Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
File: QSkmah4uyYN6UxNE-0zHVcK01Jk.mft (raw, json)
Hash identifier: HEJ4D6XIfcNW5xn9SikjOdTFWDgmc3tJ5PWdaiu0MKY=
Subject key identifier: 26:47:05:6C:D3:A5:60:6E:FB:9C:4A:73:B7:56:C7:47:8B:AB:25:E7
Authority key identifier: 41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
Certificate issuer: /CN=4129266a1e2ec9837a531344fb4cc755c2b4d499
Certificate serial: 01A11C076A47D80F51C7EC0B6C6FDCEDD1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
Manifest number: 90
Signing time: Thu 08 Oct 2026 15:00:10 +0000
Manifest this update: Thu 08 Oct 2026 15:00:10 +0000
Manifest next update: Fri 09 Oct 2026 15:00:10 +0000
Files and hashes: 1: 8fGG8Tv4WNAQ4RCHYBbNJs1eKto.roa (hash: SgO/P537q3vAhj6DO7s9EJP2JmPeHZPclIyQgjWdkQo=)
2: QSkmah4uyYN6UxNE-0zHVcK01Jk.crl (hash: 0UmJUG5V6sJK7hF89BNgHS+7jyZ/oHXQrmncK/yqjYw=)
3: sg6AMDBnEClTk14yZrKH_UdfS-0.roa (hash: uREnj3d/6nKXsYDGOx95oE8DlNkz3JuX/7dowk4t+kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:07:6a:47:d8:0f:51:c7:ec:0b:6c:6f:dc:ed:d1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4129266a1e2ec9837a531344fb4cc755c2b4d499
Validity
Not Before: Oct 8 15:00:10 2026 GMT
Not After : Oct 9 15:00:10 2026 GMT
Subject: CN=2647056cd3a5606efb9c4a73b756c7478bab25e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ab:3a:2c:43:63:da:be:e6:14:70:82:e4:1f:
09:fd:dd:4f:bd:0b:7c:39:b5:c9:31:71:94:90:d6:
26:cf:de:ad:be:e6:b5:96:db:fb:03:af:b8:58:e9:
3d:78:e6:13:0e:c2:66:d7:a2:76:62:6b:b8:77:d0:
ca:1a:4b:32:9c:3e:94:05:58:53:63:24:18:44:18:
6a:db:59:c6:d8:47:f7:8e:fd:e0:e8:ad:91:20:64:
87:67:28:f4:cc:07:02:7a:85:11:9f:aa:b7:e5:fa:
93:71:b1:80:05:d6:b3:1a:53:2a:b4:ce:00:89:82:
a6:85:11:81:73:a0:92:dd:21:72:61:28:c0:61:04:
67:0c:ed:fa:a1:ae:08:b6:c9:5b:f6:6c:f0:70:74:
33:fe:9c:74:fd:da:60:50:0b:f3:aa:72:c5:9f:7c:
e1:05:72:1c:bf:cf:cd:cb:62:6c:98:37:42:15:33:
83:d7:15:20:9f:87:f7:ff:bc:1a:9a:e0:5f:a0:99:
66:54:cc:70:90:b7:33:2e:cc:43:8a:9b:17:cd:d0:
03:47:54:01:47:03:0c:50:e5:cb:5d:6b:4d:f5:2e:
6a:8c:00:05:47:86:b7:6b:69:40:3e:32:7b:8e:ac:
77:8b:cd:0c:f9:f0:2e:e5:96:fc:1d:9e:44:6c:70:
82:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:47:05:6C:D3:A5:60:6E:FB:9C:4A:73:B7:56:C7:47:8B:AB:25:E7
X509v3 Authority Key Identifier:
keyid:41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4a:a3:4b:d9:b0:9f:e2:40:62:6e:ce:72:28:0a:0f:ce:ce:
f8:dd:ef:7f:13:1a:c1:a3:20:9e:45:ed:a7:cc:66:cb:31:63:
18:7a:91:14:ce:c0:7d:49:8f:f6:f0:1d:f9:6d:df:20:73:53:
d0:b2:9e:32:da:45:e0:b5:ce:76:fb:c0:3f:8b:41:3e:24:c2:
fb:9d:a8:c9:bd:ee:3d:d0:2a:19:54:bf:ea:61:4a:5d:1a:b2:
e9:26:ab:6c:6f:6b:93:9d:2a:f4:8a:a5:af:eb:54:d0:cf:d2:
9b:8c:a1:76:2b:0e:49:52:59:97:29:fd:31:a9:06:81:73:b8:
80:4b:00:9a:ab:99:b1:ab:88:81:8c:f5:14:d5:38:3f:17:cd:
fe:b5:f2:fe:6f:dc:88:1b:8c:f5:66:b0:2f:0c:da:6e:4e:4e:
8a:b7:03:37:3f:e4:d5:ff:37:26:d3:14:b1:a0:4d:00:6a:48:
4a:fc:34:0f:e9:7a:60:99:05:db:13:dc:bc:e2:5d:2e:11:22:
4e:90:f3:e8:56:a3:9b:0f:12:f4:b6:ab:46:17:3e:f1:77:10:
38:19:12:3f:6d:b1:af:96:78:7a:96:0b:fc:1a:5e:52:50:b7:
0b:e9:e0:44:f4:74:95:0b:b4:52:bb:33:60:96:b7:8e:06:3a:
0b:d5:53:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:17:16 2026 by rpki-client