Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
File: QA-ULrBzNco-f70Y8GwVjbN8_Us.mft (raw, json)
Hash identifier: 3Hyg3BxZNEoPr5lN8TLmdbf28cM6lGuG06nuD8feYEk=
Subject key identifier: 78:39:C8:1F:E2:3E:A1:ED:8C:76:83:40:17:42:33:B3:BC:0A:FF:77
Authority key identifier: 40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B
Certificate issuer: /CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
Certificate serial: 01A18ED4AB7D7A7969E24E1EADFD4D5AF925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
Manifest number: 1733
Signing time: Fri 30 Oct 2026 22:01:04 +0000
Manifest this update: Fri 30 Oct 2026 22:01:04 +0000
Manifest next update: Sat 31 Oct 2026 22:01:04 +0000
Files and hashes: 1: Q6-rH8_VtCkE4JzDebkExXM-L74.roa (hash: Xt/AZnX6ILHCbTKXWO74tBFcuIb/2BGES0mjpiXZkD8=)
2: QA-ULrBzNco-f70Y8GwVjbN8_Us.crl (hash: Xhopr9g5BlRMO7xJz3wrDb0mYAmJmp3J0UKERmOKGTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:d4:ab:7d:7a:79:69:e2:4e:1e:ad:fd:4d:5a:f9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f942eb07335ca3e7fbd18f06c158db37cfd4b
Validity
Not Before: Oct 30 22:01:04 2026 GMT
Not After : Oct 31 22:01:04 2026 GMT
Subject: CN=7839c81fe23ea1ed8c768340174233b3bc0aff77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d7:58:cb:02:96:8e:99:74:e5:ce:58:ec:18:
9f:2d:0a:2c:4f:cc:a6:13:d2:d0:ae:df:c0:62:21:
f2:cc:b7:82:e3:78:36:8d:21:68:fb:ca:37:14:ea:
f8:7f:90:15:3a:34:80:22:5a:6e:a6:0f:ee:bb:5f:
d7:d8:1b:69:21:d9:06:be:36:7f:48:99:75:71:c8:
22:29:23:71:40:18:a8:fb:e4:d5:ae:3e:0a:06:66:
1e:5e:6b:e9:b8:f7:0a:5a:ad:21:d8:05:5d:81:55:
08:2e:9b:fe:46:b4:ce:c8:f3:1e:14:e4:bc:f5:8d:
76:76:ab:9b:3c:d0:6e:a2:b0:c7:04:89:6d:05:c2:
da:22:51:b0:6d:53:2b:33:1f:16:f1:9f:e5:d4:3a:
3e:e3:5a:3e:a5:02:54:43:13:ba:e2:bd:a9:44:03:
70:29:6b:b9:8f:d0:4d:95:b8:ce:a1:3e:a8:1e:01:
8d:bb:d5:db:96:0e:25:69:19:13:14:d3:f8:3a:56:
99:17:df:c8:88:92:c0:d5:a7:d7:a5:a5:3b:6a:5e:
c7:b6:54:dc:d5:99:6a:b2:0b:3c:df:fd:72:4e:61:
74:ff:18:16:7e:f8:c5:8e:82:c6:ec:02:03:16:5f:
2e:44:5d:65:f9:dd:1f:e7:1d:96:8e:37:b8:51:b1:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:39:C8:1F:E2:3E:A1:ED:8C:76:83:40:17:42:33:B3:BC:0A:FF:77
X509v3 Authority Key Identifier:
keyid:40:0F:94:2E:B0:73:35:CA:3E:7F:BD:18:F0:6C:15:8D:B3:7C:FD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA-ULrBzNco-f70Y8GwVjbN8_Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/2098ac-c2de-4362-a255-acd72d2c6cb6/1/QA-ULrBzNco-f70Y8GwVjbN8_Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bc:b4:3c:fd:ae:5d:c1:00:46:3e:cd:b7:c5:39:64:8f:b1:
4c:12:11:b0:00:d0:c0:06:f6:92:df:ea:90:0b:dc:91:f7:20:
7e:5d:4b:64:47:e1:04:22:f5:8c:64:4d:32:d3:bc:e6:dd:68:
2e:47:5b:b4:1e:20:d5:93:81:bc:9c:4c:99:57:64:b1:bb:91:
96:5d:36:d8:11:13:fb:e8:7d:4b:2d:0c:50:f8:21:80:07:71:
d1:f5:64:8f:5d:cd:1b:15:40:96:3c:49:f2:dd:95:39:a0:67:
01:48:b4:96:78:1b:7c:bc:2d:40:17:53:b9:03:da:6c:79:45:
68:ac:07:ca:ec:b2:f1:b2:cf:36:e2:f1:54:07:07:eb:40:f5:
3b:6a:26:13:a3:36:a1:37:12:ea:c8:2e:bf:86:f3:7a:76:ad:
8c:8c:a3:a8:71:e7:44:c6:5f:a7:dc:48:db:1a:59:99:3c:91:
70:7a:97:b2:6f:33:48:c4:37:82:47:57:c8:b0:99:59:27:58:
8d:6c:96:58:21:1e:f8:99:0a:48:3a:e4:f6:2e:60:3a:b4:0f:
b3:bf:d7:bd:bd:9b:45:f4:9d:90:c1:98:11:2c:48:b9:92:a1:
ce:7b:d8:69:7d:5e:02:9b:bd:10:ff:27:58:f7:0e:f6:61:bb:
98:c8:90:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGO1Kt9enlp4k4erf1NWvklMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMGY5NDJlYjA3MzM1Y2EzZTdmYmQxOGYwNmMxNThkYjM3
Y2ZkNGIwHhcNMjYxMDMwMjIwMTA0WhcNMjYxMDMxMjIwMTA0WjAzMTEwLwYDVQQD
Eyg3ODM5YzgxZmUyM2VhMWVkOGM3NjgzNDAxNzQyMzNiM2JjMGFmZjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NdYywKWjpl05c5Y7BifLQosT8ym
E9LQrt/AYiHyzLeC43g2jSFo+8o3FOr4f5AVOjSAIlpupg/uu1/X2BtpIdkGvjZ/
SJl1ccgiKSNxQBio++TVrj4KBmYeXmvpuPcKWq0h2AVdgVUILpv+RrTOyPMeFOS8
9Y12dqubPNBuorDHBIltBcLaIlGwbVMrMx8W8Z/l1Do+41o+pQJUQxO64r2pRANw
KWu5j9BNlbjOoT6oHgGNu9Xblg4laRkTFNP4OlaZF9/IiJLA1afXpaU7al7HtlTc
1Zlqsgs83/1yTmF0/xgWfvjFjoLG7AIDFl8uRF1l+d0f5x2Wjje4UbEgZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHg5yB/iPqHtjHaDQBdCM7O8Cv93MB8GA1UdIwQY
MBaAFEAPlC6wczXKPn+9GPBsFY2zfP1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUEtVUxyQnpOY28tZjcwWThHd1ZqYk44X1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yMDk4YWMtYzJkZS00MzYyLWEyNTUt
YWNkNzJkMmM2Y2I2LzEvUUEtVUxyQnpOY28tZjcwWThHd1ZqYk44X1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8yMDk4YWMtYzJkZS00MzYyLWEyNTUtYWNkNzJkMmM2Y2I2
LzEvUUEtVUxyQnpOY28tZjcwWThHd1ZqYk44X1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATLy0PP2u
XcEARj7Nt8U5ZI+xTBIRsADQwAb2kt/qkAvckfcgfl1LZEfhBCL1jGRNMtO85t1o
LkdbtB4g1ZOBvJxMmVdksbuRll022BET++h9Sy0MUPghgAdx0fVkj13NGxVAljxJ
8t2VOaBnAUi0lngbfLwtQBdTuQPabHlFaKwHyuyy8bLPNuLxVAcH60D1O2omE6M2
oTcS6sguv4bzenatjIyjqHHnRMZfp9xI2xpZmTyRcHqXsm8zSMQ3gkdXyLCZWSdY
jWyWWCEe+JkKSDrk9i5gOrQPs7/Xvb2bRfSdkMGYESxIuZKhznvYaX1eApu9EP8n
WPcO9mG7mMiQsQ==
-----END CERTIFICATE-----
Generated at Sat Oct 31 02:22:50 2026 by rpki-client