Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
File: QRbw6a_zmosZbEg-CF3nnyRtn90.mft (raw, json)
Hash identifier: yqLeCZp9e9cGd7ZmVPcjVL9aCfR6IFxRpa/ev6GihJU=
Subject key identifier: 54:9D:31:5F:60:15:E6:04:39:20:5E:21:2C:44:18:0E:06:AB:1C:92
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 01A183E338CF5C9CCFACF6051D11FC8F1280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
Manifest number: 1063
Signing time: Wed 28 Oct 2026 19:01:08 +0000
Manifest this update: Wed 28 Oct 2026 19:01:08 +0000
Manifest next update: Thu 29 Oct 2026 19:01:08 +0000
Files and hashes: 1: Gj-RMjqwsOJ3ts40DQnIUo1O6KI.roa (hash: oC3k+gGJD7d0/8XuzNB9Jx2RbfjuCF68+g7utMnVb4Y=)
2: QRbw6a_zmosZbEg-CF3nnyRtn90.crl (hash: CIc4WUHJdO+sBke0D5PgO4z3fsGtvazoSttR2CoGEq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:e3:38:cf:5c:9c:cf:ac:f6:05:1d:11:fc:8f:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Oct 28 19:01:08 2026 GMT
Not After : Oct 29 19:01:08 2026 GMT
Subject: CN=549d315f6015e60439205e212c44180e06ab1c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:82:97:a1:b1:4a:00:be:79:ea:2f:d2:c0:68:
3e:82:b3:d6:cc:fe:f5:51:08:5b:e3:aa:80:06:25:
f6:1c:e0:56:06:f6:76:d5:c3:47:3e:e9:cb:84:d7:
cd:7d:ea:c1:7c:10:a7:92:f2:4a:49:bf:89:d2:1a:
07:17:ad:ce:50:c5:4d:fb:4c:70:98:11:38:5e:ef:
30:2e:b0:51:77:1b:61:37:c1:4a:06:0e:5a:17:e1:
59:90:6c:9e:f1:9b:74:06:0a:50:6b:de:32:ee:3d:
04:6b:63:00:d8:84:44:fd:7a:59:96:5e:6e:fd:ee:
89:ce:01:e4:0e:c5:87:04:cf:4a:85:7c:87:14:9c:
0c:74:3e:3e:f9:b3:fd:29:fc:e2:70:7a:8d:25:2c:
5c:76:e1:9d:1e:74:20:ac:04:99:49:7f:9c:ca:17:
68:c5:26:a3:4f:f6:b6:e1:d7:07:33:b9:17:65:22:
f1:cc:00:95:5b:f8:b7:ad:97:23:a8:11:80:a0:90:
9e:34:89:4a:a9:25:0e:dd:07:02:52:bb:cb:5b:4d:
3b:d3:f7:98:46:06:b8:8f:87:9c:44:68:53:fc:c8:
c4:cb:55:d9:f7:d5:bd:18:62:dc:b1:62:fc:50:96:
be:5c:da:5b:bf:9d:27:6c:89:9f:99:67:31:b9:25:
dc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9D:31:5F:60:15:E6:04:39:20:5E:21:2C:44:18:0E:06:AB:1C:92
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:94:77:6e:89:8f:d8:0c:05:b1:a1:32:f5:4f:9e:cb:d6:9f:
39:6b:67:6e:10:d9:ba:d1:31:16:6e:cd:11:44:e9:d0:9a:19:
7f:82:0a:d7:c3:9c:12:24:8c:d6:8e:14:a0:86:76:f3:0d:0d:
28:c9:ec:f7:2e:cb:3b:a9:ee:19:53:98:2b:d0:75:db:07:3a:
b7:f4:91:cd:2b:44:3a:ea:0f:55:53:e3:db:9a:52:e5:80:d1:
31:d0:e0:43:78:e4:09:93:16:4a:e4:d7:4a:24:29:85:d9:6a:
f7:3a:98:3a:a7:51:d7:45:ff:9d:c5:d9:00:cf:4f:1e:f2:be:
20:11:cd:6e:21:51:46:1f:ac:b3:25:cf:19:40:30:f7:9b:ab:
8a:5c:99:a0:45:c8:a1:72:a0:ad:f0:3c:6b:bd:57:6a:eb:52:
da:90:d4:6a:fe:97:2c:1f:d9:05:a7:d0:83:f3:42:7d:f3:46:
d0:69:cc:7f:1b:fe:8b:83:83:bf:34:fc:a7:b7:82:fd:bf:e9:
79:ae:92:b6:04:73:cf:55:32:ab:e1:26:cb:50:a7:a1:4a:62:
62:5f:e0:25:76:71:6c:58:ab:77:76:fb:cc:ac:e1:c6:2f:f2:
86:48:d5:c8:43:ad:b8:c7:10:bd:46:2c:66:03:a8:5d:fb:af:
b5:30:29:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:48:54 2026 by rpki-client