Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
File: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft (raw, json)
Hash identifier: 3iVUux6JFoN80LKxFIhE8gFNIs2Oz9IPGvzgnEvCsx4=
Subject key identifier: 82:0A:D2:EE:48:21:A6:A2:4C:45:2C:41:45:2B:58:5E:D5:63:F6:E7
Authority key identifier: 43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
Certificate issuer: /CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Certificate serial: 01A17E1823FE2AA1CC5D5BBF55F3D65DD8EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
Manifest number: 1AC1
Signing time: Tue 27 Oct 2026 16:01:13 +0000
Manifest this update: Tue 27 Oct 2026 16:01:13 +0000
Manifest next update: Wed 28 Oct 2026 16:01:13 +0000
Files and hashes: 1: QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl (hash: EZxLCNuL8BkKa554YtCGaz/K2wbSDrp5MQXWZr/oqyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:18:23:fe:2a:a1:cc:5d:5b:bf:55:f3:d6:5d:d8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43324f251b68ff5463f6b53507f66a4b034dc0e5
Validity
Not Before: Oct 27 16:01:13 2026 GMT
Not After : Oct 28 16:01:13 2026 GMT
Subject: CN=820ad2ee4821a6a24c452c41452b585ed563f6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:ac:2b:fd:c5:06:63:6c:fb:b4:ae:3f:f5:
84:7c:dd:34:58:45:ec:fd:96:e0:8b:c1:6e:5b:36:
f4:ca:56:38:a4:a0:6c:33:89:f6:7b:5e:9b:e6:6d:
39:36:1a:e1:82:07:33:22:07:fe:67:43:3c:8c:e4:
52:d9:1d:c2:43:d9:47:5c:82:b2:af:d2:24:a5:8d:
9e:1a:a4:e3:a8:1a:0b:16:23:d6:f8:0b:eb:9c:d0:
c8:25:d8:dd:d1:2a:7c:f9:68:9b:56:91:87:20:d6:
e3:c3:b3:51:ad:68:44:db:16:89:d1:73:eb:79:60:
d2:2c:98:f9:32:22:20:ad:ce:f9:39:3d:18:a3:1c:
94:cf:2b:34:80:7c:3d:8b:e9:c4:a1:c5:92:a2:5b:
f8:49:ce:bb:d5:c1:c7:45:b0:99:35:90:30:84:e5:
f4:35:aa:36:ae:a5:e4:bb:8b:22:b0:22:3a:97:3e:
ec:0e:4e:5a:0a:b2:63:e4:47:31:ce:1f:4d:81:56:
70:4e:5d:0e:da:89:d5:de:47:3b:b3:b6:b2:0a:5c:
f9:36:1b:6f:7c:3b:01:f3:16:f1:6a:ed:70:7c:ce:
48:93:74:67:0f:87:19:f4:0a:2b:f6:e1:ba:41:a4:
6b:d2:9a:4a:85:37:75:e9:3f:e7:df:b1:fc:0a:19:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:0A:D2:EE:48:21:A6:A2:4C:45:2C:41:45:2B:58:5E:D5:63:F6:E7
X509v3 Authority Key Identifier:
keyid:43:32:4F:25:1B:68:FF:54:63:F6:B5:35:07:F6:6A:4B:03:4D:C0:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/afead5-9373-485a-a93a-bc33a54898e0/1/QzJPJRto_1Rj9rU1B_ZqSwNNwOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:71:76:c4:06:ee:af:91:8a:53:c9:28:6d:34:30:9b:62:1b:
99:11:ab:ec:67:6d:45:92:6f:43:87:ba:12:fa:f6:63:87:9a:
0f:de:24:45:7b:f4:ea:2d:43:7e:64:4f:bb:6e:c3:22:4a:c9:
35:3b:91:3a:90:06:50:d2:78:46:1a:04:3b:dd:7d:20:e9:83:
85:48:ff:74:44:97:f3:3c:85:dc:aa:8e:c7:03:1b:e3:f1:28:
b3:a7:0a:85:41:4a:30:d1:1c:d6:ed:cb:43:f9:ed:7a:9b:1b:
fb:60:27:d3:d8:9d:19:1e:39:87:65:cc:f6:50:aa:4b:71:66:
d7:24:30:49:9a:64:a9:35:9c:cb:30:d8:98:3b:7e:16:bb:46:
b1:29:29:6d:df:3a:92:75:2e:4b:c0:a6:a7:98:ff:9b:40:e0:
39:5b:56:03:f3:36:4f:b0:2d:d5:66:06:1a:44:95:a9:a5:70:
5d:8b:a3:db:a5:3b:8c:cb:af:d9:1f:43:3c:3c:00:af:45:99:
3e:f5:63:74:a1:a0:37:16:0d:c3:82:03:c0:30:e0:62:6b:75:
d7:dc:15:f6:62:b3:2f:88:60:35:0e:6b:c1:28:76:29:7d:16:
0e:36:e3:88:f7:3b:63:b9:66:71:e7:f9:f3:76:21:78:7b:3d:
82:d4:1a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:43:20 2026 by rpki-client