Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft (raw, json)
Hash identifier: ZAuxjgwfMR3cdvCLEd/32pPNGAyyl6xbUKIBaNbSQhU=
Subject key identifier: 2F:FF:93:F7:FD:BF:12:04:FD:70:F8:96:0A:5E:6E:70:E7:C7:F2:5F
Authority key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Certificate issuer: /CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Certificate serial: 01A176279E49687D71786A337F54153AC791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 03:01:10 +0000
Manifest this update: Mon 26 Oct 2026 03:01:10 +0000
Manifest next update: Tue 27 Oct 2026 03:01:10 +0000
Files and hashes: 1: qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl (hash: 5Uu2YUPPkZ/l0iFrjrlbhLGv15eIofVyEdUGxabgQFg=)
2: vF0Ba58Vjf6MQi2xfFA2VRGbWDA.roa (hash: UP/P5O1v0/b2/0tqvP3zAcq5nuDMZ+lgRc9j8wTq7CY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:9e:49:68:7d:71:78:6a:33:7f:54:15:3a:c7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Validity
Not Before: Oct 26 03:01:10 2026 GMT
Not After : Oct 27 03:01:10 2026 GMT
Subject: CN=2fff93f7fdbf1204fd70f8960a5e6e70e7c7f25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e8:47:2b:6a:7a:bc:0c:bc:b0:b0:76:f5:e0:
0f:f1:e5:46:b4:d0:cb:7e:3d:5d:3c:c8:04:dc:2a:
97:e2:1d:fa:ea:d0:99:02:1d:32:7f:e2:66:23:72:
c0:b7:b5:71:f4:ba:88:4b:02:23:7c:fd:0a:1a:23:
71:f6:ba:28:2d:57:cf:2e:03:24:b3:e4:f3:f8:9a:
d4:46:d6:3d:cb:23:9f:6f:7a:e9:d3:29:f7:e0:75:
7a:a4:90:f2:fe:f5:0c:91:5c:2d:68:ec:54:8a:42:
95:29:bc:56:f8:dc:c0:40:39:31:21:13:22:8a:f6:
bf:f4:c8:26:c2:62:27:39:cf:ea:7e:b7:4d:d4:d4:
b3:95:5e:4a:b3:62:33:89:6a:eb:2a:4a:a4:72:39:
95:a0:4c:ad:38:d7:01:eb:2c:0a:cd:b1:bb:a6:cf:
52:d1:e1:89:5b:4b:db:0f:70:25:95:f8:1d:db:94:
01:92:1c:48:da:f3:64:d3:95:7b:c1:8e:ba:7d:1c:
2b:08:b6:9d:eb:8f:95:4f:f7:58:68:0f:70:8e:18:
37:2d:f2:ab:25:f2:02:c9:15:fc:e8:a1:d6:be:c4:
54:e1:94:b3:57:89:02:38:a6:c4:a7:5e:b8:81:b1:
71:9e:82:9f:2f:c6:fc:2b:06:81:85:3d:08:43:37:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:FF:93:F7:FD:BF:12:04:FD:70:F8:96:0A:5E:6E:70:E7:C7:F2:5F
X509v3 Authority Key Identifier:
keyid:A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a4:8a:66:da:49:bb:82:bc:02:db:96:61:db:d2:07:19:96:
39:78:d7:dc:f7:64:85:d8:e1:dc:71:33:90:2b:8e:c7:c9:c3:
9b:fc:1d:7e:6b:5d:7a:57:d8:e5:1b:fd:45:ff:8d:89:76:cb:
b6:d5:90:f0:ce:60:69:dc:1f:5d:97:f5:51:44:e9:d5:4e:a3:
59:76:b1:52:a8:48:6c:b4:48:d7:5f:0b:10:9e:e6:62:ea:c7:
4e:d9:88:b5:a9:d7:19:86:73:02:58:4b:13:ed:ba:7a:bd:b1:
8d:d5:d4:2f:49:e6:1f:21:22:21:a0:51:da:7d:6e:da:5a:ae:
e4:74:77:5e:58:88:11:c7:48:33:bc:85:b1:9d:aa:77:3c:d9:
80:f1:0f:05:f5:32:52:d5:c4:45:7b:58:fe:62:4c:c0:e1:aa:
4b:4b:88:d4:94:51:b9:a8:93:8f:d0:36:ef:7b:85:27:e9:43:
37:71:6b:7e:24:0b:d5:63:6d:a4:23:03:cb:09:97:30:c8:f8:
85:b4:c6:c3:63:fc:ce:0e:42:5e:23:21:11:a6:d2:d2:91:04:
d2:80:39:ed:12:d4:a4:a1:3c:e8:e1:18:62:f3:14:c7:63:38:
59:a8:ac:c6:09:85:d7:ea:0c:ee:f8:46:9e:a0:66:c4:fb:40:
d1:97:8e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:21 2026 by rpki-client