Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: rXcA7Cggf/midKjIH4c6Bmp1+9fzJFQ26lCB5cEM52Y=
Subject key identifier: CF:AA:4B:50:37:89:A0:38:C3:C6:97:2A:7B:C6:5C:BC:5F:95:44:93
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 01A1893FE0506A45A0183995D6A9F22D76CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 12D1
Signing time: Thu 29 Oct 2026 20:00:27 +0000
Manifest this update: Thu 29 Oct 2026 20:00:27 +0000
Manifest next update: Fri 30 Oct 2026 20:00:27 +0000
Files and hashes: 1: 41UHcYawFZ6dwCf_FfKVxB6pAyA.roa (hash: mxz0vZfXkFbrjS45D2R+Mi2lF9MSSxAbkahXO8KfBYc=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: lyhzTUfWu4IaN0kIgJUQ9rsc0Rhp6LyCI5yaAxMSJhM=)
3: gDO3yGlii3vGStP0g8IXSinnODc.asa (hash: 4GKXfRU/6q53CGfLh+IE//Y0yEXtQGF8Ot458LYjOwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:3f:e0:50:6a:45:a0:18:39:95:d6:a9:f2:2d:76:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Oct 29 20:00:27 2026 GMT
Not After : Oct 30 20:00:27 2026 GMT
Subject: CN=cfaa4b503789a038c3c6972a7bc65cbc5f954493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ab:90:09:b2:33:fc:21:59:a6:70:99:eb:ff:
34:81:56:f8:98:ad:cd:73:56:68:6d:df:76:5b:61:
16:53:f0:41:13:47:a4:e0:71:8b:5f:d9:07:2c:a5:
18:9a:02:75:b9:a7:ae:10:2c:4d:c4:19:23:61:ce:
5b:db:6f:ca:68:0c:47:36:b6:b9:92:79:fe:a5:9d:
3a:93:dc:6d:a3:96:b2:2b:4a:8f:de:a1:fc:38:c9:
50:42:49:77:72:9d:fa:a2:3b:d2:8c:01:65:bb:3b:
26:63:5a:fd:a0:78:82:1a:1a:f3:36:1a:bc:86:5c:
3f:ec:b5:bf:3c:c6:81:5e:73:8a:55:c6:08:1b:61:
12:41:15:84:00:c0:15:36:1e:22:69:5a:1c:27:ce:
d1:a8:88:2e:93:16:4c:27:bf:e9:83:de:0f:b8:71:
c9:c2:25:92:32:5c:65:d3:44:37:56:27:55:8f:be:
bd:65:12:14:fb:e0:4f:97:7e:a2:62:76:be:c3:bf:
9e:64:39:62:12:5c:f3:0f:45:95:f0:8e:7f:aa:c8:
44:e3:18:70:5d:84:38:0a:53:a4:32:32:d1:c5:e5:
0d:92:a8:a6:81:b4:0c:09:07:4c:04:32:25:36:fd:
08:5c:72:32:e7:f3:a3:9f:97:d9:14:90:51:b3:3c:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AA:4B:50:37:89:A0:38:C3:C6:97:2A:7B:C6:5C:BC:5F:95:44:93
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e3:4d:88:07:2d:20:56:8a:1d:5f:68:2d:c1:6a:6a:6b:e3:
16:32:53:54:2a:f4:2e:aa:c5:31:6f:76:9d:bf:df:e5:77:80:
d9:02:41:5a:45:f3:2a:e7:a3:ce:96:b2:9e:10:9c:d8:df:b6:
f3:f2:aa:c2:4e:23:fe:c2:c2:be:25:5f:33:11:8f:26:d1:42:
25:09:8e:7b:16:c7:06:77:db:59:24:f6:e4:df:c9:7f:45:7b:
44:67:0d:5f:41:34:67:3e:87:1c:ed:0a:46:a8:5b:80:8b:e5:
94:12:77:84:c8:a8:a1:a8:b6:c0:8a:4f:43:06:d3:33:f2:e5:
16:08:e6:83:e6:41:eb:94:98:fd:e7:86:19:c9:b5:a9:60:35:
7d:f7:d8:f7:5b:fa:0e:dc:a1:9a:04:fb:17:4b:06:4d:d5:f9:
37:ab:76:e8:64:86:19:0c:71:48:a7:47:68:b0:d9:ac:45:55:
c5:f5:d2:fd:1c:e3:44:25:0e:85:00:49:f9:53:b4:ba:62:13:
94:c7:d2:36:a1:f7:25:c2:33:2d:df:15:fb:8c:4a:f8:a0:e7:
79:b9:40:84:be:9f:76:85:40:6f:48:47:ac:22:2c:a7:45:94:
68:71:c4:70:dc:af:c6:9f:7e:46:79:61:b7:9e:e2:01:fb:89:
01:d9:a0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 05:34:26 2026 by rpki-client