Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
File: QYHCLrezLZAdElcA4UDrYAncxto.mft (raw, json)
Hash identifier: Ut4iUCtyRa4ST3d7wFYUnr0BSxBZ7mRi1QGM3GGYxSc=
Subject key identifier: 1F:41:F5:18:01:1D:77:67:53:82:A3:9B:A4:75:E7:00:E6:6E:44:52
Authority key identifier: 41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
Certificate issuer: /CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Certificate serial: 01A17C2972BA11F269B1A7CB3604D8749D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
Manifest number: 1AC9
Signing time: Tue 27 Oct 2026 07:00:53 +0000
Manifest this update: Tue 27 Oct 2026 07:00:53 +0000
Manifest next update: Wed 28 Oct 2026 07:00:53 +0000
Files and hashes: 1: QYHCLrezLZAdElcA4UDrYAncxto.crl (hash: p8xJg+xwJrgSPbwE1KxgVwjoX4N6KjvZtXkWx9UORE8=)
2: amR_0Ln3b6oWcaZ7obIng9Z_o0U.roa (hash: tbRCRQaFz7cg1epOgNM5Qx0T+ZaSIikRXHm5/Cmw7WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:72:ba:11:f2:69:b1:a7:cb:36:04:d8:74:9d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Validity
Not Before: Oct 27 07:00:53 2026 GMT
Not After : Oct 28 07:00:53 2026 GMT
Subject: CN=1f41f518011d77675382a39ba475e700e66e4452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cd:42:0f:f8:ce:af:3d:ca:79:4d:6c:e4:3f:
21:0d:ef:fe:31:f5:15:ed:d0:74:96:36:dc:26:b0:
90:6f:d7:78:50:ee:2a:d1:8c:02:17:98:11:ea:7f:
b4:3a:75:0a:5a:87:b9:a5:c9:4e:46:7b:4c:52:b1:
de:5a:7d:27:a9:0b:b8:9e:d0:78:de:13:1f:9c:0a:
c6:0c:d6:02:b8:0b:bb:ff:69:09:08:ef:a8:c6:f0:
0d:85:3d:31:dd:52:79:63:eb:d3:2f:41:a8:63:3f:
a8:f7:86:0e:be:b8:f6:af:c5:b5:7b:59:64:22:5c:
da:97:ca:fc:bd:cf:b8:c6:0e:28:61:25:1c:c7:d9:
9b:b2:08:dc:fa:44:31:32:da:15:d6:5c:a1:e4:01:
3e:c9:d7:32:71:56:89:d2:62:f5:e3:a6:08:ef:0c:
30:73:46:2c:72:ef:e4:68:bf:65:86:4a:dc:dc:ec:
95:aa:e4:79:86:04:7a:4b:be:5d:b1:6e:5f:5c:fe:
fa:bd:93:c0:39:a1:55:57:e8:30:fd:05:19:39:01:
81:31:62:b0:de:c1:ea:9e:79:b7:50:1d:54:f9:f0:
8b:f6:87:da:0f:18:2d:56:02:94:f4:8e:e8:63:13:
42:74:ca:4b:50:e9:cb:7f:7b:a4:60:35:b6:cc:12:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:41:F5:18:01:1D:77:67:53:82:A3:9B:A4:75:E7:00:E6:6E:44:52
X509v3 Authority Key Identifier:
keyid:41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2f:67:3c:0e:8f:2c:fd:3b:68:e0:ad:ce:98:96:d9:a8:37:
a3:b0:3c:19:51:fb:4c:3d:fa:44:1f:c8:4b:b3:37:0f:05:e8:
db:34:ae:5a:79:43:11:23:3f:78:62:59:72:e3:2e:87:8d:5f:
f5:8b:11:2e:8a:aa:45:9e:e5:8a:0a:66:8d:3a:23:d1:6a:89:
4f:19:f7:f1:61:fa:c9:05:d5:9a:8b:e7:cf:a1:18:6f:8f:a0:
87:9c:a7:3a:12:74:e6:2c:28:65:55:9b:dd:d8:88:ef:05:07:
5d:18:47:b5:c5:98:0a:1a:ea:1e:9f:35:40:b4:15:e1:98:85:
c3:88:a0:f2:93:12:e9:f3:46:8a:51:e4:c9:d4:ac:11:f0:dc:
12:53:87:ec:90:b6:80:68:e7:fa:17:1c:2f:b9:15:77:97:99:
bb:56:af:a1:c5:88:57:b3:7c:dc:df:ee:5b:a1:f7:8b:95:bf:
ff:8b:0c:05:29:92:0f:27:fd:92:95:6e:a5:3a:c6:73:45:17:
d7:c5:7f:95:27:65:b1:b2:7a:64:46:33:b0:9e:32:3d:5a:4c:
cc:f9:c2:37:3e:d5:2a:69:b2:80:76:fa:c6:cd:6c:70:c4:8a:
4e:37:3b:25:0b:01:11:cd:e0:f6:2e:bf:f6:d7:3e:04:1a:3e:
88:37:07:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:43:52 2026 by rpki-client