Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json)
Hash identifier: O9EeVkg98XarU4cRdrgM3i0H/O7aF0T4X2ovyFc5TxY=
Subject key identifier: BC:F0:EA:7A:49:DF:21:E3:2B:1D:DA:FC:77:9F:B4:C9:99:1A:18:A0
Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Certificate serial: 01A1AA83291C911D219B69B781BEF4D8EF18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
Manifest number: 04E8
Signing time: Thu 05 Nov 2026 07:01:24 +0000
Manifest this update: Thu 05 Nov 2026 07:01:24 +0000
Manifest next update: Fri 06 Nov 2026 07:01:24 +0000
Files and hashes: 1: A7X8g3OhgGqnnbr-0WIRET4xYAw.roa (hash: kbb2YQ9dHJjmfvC79NiEO4ENeqQEa58hlnvuoRfRlxI=)
2: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: 6GtmfBaKS3J0wV6rlUfJgK0veXXrHJjzw/vRlxhs17U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:aa:83:29:1c:91:1d:21:9b:69:b7:81:be:f4:d8:ef:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Validity
Not Before: Nov 5 07:01:24 2026 GMT
Not After : Nov 6 07:01:24 2026 GMT
Subject: CN=bcf0ea7a49df21e32b1ddafc779fb4c9991a18a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a2:d1:f7:e1:0a:2f:f3:f4:8f:90:fd:9f:17:
07:36:37:e7:b9:0e:5c:30:bf:4a:18:5a:10:b8:cf:
65:be:fe:4b:b0:8b:3e:25:00:59:fc:7a:ec:e0:4a:
7b:6e:a9:1a:85:1f:69:7f:78:50:39:f2:e6:9f:f5:
0f:38:68:0c:19:96:d4:fd:a1:b3:e6:3a:d9:12:55:
04:a6:c0:cc:05:f4:04:61:dd:7e:ee:c0:8e:25:90:
2d:63:41:1f:f7:f6:97:7e:71:5f:56:d6:1e:b3:0c:
a9:14:69:9f:60:ca:5f:f3:0b:ea:b2:2f:7b:c3:68:
88:e8:13:ad:a8:4e:43:66:f8:90:d4:83:08:6a:b7:
06:98:a1:fd:6c:9e:43:cf:d1:a6:e5:cd:f1:91:2a:
43:88:e3:92:da:fd:c8:7e:a2:a2:0f:fc:39:4b:d2:
ae:2a:a9:54:73:ac:40:8c:b3:72:de:62:56:6a:92:
be:2d:c4:7d:7a:ae:1e:7d:ca:22:f8:e8:ef:a0:d2:
9d:62:0b:d3:1d:82:2b:b1:19:9b:1b:64:64:78:a2:
f0:c3:17:1f:4e:ee:19:5e:d5:05:71:8c:87:7b:99:
75:06:6a:18:8e:79:0a:2a:f6:47:30:09:62:1d:b0:
ed:d2:c2:53:ab:55:15:7b:d3:02:7e:5a:76:08:4a:
78:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:F0:EA:7A:49:DF:21:E3:2B:1D:DA:FC:77:9F:B4:C9:99:1A:18:A0
X509v3 Authority Key Identifier:
keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:6e:1a:95:95:35:4f:6a:ca:78:dc:20:07:ae:20:e8:43:ae:
c3:9f:65:3e:7c:3c:16:08:ac:17:96:86:92:f4:67:10:e7:90:
de:ad:22:74:57:b0:11:6c:23:3c:e7:d3:e7:25:77:9a:0c:fa:
ff:37:bc:c1:ee:47:cb:a7:ef:26:d3:52:74:e4:c1:ee:0d:d3:
d9:a7:5a:16:af:98:31:68:bd:e0:d2:89:e9:ee:e4:be:9e:49:
12:f8:a8:01:7d:03:c6:ed:4b:e6:5f:a5:99:d0:dc:cb:99:3c:
14:f9:5b:c8:59:b1:0d:c4:4b:83:43:6d:71:ac:16:da:00:44:
05:a2:13:b0:db:e4:ba:69:14:8e:68:a3:a5:90:5c:14:9b:88:
bf:03:b7:8b:4e:3e:8c:da:11:a7:bf:2e:75:81:32:b4:41:03:
95:02:e8:42:e4:9a:6a:73:56:17:fd:03:10:b2:a3:05:55:78:
12:c4:c5:63:15:e5:33:54:94:a7:45:bf:a5:ee:76:d8:9b:1b:
1a:e0:2c:fc:b6:30:cf:f7:5e:c6:16:35:82:9c:f8:50:5c:84:
74:0d:2c:2a:32:f3:42:6a:1f:95:55:08:13:0c:ff:b7:0d:47:
1e:5c:85:f0:20:e7:74:74:34:00:5b:6b:b0:a3:76:79:e6:44:
ae:64:f7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 12:23:14 2026 by rpki-client