Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
File: QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft (raw, json)
Hash identifier: MlYLzoPQWOJ1l7EXrtFnPuoGwzRfCjwUQhqEuBAPgeU=
Subject key identifier: B3:68:ED:82:7C:F9:51:EA:1F:AF:DF:34:E6:BE:2C:9E:BD:96:E9:75
Authority key identifier: 43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
Certificate issuer: /CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Certificate serial: 01A141CCAEDB23F2D7B4685114AE3AAEFD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 23:01:35 +0000
Manifest this update: Thu 15 Oct 2026 23:01:35 +0000
Manifest next update: Fri 16 Oct 2026 23:01:35 +0000
Files and hashes: 1: 9talkSrwDgnaCxDO4CeVrwCobYU.roa (hash: YP25gB5idoPvdLAQ6DcYcc8fU/wCBS3MFRk7Mh6hG84=)
2: QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl (hash: /nLuop24jg8OpVmzo1glH88LH/DqsTPfy+01vJtXaAQ=)
3: pe0y6D9YFwdUoOdD0yoX4k8o7Rg.roa (hash: lD1kQU1t2awKdohr2NZ+PC7BmU3yOJRyp13CGfdz+Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 23:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:cc:ae:db:23:f2:d7:b4:68:51:14:ae:3a:ae:fd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430a5648e1d46b662f4d1dcc066d39427c65f0d1
Validity
Not Before: Oct 15 23:01:35 2026 GMT
Not After : Oct 16 23:01:35 2026 GMT
Subject: CN=b368ed827cf951ea1fafdf34e6be2c9ebd96e975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:a1:1f:ff:bb:50:1c:6f:30:f6:be:88:85:
c1:c4:00:0b:f8:6c:39:b9:31:ba:1e:67:8d:74:85:
30:2f:88:44:c3:1f:68:24:d6:7d:44:04:db:80:4d:
04:72:a3:2c:f5:0b:e0:b8:8a:56:60:20:0c:8c:6e:
30:a5:2f:e2:f5:8e:51:a1:31:02:95:5e:1c:20:f7:
35:43:22:bc:1e:8e:39:a3:80:fa:2d:2a:07:53:b5:
15:b2:ad:5c:d7:06:e0:3a:9e:44:0b:f0:ac:5b:6b:
d7:0b:57:60:a8:27:56:a2:c0:2c:d7:79:60:48:0c:
f5:ec:3d:19:fc:ba:c3:0d:d6:3b:64:f9:03:62:d0:
61:57:b0:c1:d7:7a:71:1e:2b:ad:6f:ed:e3:b2:44:
34:5a:a7:8d:50:3e:f5:6b:00:3c:76:10:69:3b:c2:
cd:89:5d:16:9b:91:1c:d8:4b:28:a2:2e:67:b4:10:
8b:e3:df:d9:4e:74:b1:de:5d:40:48:fd:fd:08:9c:
b5:eb:11:07:28:6f:af:a4:e9:03:c9:39:12:34:59:
dc:13:b3:fe:40:24:59:29:9d:bf:d4:d3:1a:3b:23:
57:78:ab:36:66:64:05:da:a0:95:a9:3f:16:e6:bf:
6b:7e:96:98:86:fb:0b:ed:f6:5a:2b:d5:14:cd:4c:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:68:ED:82:7C:F9:51:EA:1F:AF:DF:34:E6:BE:2C:9E:BD:96:E9:75
X509v3 Authority Key Identifier:
keyid:43:0A:56:48:E1:D4:6B:66:2F:4D:1D:CC:06:6D:39:42:7C:65:F0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwpWSOHUa2YvTR3MBm05Qnxl8NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/861c75-dd03-437b-9fc7-890522c6105b/1/QwpWSOHUa2YvTR3MBm05Qnxl8NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b3:60:70:64:dd:aa:fb:10:d8:d2:88:ba:14:4e:03:aa:b6:
77:90:91:68:2d:14:05:1e:12:d2:e4:3d:a6:2c:1b:2a:30:ac:
a7:a6:88:f9:71:28:46:12:a7:2a:44:a6:37:5c:cb:9f:45:82:
18:ab:98:54:5f:c8:ca:21:b5:81:6e:65:a2:5e:4b:3c:7b:a3:
0c:7a:ed:35:de:45:90:70:ae:97:03:05:62:75:cd:c9:83:78:
3d:06:e2:ec:55:51:59:6b:82:48:4e:b0:60:af:ad:59:46:9b:
6e:e9:59:e2:3a:2e:7b:1a:1d:8c:f2:00:71:7a:0f:24:8a:0e:
da:f8:e4:de:2a:02:40:a6:dc:ef:45:49:70:4f:c9:5b:a3:59:
60:4b:f8:b3:c1:98:f5:e4:69:0b:81:41:99:31:5d:7b:06:e5:
08:0c:15:b4:7e:21:f8:70:b2:77:2f:21:17:50:4d:36:a9:db:
15:6f:c7:c8:99:8c:d7:32:b9:f0:18:4d:79:d0:a6:e8:17:f9:
34:78:08:79:32:fc:2e:4e:02:ee:b2:19:7d:51:fd:1f:6d:7d:
82:6c:07:1d:1f:fa:6f:1c:b2:05:56:2f:77:34:2c:ea:c9:47:
c6:db:c4:ae:32:c0:60:a7:4d:43:0c:2d:72:ba:e3:c7:34:e3:
7c:bb:aa:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 06:39:14 2026 by rpki-client