Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
File: QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft (raw, json)
Hash identifier: eDCQCfx7scfB7VLdfFc/GLpLpXxd53v1+xX7qhz22yY=
Subject key identifier: 75:84:F3:01:A9:A2:80:48:4E:C7:BE:1D:CE:E4:16:9E:9E:39:41:52
Authority key identifier: 40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
Certificate issuer: /CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Certificate serial: 01A1AAF0CB695894DD491CEBD3E22F062829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
Manifest number: 0232
Signing time: Thu 05 Nov 2026 09:01:09 +0000
Manifest this update: Thu 05 Nov 2026 09:01:09 +0000
Manifest next update: Fri 06 Nov 2026 09:01:09 +0000
Files and hashes: 1: QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl (hash: HngZnJ1ZpTvrhWaarOJavZext9oJg9vaFUXC9qiWcmM=)
2: bc_rDqdFLWG9EqOE3XpdCbzci7A.roa (hash: QX2e7Tpj37ujdBJf37YYj5ilDYHQsrFIORHYzhmx2Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:f0:cb:69:58:94:dd:49:1c:eb:d3:e2:2f:06:28:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406ef18f58f5ad1804e9b6c5aef6e232ccb8a1e2
Validity
Not Before: Nov 5 09:01:09 2026 GMT
Not After : Nov 6 09:01:09 2026 GMT
Subject: CN=7584f301a9a280484ec7be1dcee4169e9e394152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:72:63:d0:f5:59:79:77:39:90:ba:ef:e6:a0:
bc:2c:12:e5:0f:40:f5:86:6a:4d:13:45:32:d6:30:
9b:5a:c3:b3:db:0c:c6:8a:16:c5:f0:eb:90:aa:ec:
c6:ff:eb:13:98:13:a4:d8:ca:75:15:f3:b7:18:5f:
b2:03:ef:56:f5:94:78:6e:3d:88:fb:ca:ff:67:3f:
8c:7d:0f:b4:47:a9:87:a2:f1:f2:0c:44:3e:71:60:
29:40:4d:5c:d5:9c:76:0a:75:3e:61:88:47:a3:14:
0d:d8:62:4a:ae:bf:63:1e:fb:3f:3b:7a:28:3d:8c:
12:95:4b:69:c9:ef:cf:c0:90:c2:a4:b2:53:96:f1:
da:c0:d0:02:ef:8b:1e:01:65:e8:56:55:a6:9f:41:
d4:0a:25:96:0d:48:e7:39:44:53:55:48:4f:81:c0:
25:fa:a4:01:ee:f7:71:c6:48:8f:7f:cf:e0:fa:5e:
51:12:62:0d:68:6b:54:cd:50:a8:1f:11:d0:ce:fe:
bd:1d:86:d5:26:c7:e6:7b:66:aa:4d:13:80:dc:95:
a2:ce:79:13:1c:3a:17:21:5d:1a:0a:8b:06:5b:40:
48:ba:30:c6:7a:02:b2:80:10:51:7a:ee:c5:e6:76:
26:2f:b7:81:3e:e5:c7:a7:ba:30:b4:cd:97:61:38:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:84:F3:01:A9:A2:80:48:4E:C7:BE:1D:CE:E4:16:9E:9E:39:41:52
X509v3 Authority Key Identifier:
keyid:40:6E:F1:8F:58:F5:AD:18:04:E9:B6:C5:AE:F6:E2:32:CC:B8:A1:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG7xj1j1rRgE6bbFrvbiMsy4oeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/371f11-6457-43e0-941f-e7661637eebd/1/QG7xj1j1rRgE6bbFrvbiMsy4oeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:65:ae:a8:18:19:07:2e:31:e9:d1:79:c8:db:ea:0a:ac:06:
70:e4:65:8d:b9:e5:fe:83:87:92:ca:e3:9c:a0:6b:51:3a:78:
69:86:ee:3d:86:af:88:80:61:5e:9e:7a:2b:e6:ee:0a:bc:f9:
ad:b8:8d:ec:62:8c:c6:8f:d2:1b:bd:36:76:f0:dc:35:a7:c2:
c1:0d:4f:81:af:7c:d3:99:c7:e8:31:a0:8c:e4:f9:8e:0d:52:
5b:45:09:78:33:fc:c3:f6:01:01:44:77:bb:22:73:d9:cd:9c:
32:cb:5f:93:f7:de:9d:c1:e1:95:fd:4c:db:34:11:d3:81:fe:
45:08:01:1c:9e:6f:6f:a9:da:b9:f6:48:4e:a4:70:1b:7b:7f:
0a:62:7d:cf:ad:9d:52:07:5a:0b:22:f6:c8:a5:5c:65:50:3c:
30:8e:a6:74:7f:cc:a5:47:ca:37:8e:9c:e9:9f:88:bc:1e:15:
a9:1f:fd:01:67:dc:0f:15:2a:5b:c3:b3:85:96:a4:f1:24:49:
ee:fd:49:9a:5c:45:37:e9:dd:15:28:5c:4c:43:cc:20:5c:b0:
d5:78:68:fb:13:96:38:37:bc:cd:86:a0:52:5a:ed:a1:3f:e8:
da:84:7f:d4:8f:5a:5c:3d:47:ae:db:5b:f2:76:0b:b4:cc:ae:
81:9e:42:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:25:11 2026 by rpki-client