Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
File: QIS7AapYrpSxMg_UvkIT-TFOkFY.mft (raw, json)
Hash identifier: piaoOn/74En5pfcn6mHJ3TabogzssfKWXLfuPT9oxaM=
Subject key identifier: 37:2A:A4:45:1E:1A:C5:CA:CF:FC:A9:98:E9:9B:48:4E:3F:8F:8C:00
Authority key identifier: 40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
Certificate issuer: /CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Certificate serial: 01A180ABA4A5459AA45EA5DBC33D7D04867C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
Manifest number: 0AB5
Signing time: Wed 28 Oct 2026 04:01:34 +0000
Manifest this update: Wed 28 Oct 2026 04:01:34 +0000
Manifest next update: Thu 29 Oct 2026 04:01:34 +0000
Files and hashes: 1: QIS7AapYrpSxMg_UvkIT-TFOkFY.crl (hash: cjhr4GC/Bx7nxScKyLGBCtjasgN4E65kUoHf42ZMwfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:a4:a5:45:9a:a4:5e:a5:db:c3:3d:7d:04:86:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4084bb01aa58ae94b1320fd4be4213f9314e9056
Validity
Not Before: Oct 28 04:01:34 2026 GMT
Not After : Oct 29 04:01:34 2026 GMT
Subject: CN=372aa4451e1ac5cacffca998e99b484e3f8f8c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:73:6d:42:f8:8a:67:6c:c5:49:c8:fe:96:
bc:e0:60:cc:b1:d8:71:94:34:e9:14:fc:32:1e:53:
84:bb:45:e9:13:32:30:55:65:ae:c1:d1:7b:19:1a:
ed:5c:e1:2c:bc:81:d1:fe:e9:1a:8e:a4:c7:72:33:
22:00:38:06:ca:aa:5e:b3:c8:ab:3d:8e:3e:d1:de:
51:e0:9a:30:d0:59:00:b5:d8:d5:b3:5d:2b:ea:d8:
e2:b6:9b:67:7d:90:11:4f:ae:e0:c1:2c:ad:74:90:
9f:cb:07:88:12:0d:74:be:da:f2:26:1f:13:9f:ea:
48:6a:93:30:0b:4d:7d:24:d6:b3:61:10:65:e0:98:
a9:4c:0f:6c:6c:18:f3:db:8f:c0:e3:0e:43:92:03:
7c:25:e9:4a:da:3a:82:99:d9:75:fa:dc:0b:d5:6f:
f6:1e:65:0b:63:34:a3:d0:08:f7:f9:1a:5f:27:d1:
55:1d:ad:84:9c:28:7a:58:a3:3a:20:e2:34:9e:83:
0e:28:92:52:eb:5c:7e:5b:d1:50:88:b1:60:9a:a5:
03:69:65:4f:c8:4c:3e:76:1b:9d:97:39:c1:44:61:
de:ef:de:27:0d:86:ad:be:ac:8a:55:6d:6e:cb:57:
8f:fd:90:3d:c0:41:8e:b7:e5:7b:e8:fa:22:ff:19:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2A:A4:45:1E:1A:C5:CA:CF:FC:A9:98:E9:9B:48:4E:3F:8F:8C:00
X509v3 Authority Key Identifier:
keyid:40:84:BB:01:AA:58:AE:94:B1:32:0F:D4:BE:42:13:F9:31:4E:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIS7AapYrpSxMg_UvkIT-TFOkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5f179a-7b86-4c79-9339-d1b648a4fd0e/1/QIS7AapYrpSxMg_UvkIT-TFOkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b9:e8:d2:6b:37:11:1c:96:e8:9f:48:d3:bc:a1:92:3f:b3:
fb:c4:4f:f1:fa:da:f0:14:ae:3b:e6:e6:91:3b:e7:36:0c:62:
9e:fc:b9:da:b2:8c:6f:54:f7:65:d8:09:71:28:e2:d3:5a:30:
53:b4:c0:0e:eb:16:a7:a9:ac:eb:95:51:4d:4f:42:dc:12:5e:
c3:50:dd:cb:c9:d8:48:2d:e6:99:34:04:81:83:19:20:f6:9f:
09:8f:05:80:8e:2c:2d:dc:9a:59:bb:58:cb:7c:8c:b0:0b:54:
f3:b5:40:1e:f3:70:56:9e:66:cd:4b:72:8f:0a:57:e3:29:03:
46:cd:31:7b:64:96:1a:40:d0:42:29:dd:84:ee:14:ac:7c:88:
be:d4:d6:26:29:64:9c:18:26:dc:bb:25:77:15:6b:ee:93:02:
9b:bf:cc:d3:7a:68:d5:5f:28:6b:3e:1e:3c:d7:42:d2:2a:61:
b9:36:92:ff:a1:26:06:a8:2c:fd:ea:0d:57:6e:52:06:ce:a4:
f5:57:b3:56:36:a0:98:e7:be:92:d7:cc:cd:bf:8c:79:4b:07:
74:53:f1:84:76:2b:a3:d9:42:31:97:c1:9c:76:82:c8:95:fc:
9e:84:ec:53:3b:4c:9b:86:74:5c:f0:da:17:ee:67:d2:17:17:
25:c0:a2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:37:58 2026 by rpki-client