Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
File: Q_BsNphySzf-GhcRQX29iOu_CpE.mft (raw, json)
Hash identifier: YDLo2e/0lG7j5k/H/MdXwNeORtAsiPrI3FfpGLOcTeQ=
Subject key identifier: F7:DA:F2:D3:2D:7E:56:1C:64:24:01:63:48:EA:37:D9:9E:F3:E8:8B
Authority key identifier: 43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
Certificate issuer: /CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Certificate serial: 01A17E4F369D58FF18BE2CD52AB0ADBD9365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
Manifest number: 041A
Signing time: Tue 27 Oct 2026 17:01:22 +0000
Manifest this update: Tue 27 Oct 2026 17:01:22 +0000
Manifest next update: Wed 28 Oct 2026 17:01:22 +0000
Files and hashes: 1: 9i2FNq-ilnO82a12KCx8bZf9uj0.roa (hash: e5YuVWmmuJUMRKFIac15BKkt/ujz30drSZUPYaFPPoE=)
2: Q_BsNphySzf-GhcRQX29iOu_CpE.crl (hash: l9UcYsH1lm+ct3HbyWPA1whq02uU4PPOMSkip8jBuQY=)
3: WGgjc9Dg0G9csDwIMq1t0ZtJTWA.roa (hash: cVZmg6mqBIAtl689EL6CUc0A6vHkHLnQ4WlcU+2etIc=)
4: tvttSBr7BAYjU6B6SYrmyrXgmPc.roa (hash: cY0rsNXodbspFudhEGa5CSODCsQ4WfZrUF/qlRWnO7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:36:9d:58:ff:18:be:2c:d5:2a:b0:ad:bd:93:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f06c3698724b37fe1a1711417dbd88ebbf0a91
Validity
Not Before: Oct 27 17:01:22 2026 GMT
Not After : Oct 28 17:01:22 2026 GMT
Subject: CN=f7daf2d32d7e561c6424016348ea37d99ef3e88b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:18:6a:82:75:1b:7b:e4:11:c6:5c:e4:13:ac:
6e:7b:3a:94:51:3b:1a:0d:c0:71:bb:99:87:4c:1c:
97:d0:b5:a6:59:67:71:6d:1c:cd:ec:bc:bc:a1:70:
e5:21:76:b9:3b:f4:84:6b:ee:81:9b:b5:59:89:20:
88:e0:35:bf:42:c0:2a:a6:39:e5:67:03:8d:27:85:
57:14:bf:35:a9:b6:04:6e:19:35:ca:ab:6d:31:98:
7c:a2:84:a0:5a:b6:ed:31:88:01:92:33:6d:5b:c9:
71:45:2f:de:05:4e:b5:5c:8c:38:ae:7d:e6:89:b2:
62:93:9f:9e:55:cb:8b:30:22:be:0b:d7:34:4d:de:
2f:38:b8:5a:3c:dd:9b:d2:2b:3f:24:1b:87:19:eb:
ff:9d:f5:a5:b9:b2:df:aa:2e:c0:93:3f:6b:40:2b:
78:ce:8d:2a:bf:e3:a5:31:46:0b:a1:94:59:27:54:
bb:62:67:82:d6:ca:c7:e1:ac:c7:0c:ac:c4:2c:94:
18:d4:fb:92:fb:65:18:ab:a4:37:eb:71:f1:a5:74:
e4:11:58:84:e0:13:ad:01:67:a4:dd:fb:79:7d:1c:
bc:9c:80:91:46:3e:d2:39:b9:99:92:9f:60:d2:b9:
23:cd:5d:4d:de:2e:af:ab:ab:8c:be:08:a4:32:2a:
63:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DA:F2:D3:2D:7E:56:1C:64:24:01:63:48:EA:37:D9:9E:F3:E8:8B
X509v3 Authority Key Identifier:
keyid:43:F0:6C:36:98:72:4B:37:FE:1A:17:11:41:7D:BD:88:EB:BF:0A:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_BsNphySzf-GhcRQX29iOu_CpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7dab6a-947b-4a12-8a27-0e1efd5a3746/1/Q_BsNphySzf-GhcRQX29iOu_CpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:3e:9e:77:c6:83:04:f1:62:a1:6b:ef:c1:e7:78:a1:7e:ad:
cc:a9:a8:ba:e7:7b:4b:ad:94:67:5f:24:d2:c0:5d:a8:e5:07:
59:f4:af:2c:d8:3a:cc:22:66:bf:e8:7d:44:af:54:fb:15:3f:
20:6a:4e:9e:76:64:be:32:38:e2:82:84:68:3f:30:4b:bb:04:
bb:3c:34:14:5b:13:74:6b:bb:21:f1:4d:7a:0e:97:f6:37:64:
44:c9:f2:cb:07:5b:2e:5b:44:06:bf:b2:ad:26:6b:b5:37:ee:
db:a4:2e:97:e0:8f:26:19:8c:c7:19:1d:90:cb:69:26:a9:ac:
c9:51:01:71:88:76:1e:60:1e:f4:c0:f9:86:40:b3:ee:26:c3:
ca:7e:b2:4e:e7:c3:65:6d:f7:e2:e5:73:e0:80:7e:84:c8:8c:
4b:67:a7:d4:e8:a1:b3:8b:60:37:d8:6b:43:b9:32:b3:96:8a:
7a:c7:80:61:86:97:56:f5:ca:5f:24:17:c6:11:f9:3f:2e:aa:
a1:94:50:b2:9e:a2:40:02:c7:cc:07:07:01:be:ed:38:bb:e6:
06:ed:1a:7f:45:43:9b:10:f8:78:3a:9f:fa:b8:4a:f0:e6:df:
10:ac:ae:4a:e8:bb:43:bd:30:3b:50:47:67:ad:a4:6d:49:3e:
3a:d0:1b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:49:29 2026 by rpki-client