Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
File: QIAlx94EAODzyI1KEioxfjLF4hw.mft (raw, json)
Hash identifier: gHpE6DZs45cjORGtoYbiyKqWDVv+5aWJBZ4G2eyairw=
Subject key identifier: 8A:16:34:B5:21:DC:FA:C2:A0:32:37:7E:C8:BD:2A:37:DE:A2:44:82
Authority key identifier: 40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
Certificate issuer: /CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Certificate serial: 01A18186D939CA31EE8E7B617B9CE623677B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
Manifest number: 1AD2
Signing time: Wed 28 Oct 2026 08:01:00 +0000
Manifest this update: Wed 28 Oct 2026 08:01:00 +0000
Manifest next update: Thu 29 Oct 2026 08:01:00 +0000
Files and hashes: 1: AwpzkVc0oTDl0sjoa6-QEqDiUec.roa (hash: x7d6UyA4Hucc8K4+EGGBB/UoxNRtjZ72KYH63IunwOE=)
2: QIAlx94EAODzyI1KEioxfjLF4hw.crl (hash: MwUuaX/Sbs/k6iBRV08ktjO9RO0vM3TU3pBaeREeCvc=)
3: VEGHoxhhHVB-D4aY0Y3_4jbUdyo.roa (hash: oOu25O1lLjcQ94aJO/rE50oCG5Vg7rSdNnxkHyjmobc=)
4: dAYviiIQ0ZH5t51e9Yw2PCGTVhA.roa (hash: YawdemXrdjGI6Mt73jp819mShD2ngjs7tuw/5rjzQBM=)
5: mX2v1E6XLguFnbjaAo9xkuZ_YbU.roa (hash: EsNOl7YE7/jiv9Lddbv0Cg6u3OhdzH3IL5pGXlsPUKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:86:d9:39:ca:31:ee:8e:7b:61:7b:9c:e6:23:67:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408025c7de0400e0f3c88d4a122a317e32c5e21c
Validity
Not Before: Oct 28 08:01:00 2026 GMT
Not After : Oct 29 08:01:00 2026 GMT
Subject: CN=8a1634b521dcfac2a032377ec8bd2a37dea24482
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:3b:b3:f8:e2:9f:f1:11:2c:f8:73:66:be:ac:
51:6b:f9:b0:b8:cf:7b:8b:49:86:5b:1a:71:ea:b9:
af:c0:24:71:1f:fa:bf:af:15:48:03:3a:05:ac:95:
17:23:94:39:ee:50:92:58:59:32:69:e0:23:99:45:
50:bc:5c:d8:97:b4:dc:75:6e:d7:89:58:a6:1d:d4:
ab:f2:88:43:cb:e5:c3:77:94:db:e2:93:1a:fa:62:
ed:c0:e8:0d:97:f2:2f:4e:cc:03:ba:8c:ec:6f:77:
c1:35:d0:55:55:b1:e3:6f:ea:fb:1d:00:2c:60:20:
f4:30:43:b8:b4:60:2f:1d:53:a9:f4:1d:d1:fc:fe:
d6:07:5a:af:7f:61:a0:4d:da:f3:f6:e6:4d:1a:8f:
cf:00:23:4f:ec:54:0d:33:4f:9d:19:57:9b:3f:7b:
e6:1c:0e:40:b7:a3:08:07:8a:58:97:87:da:fb:fa:
6e:d3:91:68:d4:da:f5:98:77:c4:52:6d:76:df:a1:
26:44:3d:f5:90:a4:d2:82:df:95:7e:3d:bb:11:72:
4e:65:af:2a:bd:9b:94:9f:d8:ee:86:ea:b7:06:5e:
19:51:f6:49:d2:56:73:ea:8a:48:b1:8a:9b:ae:fa:
19:7c:ae:e6:5d:73:63:de:98:7b:a1:6b:f6:79:78:
fa:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:16:34:B5:21:DC:FA:C2:A0:32:37:7E:C8:BD:2A:37:DE:A2:44:82
X509v3 Authority Key Identifier:
keyid:40:80:25:C7:DE:04:00:E0:F3:C8:8D:4A:12:2A:31:7E:32:C5:E2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIAlx94EAODzyI1KEioxfjLF4hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/59303d-748a-4797-811e-fee2e8d4084f/1/QIAlx94EAODzyI1KEioxfjLF4hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d8:c4:63:f0:d2:33:79:8d:f1:2d:1b:b3:73:4e:13:15:77:
12:9e:11:65:d4:2e:10:89:95:b1:87:ba:93:ba:2b:6d:08:77:
9f:fe:9c:8e:4e:0e:90:7e:ab:b0:57:ae:74:ee:ab:85:67:5b:
e6:aa:a8:dd:83:e7:39:dd:32:fe:cc:f5:bf:3e:8e:7c:74:0b:
50:31:00:2f:59:24:a3:87:e1:58:b0:6d:77:ed:59:85:ab:25:
d1:b6:18:f3:23:dc:7b:5a:bd:bb:5b:9e:76:fb:f7:d2:e3:f7:
9b:e7:c4:d6:54:72:17:0d:29:22:09:7e:67:86:cc:44:de:4a:
09:1c:c1:a7:30:4d:b9:44:49:c4:d6:b4:14:bb:ca:ff:dc:3c:
0c:eb:34:e7:4f:b4:4f:c3:70:22:58:b8:66:3a:72:e9:0a:23:
ab:fa:d6:ad:e3:47:d3:7a:6a:a3:21:2c:68:7f:f5:69:45:f3:
7d:5b:a7:02:2b:04:30:da:51:03:6d:eb:55:68:88:6f:44:1e:
5b:4a:d7:94:b6:7c:60:ca:6f:fe:ed:dd:24:30:7d:c6:79:27:
60:71:e4:6a:79:0b:5a:83:1d:25:df:79:2a:57:9e:88:56:3f:
12:50:44:f9:7c:b5:d4:f7:3d:4c:6e:b6:14:71:96:8b:02:85:
83:1c:80:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:05:55 2026 by rpki-client