Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: V9fVa7jIJcC9r3aptICw5B2XixvajK4Epl1iRD2dFjc=
Subject key identifier: B4:79:BE:DC:C5:C4:25:AB:2D:76:66:7A:43:12:A5:AB:96:C5:78:BA
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 01A002B904F14C74AA83AD2D086DFC8044CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 06EB
Signing time: Sat 15 Aug 2026 00:01:14 +0000
Manifest this update: Sat 15 Aug 2026 00:01:14 +0000
Manifest next update: Sun 16 Aug 2026 00:01:14 +0000
Files and hashes: 1: BIcN5aoAOl1KvHqrpwSgfpe3bKQ.roa (hash: lnNlQg8amQO6kFSvzSOC3nKLC4UQiHYnnxg5VQ58z58=)
2: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: os8IuCSn+NEkZqyzQDxNU/qIeUIr6RYl05SKMiVU0os=)
3: mFfXpLKFugPnpjv01dOdi4FA4Gw.roa (hash: 3g2SXGJpuzV1vU10pMqGPocyoDuCUv6hUHSIZHwoqs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b9:04:f1:4c:74:aa:83:ad:2d:08:6d:fc:80:44:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Aug 15 00:01:14 2026 GMT
Not After : Aug 16 00:01:14 2026 GMT
Subject: CN=b479bedcc5c425ab2d76667a4312a5ab96c578ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2f:fe:00:44:16:c1:89:e9:2d:67:78:5d:55:
e8:cd:1c:af:36:4b:c4:67:15:51:64:13:96:4d:e1:
8a:21:89:e7:df:a2:41:a8:bd:6e:c8:8c:ba:5d:06:
34:d6:d7:31:a0:e3:35:bc:04:32:84:9a:00:62:47:
db:c9:d9:ea:a1:dc:12:77:0a:3a:09:e0:fe:48:4a:
94:fe:44:38:cb:a1:4a:cd:8f:0e:b3:9e:69:26:e7:
82:3f:96:c8:94:3a:3c:43:7f:b0:84:27:58:46:d7:
c3:6a:3f:8a:56:0e:0c:00:6a:fa:27:63:98:b3:ce:
0e:f2:93:be:55:39:72:fa:5f:e6:b5:f3:f8:74:32:
fd:8e:47:36:d6:cc:e0:40:0b:20:0a:68:ff:0f:91:
7c:c0:96:f9:d4:78:93:6c:7e:35:7c:0c:f0:62:c7:
9b:bc:d5:d0:af:fa:54:9f:8b:e3:27:af:d8:55:31:
06:89:d6:81:6f:0c:0c:b3:84:97:34:6b:13:fd:3e:
a7:41:d8:14:49:89:e9:1f:de:af:57:58:d9:c5:8d:
dc:62:c8:ea:d7:a8:f9:40:68:75:97:af:d7:5b:08:
1f:68:32:5a:9d:1f:1b:e6:3e:f0:54:6f:bf:e5:77:
f7:f0:bf:5b:ce:a5:f6:47:be:0c:83:f8:96:e9:62:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:79:BE:DC:C5:C4:25:AB:2D:76:66:7A:43:12:A5:AB:96:C5:78:BA
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e4:47:1b:7a:37:a3:eb:86:66:82:13:76:a4:80:db:3f:db:
ca:ee:c6:39:60:a4:50:1d:e8:fb:16:37:26:58:27:33:b0:ba:
ac:b4:ce:51:97:e3:c7:ed:5a:82:1d:f1:47:dd:9f:c2:64:24:
10:2a:5f:6c:78:d0:1d:93:a9:5b:ae:99:52:49:e8:67:a3:8d:
35:18:11:ca:ff:70:49:a8:2d:13:e4:63:3a:08:c9:e5:ca:12:
96:8a:65:83:0d:40:7c:68:c1:da:96:c2:5f:59:fa:21:65:45:
d1:25:40:aa:3e:ae:01:c3:f0:5c:b3:ee:72:29:52:dc:ba:86:
82:ea:02:88:f9:ca:f2:60:d5:b0:f0:78:9b:3d:38:43:11:d7:
80:0c:2f:66:74:dc:d7:2a:fb:61:d1:c5:d0:28:06:b2:40:0f:
68:1a:21:66:c4:d2:db:aa:d4:9e:8a:0c:50:a8:ed:e9:1b:bf:
e4:ef:46:df:ff:1f:81:83:60:45:00:b6:26:01:89:f2:fe:ba:
3f:41:82:41:0a:f6:5e:28:47:5a:19:fd:1a:83:99:28:14:08:
14:74:de:a7:f2:76:b1:9f:7f:8d:7d:3e:e5:13:02:5e:92:94:
66:b0:9d:9b:b3:d0:ba:37:41:8e:5b:1f:56:d5:16:cd:81:13:
e3:f8:be:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:40:40 2026 by rpki-client