Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: c8DqbghqdJaHiK4MiMQiY0n3RMVUc/EaWL/zmS4H3iA=
Subject key identifier: AD:3E:88:D1:DF:F0:B4:F6:C1:3C:E5:5A:F4:E3:B4:4B:54:E6:7A:E9
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 01A18262B49975735E3C9410D8FE085C1B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 1AC8
Signing time: Wed 28 Oct 2026 12:01:09 +0000
Manifest this update: Wed 28 Oct 2026 12:01:09 +0000
Manifest next update: Thu 29 Oct 2026 12:01:09 +0000
Files and hashes: 1: NMKwSUUrM8k8eQKWjQoXhVr67Q0.roa (hash: CYXCafl1+25dso4rJFuju+aK/xutXRo5p4nK7eGdbTw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: ZPnd+bTtVIxMrXEgfZJEwpA9qQYw38nIaUEPAAk8BPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:b4:99:75:73:5e:3c:94:10:d8:fe:08:5c:1b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Oct 28 12:01:09 2026 GMT
Not After : Oct 29 12:01:09 2026 GMT
Subject: CN=ad3e88d1dff0b4f6c13ce55af4e3b44b54e67ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:04:01:ad:33:5b:8e:47:49:71:2c:d3:f6:
1e:dd:4f:be:99:38:0f:f0:11:08:cc:ab:16:20:51:
a0:f6:ed:23:20:5b:cf:0b:ff:83:f2:f4:19:8e:4c:
fd:05:58:3d:93:59:49:8f:9e:ed:4a:b3:55:37:c0:
b0:76:8a:45:c5:12:a5:da:37:e0:57:4d:44:0d:7d:
20:8e:aa:c1:f0:6f:93:20:8d:17:6f:90:72:c9:aa:
ca:e2:d8:71:48:53:8c:a0:63:bf:a5:4a:34:25:0e:
19:8b:82:81:ab:e2:b0:21:55:7d:68:a2:75:9f:29:
9e:f0:52:e2:56:3c:f4:a3:5b:84:d6:5f:29:b7:69:
f3:95:7c:a8:46:bd:c2:bf:1e:32:12:ae:10:71:14:
b7:54:e7:8a:eb:ba:f0:62:4f:e0:95:51:07:23:39:
14:03:57:84:a8:d8:95:1b:40:f0:74:4c:65:05:e9:
04:92:b4:17:e8:96:6a:37:6a:99:92:77:af:19:35:
04:09:28:52:33:06:17:0b:94:d1:1e:3b:35:4e:99:
0f:97:ad:de:c7:77:83:d0:9e:15:73:66:07:3d:53:
e4:30:8a:d4:51:a3:8d:2b:a8:84:4e:ed:00:2b:68:
33:fa:b0:98:cc:da:9d:a5:f3:ec:19:cb:f1:73:31:
67:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3E:88:D1:DF:F0:B4:F6:C1:3C:E5:5A:F4:E3:B4:4B:54:E6:7A:E9
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:94:6e:e7:50:a9:64:fd:9e:e5:98:87:0f:16:1a:81:e4:bf:
51:8c:19:55:66:45:bc:39:8e:07:6e:2d:84:4a:1d:a7:84:ac:
2d:56:8c:12:d2:3b:52:8e:07:85:db:31:3d:a8:68:0e:0c:b2:
1c:cf:70:94:c2:97:b6:5e:b6:05:b4:0e:bc:07:1d:51:cc:8b:
c5:56:5e:75:58:5d:00:75:24:09:37:b5:39:13:0a:ca:c8:b2:
31:b3:93:88:57:e4:1f:7a:81:ad:31:d5:f1:ff:22:eb:ef:57:
c3:32:de:71:0a:9a:99:ed:f7:bf:19:c0:83:41:e4:d7:ce:19:
30:fc:51:49:79:7d:70:e3:91:9f:e8:f0:36:8b:d2:f6:a7:9f:
c2:97:1d:79:89:88:c7:1b:be:ba:b2:7f:dc:bd:7f:79:a3:4c:
68:04:19:7b:98:5a:c3:d1:37:75:66:ca:80:38:d5:b1:db:dd:
28:59:9c:d2:1c:e7:9d:bf:7e:d7:f9:e5:d8:af:a3:93:ac:7d:
6a:52:6b:dd:58:97:b1:88:e4:50:9a:73:15:b8:a6:12:0e:d2:
e6:ec:de:1b:ac:bb:4d:68:79:35:6e:c5:4e:0f:d2:39:a4:24:
33:95:21:d6:06:8d:b2:04:a7:46:32:4a:43:61:f4:53:0e:09:
13:24:68:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 17:25:45 2026 by rpki-client