Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
File: QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft (raw, json)
Hash identifier: KUjd+Rm0eldzMMuA5twu3gazU1kTTzy3rRPG5YFGna4=
Subject key identifier: 0F:39:21:A0:9C:A3:56:5A:D8:6E:B3:D7:19:F7:3E:39:CF:83:B7:6D
Authority key identifier: 43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
Certificate issuer: /CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Certificate serial: 01A178F1B1CC219C8C59302411194531700F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
Manifest number: 03AA
Signing time: Mon 26 Oct 2026 16:01:07 +0000
Manifest this update: Mon 26 Oct 2026 16:01:07 +0000
Manifest next update: Tue 27 Oct 2026 16:01:07 +0000
Files and hashes: 1: QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl (hash: HTYhmVkAmL8Nl4ETvJ9LZPl/vFRIJISawIRC5WChweY=)
2: ym0w1cReqBylheC3xkqexBP3tgU.roa (hash: zFKUp71k5SpR7ghjnbVLoDMDBWhAa4PbF+krqnsksRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:b1:cc:21:9c:8c:59:30:24:11:19:45:31:70:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43206c3e568db78a76cbab142e0e5bf4f682efe6
Validity
Not Before: Oct 26 16:01:07 2026 GMT
Not After : Oct 27 16:01:07 2026 GMT
Subject: CN=0f3921a09ca3565ad86eb3d719f73e39cf83b76d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d9:91:8e:53:cd:c3:a7:db:fb:01:09:54:42:
ab:74:36:8a:05:c5:10:d2:f0:5f:b6:3b:27:b6:f3:
9c:b0:ca:3c:bb:97:0a:cf:b3:3d:0f:29:94:de:54:
9d:78:9b:a1:8e:0d:d5:c7:75:ff:80:22:a5:2e:35:
91:99:ea:2e:d0:2d:47:38:d0:e2:2e:48:c5:e3:c5:
b9:cd:15:63:7c:f5:17:59:9f:87:ce:3c:c1:cb:af:
3e:69:63:be:11:24:0c:e3:5d:fd:2f:3f:f7:e5:3f:
87:6e:4e:d3:3b:03:f0:de:8e:14:01:e5:26:66:16:
97:91:08:98:96:de:0f:02:bf:cc:d5:f2:54:d1:62:
5c:0c:11:00:4e:83:48:80:88:e8:28:2d:03:b8:a2:
92:2f:db:75:2a:c6:a6:fa:57:2a:61:f9:50:74:3e:
e3:b3:07:b1:0c:39:d6:a2:e4:05:cf:9b:20:48:a6:
35:7e:fa:58:93:31:f0:81:c1:09:d0:68:f5:b0:8f:
d3:f6:e1:2c:4b:5e:52:9f:d2:27:aa:36:e1:5d:29:
70:38:7f:b0:98:a2:a1:d8:87:3d:74:41:4f:20:4b:
85:0c:96:62:8f:f8:f2:8c:8f:a4:23:49:ed:21:6f:
d4:bf:14:bd:d0:81:77:21:d0:55:d3:63:3f:b1:58:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:39:21:A0:9C:A3:56:5A:D8:6E:B3:D7:19:F7:3E:39:CF:83:B7:6D
X509v3 Authority Key Identifier:
keyid:43:20:6C:3E:56:8D:B7:8A:76:CB:AB:14:2E:0E:5B:F4:F6:82:EF:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyBsPlaNt4p2y6sULg5b9PaC7-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/63383b-c824-415b-96fd-b32fdba18e1c/1/QyBsPlaNt4p2y6sULg5b9PaC7-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:9a:e8:16:b4:0b:cc:00:d0:c8:d9:51:5a:8e:1a:83:66:42:
17:13:1f:ae:a7:d2:54:e4:19:28:fb:42:d3:94:07:cd:66:58:
41:6e:74:1a:16:3f:cc:d1:90:ba:45:66:5e:03:92:42:43:5a:
ef:a6:84:4e:fc:da:eb:d4:a0:08:b6:7d:67:3a:f6:58:7e:e7:
e1:04:de:79:2f:3e:77:7f:29:18:9e:b3:1e:9b:5d:98:38:ac:
91:1c:25:9a:67:21:c0:98:e5:62:fb:d8:58:97:c8:fb:fa:d7:
31:2e:1f:85:00:7d:15:71:1b:71:89:89:01:8d:96:5e:1c:54:
dd:6b:fb:1b:6d:91:74:38:6f:f5:87:52:d9:e9:ac:9f:98:f7:
a6:44:9b:9b:05:ee:67:b9:f2:1a:b0:6d:9d:e9:9c:2d:45:d7:
df:7d:44:6a:ad:e8:fa:93:05:09:aa:a5:6d:71:c9:ae:41:f3:
d0:10:1f:d8:04:7e:9b:ff:91:49:09:bb:d4:60:1c:20:93:7e:
3c:49:9e:1b:e1:03:66:da:72:82:a0:41:f4:f5:bd:62:1d:ee:
25:5f:71:5b:ec:5b:b2:34:19:d9:2e:9b:1a:bf:3c:08:18:c6:
4a:c5:ec:72:ad:0e:e7:ae:e7:ea:29:82:4a:80:33:ad:36:3d:
bf:62:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:51:24 2026 by rpki-client