15:c8:7e:31:c5:04:57:3c:c7:a9:1c:62:
9c:51:76:c3:b5:6e:ba:cd:f8:79:e6:52:bc:df:74:
41:00:66:3d:57:21:d1:a7:6e:a3:01:03:e8:36:67:
ab:2d:36:c0:4e:f0:90:34:d2:98:ac:74:6f:bd:4e:
e8:8a:34:06:b9:4e:fb:01:9b:e6:7a:71:21:27:d4:
25:f3:77:f2:12:0e:12:5b:7a:d0:8b:a1:6a:91:0a:
49:7b:e9:92:c6:f0:56:b2:37:2a:c1:92:80:7e:07:
9b:2e:43:1b:c1:af:aa:79:71:17:52:77:78:e0:53:
6f:09:07:79:4a:be:51:d3:7e:0a:3a:cf:38:02:a7:
e9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4B:E8:48:52:3B:4A:67:F4:42:B3:09:0A:28:10:7B:5C:F2:59:AA
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:34:f9:3b:16:6b:69:ae:97:83:d0:1d:be:7f:7d:6b:d4:7f:
0f:8a:4f:41:17:74:87:b4:b9:eb:9c:ad:a6:b8:b0:8f:03:bb:
e2:d7:1d:51:22:af:ec:7c:25:4a:6e:fa:84:4e:15:93:b2:93:
4b:31:a1:cf:a6:a2:31:cc:b2:fb:3f:29:b3:29:26:fc:8f:31:
ec:84:db:5e:15:b2:53:8a:8e:9e:ba:af:82:64:15:e5:25:84:
6b:f8:2f:a9:ba:5f:f3:0b:21:73:1f:fd:cb:fc:9d:56:f5:c8:
c9:fb:24:40:5f:dd:19:e9:ca:a4:c0:4a:95:82:d0:ae:e7:14:
f3:7f:e7:2c:2a:49:0d:3f:f7:1f:a4:f4:42:5b:dc:ec:09:51:
47:13:df:72:2e:29:5c:d9:fb:4a:71:a0:68:fd:a3:96:e4:b6:
57:1b:cc:1f:36:6d:dc:2a:97:25:2d:7e:0f:2e:01:f1:cf:7f:
05:e6:83:c0:d9:11:ea:63:47:e6:29:bd:12:b7:0d:43:d6:74:
7b:4b:84:09:67:21:13:51:93:76:a2:fe:bb:7c:75:24:f2:4a:
38:e0:df:e9:b1:ac:08:c2:80:5f:9b:77:34:48:cd:37:52:85:
8c:70:62:b4:25:a4:29:5c:cb:b9:85:85:61:41:da:aa:af:cf:
52:5e:fe:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:35:46 2026 by rpki-client