Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: g4sktVcVdJbTC6gos1LA2ydmjfmp3I4zCTls0Hna7Og=
Subject key identifier: 5A:C5:F5:67:E4:9A:66:B6:ED:45:18:77:8A:EB:AF:FB:39:73:5F:78
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 01A17E85FBBE345948E2005918379C1DD79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 19F7
Signing time: Tue 27 Oct 2026 18:01:12 +0000
Manifest this update: Tue 27 Oct 2026 18:01:12 +0000
Manifest next update: Wed 28 Oct 2026 18:01:12 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: vOvaG3up927sJ5H6GrGBW47iFdUSUvXezIaRJolCU/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:85:fb:be:34:59:48:e2:00:59:18:37:9c:1d:d7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Oct 27 18:01:12 2026 GMT
Not After : Oct 28 18:01:12 2026 GMT
Subject: CN=5ac5f567e49a66b6ed4518778aebaffb39735f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d5:4b:ac:9a:22:7f:29:c6:42:59:3f:81:41:
20:0a:bc:ca:36:e1:db:b7:62:f5:8e:40:08:98:eb:
14:88:87:6e:94:53:e7:34:ec:eb:8e:35:55:03:e1:
88:c6:b4:3f:4f:b3:4d:44:a4:a1:ab:e4:39:40:5b:
7b:ed:0a:f1:dd:0b:ba:4e:2b:03:20:88:30:5f:9b:
f8:3f:88:1c:0e:b9:b3:6e:e0:da:e3:53:89:ba:ed:
f4:a6:bf:be:60:15:44:24:9b:df:f7:0d:20:60:5a:
a8:03:9b:31:ce:85:29:e1:d2:c0:a7:8d:44:d7:82:
34:8f:41:01:ec:5a:3b:24:55:e9:13:bf:83:37:17:
dc:f6:9f:16:f7:0e:b8:ca:d8:44:95:79:1b:39:00:
e5:91:27:c8:f5:02:72:70:46:4a:1d:c8:55:b9:77:
51:5a:91:7e:56:cb:aa:f5:88:aa:54:cf:ed:25:df:
6d:b9:0e:76:4c:0d:0f:36:0c:10:a5:8d:3b:64:08:
31:93:7b:77:cc:08:f2:61:14:7d:c0:a2:80:ce:15:
c7:80:48:d7:f5:6b:0a:d5:84:76:63:59:b7:5e:df:
3e:f6:d4:68:5a:af:de:a9:2c:43:3c:e3:dd:e5:31:
d9:93:42:ce:26:fa:48:6a:f7:e8:c8:4f:3c:92:68:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C5:F5:67:E4:9A:66:B6:ED:45:18:77:8A:EB:AF:FB:39:73:5F:78
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:0a:4f:a2:b9:43:69:9b:15:0c:22:5b:22:d8:46:6f:7b:91:
1b:ec:56:8b:f1:33:6a:6e:18:5c:98:5d:3e:c6:75:cf:f3:ea:
df:ba:77:43:41:e8:d3:94:72:3d:02:cf:29:f5:ed:a8:6b:85:
78:85:89:3a:71:c8:12:ff:1c:28:42:a9:d0:ff:9d:aa:ec:34:
49:0b:4b:33:77:46:c4:63:f7:e2:aa:05:20:81:a0:31:a7:a0:
0e:82:02:f5:e6:ee:db:08:63:f3:1b:63:8c:fd:7a:ef:c1:3a:
72:08:e8:f9:a3:69:5b:d5:96:0f:f1:6f:1e:6e:08:2b:39:ce:
fe:e3:81:ea:42:a5:7a:9f:a1:d7:9f:93:63:41:5b:f7:ac:93:
a6:a0:0e:f9:62:92:40:f9:a4:69:c7:58:67:66:5b:08:2a:23:
70:55:74:51:e5:77:71:49:2e:a4:09:58:1a:31:28:a3:10:3f:
23:2a:dd:4f:fc:c9:9d:59:67:0f:1c:f7:aa:19:80:c1:4c:89:
f7:ab:80:f4:2a:a8:50:ad:a7:e4:c6:44:f8:2c:7e:6d:e7:09:
49:d6:60:24:4a:a0:4d:39:d3:d4:1f:b7:7d:3a:61:6c:4c:16:
cc:be:cc:ac:0a:c6:ca:23:8d:a6:5d:82:e1:c3:55:40:b7:33:
60:d5:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:37:28 2026 by rpki-client