Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: mVuLavz1kcoonR5HQ3b3gs8644UZozJS5ku7sux+eVY=
Subject key identifier: D6:80:C6:F2:24:3F:98:71:74:94:7B:E7:41:FC:8C:6D:F0:E2:1B:60
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 01A17D054CD07463882E35B64E5C43594F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 177E
Signing time: Tue 27 Oct 2026 11:01:01 +0000
Manifest this update: Tue 27 Oct 2026 11:01:01 +0000
Manifest next update: Wed 28 Oct 2026 11:01:01 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: 716+7otCJIHGLJs+xql21POZ4Oet56Gx3PFA7DxHyOA=)
2: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (hash: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:4c:d0:74:63:88:2e:35:b6:4e:5c:43:59:4f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Oct 27 11:01:01 2026 GMT
Not After : Oct 28 11:01:01 2026 GMT
Subject: CN=d680c6f2243f987174947be741fc8c6df0e21b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:b7:a5:5e:8c:0a:91:f4:3d:91:6c:c0:1f:
6a:11:03:5d:95:4c:03:c7:a2:b4:d4:49:e9:33:44:
da:f4:9b:49:99:a2:84:17:ea:f7:bd:8d:33:2f:6d:
92:2e:db:7a:4b:e9:c0:70:5f:6e:cb:b0:d1:64:85:
d1:63:7a:eb:f0:c6:19:22:5d:5a:7b:f9:ba:26:b4:
8a:63:33:7b:46:8d:6b:26:c7:34:d8:c0:5c:28:2a:
9e:20:da:28:21:37:ba:6d:f8:6a:dc:36:b0:01:1a:
42:ee:b1:54:e8:f8:58:7a:64:46:d1:0d:03:06:f1:
85:78:d5:14:ec:fb:d5:21:fd:02:d6:d0:38:bb:d4:
cb:a5:b2:e4:e9:9a:17:2c:eb:59:1e:8e:22:d2:09:
ec:43:57:3d:8f:35:7a:2f:95:8a:e5:e5:6c:d8:06:
4c:b1:1e:d4:99:c0:51:35:64:1d:51:c2:62:c8:f2:
54:5d:67:07:67:64:a5:5f:4c:11:40:a0:6c:7d:b2:
fe:13:15:8b:bd:7c:0e:28:c3:f3:5d:fe:09:f3:ba:
65:a1:09:e3:43:b0:7b:73:c0:e2:a6:52:09:53:18:
fb:b0:eb:e1:de:0c:bf:f7:3f:06:aa:c1:f0:7e:d2:
42:09:02:bc:2f:54:bf:9c:bf:6b:0b:19:8b:9d:0c:
e4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:80:C6:F2:24:3F:98:71:74:94:7B:E7:41:FC:8C:6D:F0:E2:1B:60
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ff:1b:34:54:86:52:ca:52:bc:77:4e:3d:21:da:1d:88:62:
a0:03:8f:6d:e3:0f:86:ca:ed:30:43:f0:86:5c:1c:b7:3f:42:
b8:5c:61:f0:f6:cf:41:74:e4:1f:79:6a:94:c5:aa:a7:20:28:
dc:a2:eb:71:91:a1:53:fb:a5:c6:c0:98:bb:7d:d4:46:79:f2:
f1:05:06:44:0c:8c:ff:ea:64:c6:27:77:92:d1:a7:04:de:5e:
55:ba:71:45:0e:4a:7d:b1:c8:0d:80:cc:d7:4b:81:21:31:1c:
ee:62:95:06:12:52:c6:f4:d4:7f:2f:a3:6f:b5:c1:1f:a3:71:
28:67:f2:bf:8f:f0:99:ae:89:19:d4:86:9f:67:cc:97:6e:26:
48:3c:f7:52:25:f3:b2:4c:fe:63:0c:46:c0:66:12:14:8e:fd:
68:51:0e:54:56:89:3f:ac:4b:ee:f6:30:54:30:fb:31:6d:1d:
2d:49:bf:a0:f3:0a:14:50:48:03:ae:00:3e:b7:bc:98:95:48:
27:d9:08:79:9e:0d:97:36:b0:21:03:97:fc:26:e0:d6:b3:59:
57:87:5d:f0:e1:b7:d8:56:3a:61:0b:65:91:44:a4:7f:c3:d5:
40:3e:dd:9e:9d:72:6f:26:25:87:a9:e2:a6:15:ae:e0:d3:6d:
b9:e6:d4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:25:21 2026 by rpki-client