
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
File: Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft (raw, json)
Hash identifier: SqC9Cj8hkTe91nOtLWWqZUDdQzHwLDLKXQ4Xy132EiU=
Subject key identifier: 53:17:6A:03:6D:8A:33:DE:DC:7F:9F:73:A1:4D:EB:38:6C:75:6F:26
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 01A18F79A7D34861D94948811DA2957D247B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
Manifest number: 0E43
Signing time: Sat 31 Oct 2026 01:01:16 +0000
Manifest this update: Sat 31 Oct 2026 01:01:16 +0000
Manifest next update: Sun 01 Nov 2026 01:01:16 +0000
Files and hashes: 1: JXLkT6VnIp-SB5I9EMRZOw0DYZI.roa (hash: l3rRARSXe/Kv5HUcutLJRW5ribdNSHw4ggpcG9Mw0ro=)
2: Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl (hash: aGU1l67+lxylSExv8moV5PB+1gajP6SaeBf2RbGdnJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:79:a7:d3:48:61:d9:49:48:81:1d:a2:95:7d:24:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Oct 31 01:01:16 2026 GMT
Not After : Nov 1 01:01:16 2026 GMT
Subject: CN=53176a036d8a33dedc7f9f73a14deb386c756f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:82:df:02:e8:50:33:91:6d:34:4e:cf:65:d1:
fb:12:3c:0f:90:84:d5:30:80:d2:f1:32:ce:bb:e3:
6b:dc:59:46:3c:7a:e9:5d:fc:8c:27:e7:33:a4:28:
b6:93:bd:0d:23:2f:f2:1f:a3:2d:d7:46:7c:3a:3f:
8b:a3:5b:77:e5:6d:7d:d1:cd:b9:9f:3f:e1:9e:e8:
c3:34:25:d9:e5:f9:23:f6:2c:95:d2:65:ae:18:d3:
6a:8f:8b:78:ca:f0:bc:51:42:53:f0:6a:0d:eb:cb:
13:8d:a1:d8:14:48:e8:c7:b2:ed:0b:60:1b:59:af:
4e:09:4f:fb:31:65:58:9f:76:38:89:f7:f1:43:66:
79:75:af:22:00:d9:aa:93:f4:1a:e8:e9:af:16:1b:
01:65:0e:9a:f6:89:68:dc:b5:c6:33:3f:b1:2c:16:
86:96:ad:10:15:9c:57:d3:c9:0c:20:dd:25:be:31:
09:cd:03:66:6e:b6:09:12:6d:37:5c:d0:92:7d:06:
46:36:a8:02:17:c2:12:86:7b:20:6c:6e:84:2d:f8:
22:55:87:79:65:93:56:6b:10:fa:94:36:2e:53:c8:
32:89:c7:20:ec:93:98:c7:73:0d:2c:d9:d8:0f:39:
64:73:7a:01:fa:a7:f4:f9:bd:00:ea:6c:f4:33:2d:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:17:6A:03:6D:8A:33:DE:DC:7F:9F:73:A1:4D:EB:38:6C:75:6F:26
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2e:cc:24:3e:2b:36:50:bb:9e:ab:27:89:79:53:f5:a5:79:
17:93:80:9a:bd:8f:e8:63:40:1b:07:c6:3f:e9:68:86:f8:40:
5d:c0:6f:fb:1a:bf:89:1c:2a:6e:92:ff:61:4f:6a:be:15:ff:
2a:2b:98:33:ea:d0:06:7e:c2:6b:24:cf:aa:aa:3c:50:0f:32:
3f:8e:71:81:6f:ec:8f:dc:05:5e:1e:77:8b:7f:26:ca:a2:50:
18:c5:ce:7f:fc:c7:3f:0c:c1:be:9a:a7:3f:e2:2c:ff:d2:52:
8d:65:44:f5:ef:f1:01:29:ae:4a:15:5d:fa:1c:36:5f:38:fd:
8e:a8:0f:9a:72:26:2e:98:9f:c7:aa:b9:41:c7:f6:2e:68:ca:
2c:46:ae:ba:92:b2:fc:17:63:6b:de:10:ca:0d:82:d0:83:ab:
fa:99:36:c2:ad:2d:e2:6f:05:65:41:a5:d1:dd:61:b9:5c:9b:
26:60:75:ea:f0:af:b6:ed:fb:a0:06:46:e8:93:6c:74:1b:4f:
ef:81:f1:c9:a3:de:2f:d0:a1:d0:4d:5f:43:26:cb:2b:d5:17:
de:ff:2c:26:d6:cd:2f:b4:b4:a7:dd:85:77:54:ac:5d:f1:a2:
57:e9:f0:5d:4e:e6:56:c2:82:f3:48:0b:d8:1a:7e:6f:22:75:
82:9c:bb:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:44:02 2026 by rpki-client