Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File: QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier: xHlhXJLntmBXnaglALI4UNJ6twGVYz5TAvkL4kz+tuw=
Subject key identifier: 49:6E:E5:26:3E:6F:8E:2E:D6:8D:91:B1:23:93:9B:4F:72:57:9F:FC
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer: /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial: 01A17C29512664D3D7ABB7B7874AD349A2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number: 034F
Signing time: Tue 27 Oct 2026 07:00:44 +0000
Manifest this update: Tue 27 Oct 2026 07:00:44 +0000
Manifest next update: Wed 28 Oct 2026 07:00:44 +0000
Files and hashes: 1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: jPQGwRlWppQ7GFlHLh1ppwDCKjMMPifMO8oWzUYjOi8=)
2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:51:26:64:d3:d7:ab:b7:b7:87:4a:d3:49:a2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Validity
Not Before: Oct 27 07:00:44 2026 GMT
Not After : Oct 28 07:00:44 2026 GMT
Subject: CN=496ee5263e6f8e2ed68d91b123939b4f72579ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:47:90:ff:e4:c6:d8:6a:b8:5f:de:c3:5b:
f5:34:df:ad:c6:2c:e6:d4:10:86:8b:3d:6e:6d:c4:
24:69:d1:62:03:97:73:ed:3e:c4:fc:aa:34:e4:be:
70:80:9e:12:c0:0d:b0:99:c2:35:d4:42:39:f0:30:
5f:6e:91:f2:ac:c5:eb:50:b6:76:8a:c5:c1:74:93:
d7:11:e0:a2:6d:17:f9:98:ad:3f:13:aa:79:4e:83:
02:57:2e:f5:0c:8e:92:32:bd:96:7d:a6:24:c6:1d:
b3:d6:e7:c1:c3:bc:c4:33:e1:74:dd:0f:fd:9c:cf:
60:45:69:f0:8a:ed:75:d1:eb:5d:ab:11:0c:ec:f9:
89:a6:29:bc:cf:56:5b:5b:54:f8:e7:bd:67:00:aa:
ea:96:58:e9:b5:a4:e5:ec:ee:4b:4f:64:d7:81:34:
1c:d7:3e:0a:aa:1a:50:4f:5b:e1:e8:fc:c7:19:ec:
a9:6c:34:e0:ac:fe:92:cd:ff:fe:c7:30:ba:8b:05:
8d:81:98:6c:6b:b4:19:28:b7:8a:e0:80:8f:0c:8e:
ed:11:92:aa:3e:6a:6f:74:e9:f1:b9:57:e3:ba:cd:
f6:f5:28:ba:ce:10:51:32:50:d9:2b:cc:40:57:f1:
89:94:2a:ae:d8:61:53:8d:8a:82:40:dc:ba:00:18:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:E5:26:3E:6F:8E:2E:D6:8D:91:B1:23:93:9B:4F:72:57:9F:FC
X509v3 Authority Key Identifier:
keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:68:a0:0c:c6:6c:71:8e:40:97:97:6f:1c:54:b9:0b:a7:41:
9c:fa:63:5c:b9:d2:ac:15:a0:2e:b5:db:5b:43:99:38:64:d4:
16:85:6c:d7:c7:13:5b:10:23:85:cb:5e:67:e5:5d:fe:53:15:
e4:fb:a5:14:18:d6:7f:8e:f3:52:2a:f6:42:fc:2a:c8:e8:15:
8e:82:23:99:34:71:f4:6b:be:69:67:aa:5d:a3:be:d0:f0:2f:
71:70:62:e8:d4:bd:40:18:23:91:10:73:b0:a3:61:bd:9c:8a:
21:86:8d:ec:b1:f8:50:d7:f1:82:90:b5:e0:82:43:28:79:5d:
6c:89:ec:3d:9b:c1:28:e7:95:85:c1:cb:20:40:8f:10:1a:a0:
31:8c:c7:89:95:55:33:eb:af:b4:72:5c:04:cc:b2:ed:64:91:
96:7f:8c:87:ba:50:09:77:62:75:a3:39:60:70:a7:24:18:46:
9d:46:8c:fb:65:fd:ae:af:24:d9:72:6e:14:bb:db:c4:c8:a4:
ac:f6:bd:11:d5:c7:18:5a:71:dc:2a:a3:0f:fa:f6:96:fa:82:
7b:f1:d3:fd:d1:91:66:b4:a2:c4:8f:0a:eb:f7:75:63:22:f7:
89:77:2a:47:0a:84:42:71:8c:fb:b1:aa:2d:ab:53:43:5f:63:
0d:50:9a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:20:01 2026 by rpki-client