Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
File: QgzD80v9Q6xc32EDez0WyWfXMjc.mft (raw, json)
Hash identifier: K6jVx2Feewh2jgfOg7hmSe2uWnFAZ5jTHDT7f5lu/ew=
Subject key identifier: 60:A8:88:1C:17:40:AB:B0:55:9D:43:5D:56:12:4E:F2:91:B9:1C:83
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 01A10B828AF4B246F62C87386EF953D44DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
Manifest number: 06E7
Signing time: Mon 05 Oct 2026 10:01:06 +0000
Manifest this update: Mon 05 Oct 2026 10:01:06 +0000
Manifest next update: Tue 06 Oct 2026 10:01:06 +0000
Files and hashes: 1: 2XIrFY7sSUmf0ZXtm7NFV38W-DM.roa (hash: VPm4JxETY4pUG2qbLQfLY9WMJOpVuE0GwkXWlkKqHlA=)
2: QgzD80v9Q6xc32EDez0WyWfXMjc.crl (hash: OaPI+H4rRR7nfdj9X/YsCDqviuuahvtejpVB5ByGA/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:82:8a:f4:b2:46:f6:2c:87:38:6e:f9:53:d4:4d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Oct 5 10:01:06 2026 GMT
Not After : Oct 6 10:01:06 2026 GMT
Subject: CN=60a8881c1740abb0559d435d56124ef291b91c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6b:89:ef:48:e3:7c:48:58:1a:fc:84:b5:97:
a5:1f:92:2d:51:4d:09:10:84:59:cc:6b:8c:9e:75:
fb:64:07:17:a5:24:b9:4b:3a:da:50:e9:da:d1:41:
54:a1:bb:a0:52:50:ea:c6:ad:f0:ec:26:cc:b2:c6:
7f:31:95:0f:33:ed:d4:77:27:e7:99:58:2d:84:e2:
8c:19:12:e6:83:fe:fc:41:f1:56:e0:e5:74:36:c0:
a4:88:17:4e:41:00:b2:e0:42:c1:c8:85:29:64:a5:
d3:d2:48:ea:0c:22:e9:a1:55:f1:fa:5c:b9:38:c0:
43:8b:90:5a:9d:5c:6c:42:c6:e0:75:0a:b8:62:a2:
3e:19:c6:92:58:56:4b:b5:c6:ff:63:d0:f5:f7:a8:
97:11:e1:bc:47:d3:3d:9c:c7:31:84:52:39:39:56:
13:98:68:a2:03:27:a9:bc:aa:3e:f3:77:36:cc:9a:
4c:18:41:d5:82:b1:5a:c4:9f:29:2f:cb:12:e0:f8:
38:b1:06:d5:f5:b2:a3:56:1c:53:25:a9:71:05:42:
35:3c:fd:af:be:fb:94:86:63:45:d6:74:e4:62:79:
9b:e4:d5:96:34:db:6e:fc:63:81:97:16:79:07:cb:
de:08:f7:e2:c6:10:86:3e:79:d6:b3:94:2d:ea:67:
9f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A8:88:1C:17:40:AB:B0:55:9D:43:5D:56:12:4E:F2:91:B9:1C:83
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e5:0c:90:c5:d2:eb:20:43:97:52:79:2a:22:3e:f3:fc:d6:
0d:2c:4b:66:c4:db:b1:ff:b6:4d:21:d1:ae:cb:ed:79:2c:c5:
4e:37:99:03:73:80:7c:63:df:1e:62:44:a2:28:c5:d2:a1:3f:
f4:f6:31:ac:03:d2:87:35:2c:0d:43:92:06:20:23:f7:47:86:
17:fc:0d:6c:bc:7b:56:be:04:65:83:92:ea:e0:8a:96:e9:55:
37:dd:3a:da:b6:72:77:1e:79:6c:ab:b9:ca:f4:79:1f:ff:0d:
4c:71:37:e5:22:e3:e9:5f:46:05:bc:e3:34:35:41:aa:23:70:
e1:b7:d2:bb:af:07:8a:40:0c:1c:47:22:49:04:e8:d4:d4:73:
c7:0a:0e:83:8c:a8:f3:05:fd:73:aa:d2:bb:9e:a4:d8:c4:c2:
5d:a9:ef:84:bd:f9:88:26:0d:81:24:f2:58:0d:e7:c1:fb:14:
17:c2:2c:3f:33:a6:cf:a6:33:9f:fc:4c:0d:fc:ac:ab:b0:22:
7f:f4:b9:1b:e2:fc:fc:e6:3a:9f:f4:85:c6:80:34:b2:57:25:
7b:48:0a:34:9c:fb:18:37:58:e9:d0:93:8f:d5:2e:f8:c1:f2:
86:8a:41:07:b3:ef:a6:45:f0:7d:54:9f:a7:b9:22:c7:06:5e:
b9:2c:e0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 16:56:30 2026 by rpki-client