Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
File: QHShwDg61esPBYjkwzlLo0AQpiE.mft (raw, json)
Hash identifier: pqa7cUED5eNVc7cLLAj4g0KV5c0fH2qpQkgvToZ5ab4=
Subject key identifier: 51:53:FF:07:28:A7:3B:CD:11:29:E1:6E:71:9A:7B:17:BE:47:A7:0D
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 01A180ABBACA2188A8CE46C3D4122F0999B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 04:01:40 +0000
Manifest this update: Wed 28 Oct 2026 04:01:40 +0000
Manifest next update: Thu 29 Oct 2026 04:01:40 +0000
Files and hashes: 1: QHShwDg61esPBYjkwzlLo0AQpiE.crl (hash: P6bXledbLsWUInTkedN4e5OhDUFrG6FbHlp73J5kanI=)
2: UuOnxKKINXGrGno4BgqG1wRiVJE.roa (hash: qOk1balDAYueDzPokwNkuPz8mml9IxTXWfQ4Usp7bxE=)
3: lWaDtpARbUJ2WwQgVuDOZ2ytV1Q.roa (hash: jLR4Kee9nPopi72xWjqK7/G5TtGJxgI8fqStb9xXKYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:ba:ca:21:88:a8:ce:46:c3:d4:12:2f:09:99:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: Oct 28 04:01:40 2026 GMT
Not After : Oct 29 04:01:40 2026 GMT
Subject: CN=5153ff0728a73bcd1129e16e719a7b17be47a70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:e3:73:68:c5:80:49:2b:7f:e7:e8:e7:57:
94:2f:58:3a:a8:96:97:d6:52:53:a7:31:0a:c1:60:
84:2a:12:71:9c:20:17:e7:39:1f:7d:28:19:ef:d8:
e0:f4:19:21:b2:fd:6d:47:30:62:f7:f7:39:70:09:
72:bb:9d:3e:93:ea:e9:5f:69:ad:5a:fa:7d:82:55:
85:3e:34:9a:f4:2c:3d:e6:aa:c7:0b:29:af:51:15:
c3:b3:80:2d:75:4c:9f:dd:e2:bf:ca:7d:40:46:b2:
64:9d:ca:6a:17:19:48:2d:3b:a4:07:21:a1:f2:77:
c3:a7:cf:2e:b5:d6:4f:fe:60:ef:a3:37:d4:a5:3e:
af:7a:21:40:4e:5e:0b:70:81:a6:05:e6:b0:dc:de:
78:a3:75:f3:37:40:19:ef:ec:df:fe:b9:61:14:e0:
11:9f:db:45:44:51:06:77:58:9b:64:28:8b:73:80:
d7:d7:08:01:2c:9d:98:ae:d1:00:f7:1d:85:83:fe:
2d:e6:43:14:da:fb:20:f2:9a:41:44:b8:3b:6c:f1:
ba:51:7d:1f:2e:48:c4:b4:cd:98:b3:95:8b:c5:9c:
99:93:fd:9a:ec:1b:28:58:93:ed:de:39:c6:11:3a:
ec:5c:e2:35:72:4b:43:38:66:cf:2d:90:d4:8e:39:
8e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:FF:07:28:A7:3B:CD:11:29:E1:6E:71:9A:7B:17:BE:47:A7:0D
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:56:cd:44:bc:87:98:76:b9:7c:41:29:b7:ed:ea:2c:f7:2f:
8b:63:5b:09:ba:9e:2c:0f:0b:5a:cf:06:0f:d3:d6:8e:50:c5:
5a:74:ee:b2:dc:fb:1a:74:64:55:0c:90:c0:21:b0:d6:89:1c:
5d:3e:55:b8:b0:03:56:cf:24:1e:f6:31:35:32:05:53:e3:64:
e0:ca:e3:f3:8f:7c:4a:8a:c1:75:61:b6:a0:53:83:ad:22:b4:
2f:e4:c7:83:d0:bc:e3:27:b6:41:7c:50:ac:10:b2:60:d0:8f:
a2:d4:73:a8:1e:19:3a:14:34:1c:01:9b:8c:07:d5:e3:12:88:
7f:62:d1:3a:7a:d6:d4:43:97:7f:dc:72:11:c1:5c:6c:f3:4b:
f6:29:44:11:58:ae:fd:06:39:75:1d:79:da:ce:2b:2c:3b:9d:
4a:44:b9:4a:46:c7:81:93:b8:48:cd:ab:9c:22:a6:ad:c1:6a:
9b:56:80:fa:e5:e5:2e:eb:18:5e:92:f4:a8:ff:08:3f:8a:59:
e6:a0:dd:8f:6c:5b:a8:3b:ec:61:2f:ae:3f:a3:5e:04:b2:a4:
7d:4e:80:2d:85:89:3b:ba:03:63:74:20:b6:90:07:08:75:5f:
f1:38:7a:2b:75:b9:5b:3f:bd:9e:dd:1d:98:c1:ca:f5:9a:e7:
81:1c:23:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 12:30:33 2026 by rpki-client