Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
File: QA3igTHHO19TIPUdrmwb1Hq4L5I.mft (raw, json)
Hash identifier: Nw1l21UDQ+QfW/TWCTSo2KBCoO2Y25KqhpJNpPDznwY=
Subject key identifier: 08:63:EB:02:4F:A1:87:25:6A:54:05:D5:27:1F:4F:AE:16:CC:A6:5F
Authority key identifier: 40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
Certificate issuer: /CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Certificate serial: 01A183076C3C757F469C62F98D9C6FA35162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
Manifest number: 07CE
Signing time: Wed 28 Oct 2026 15:01:04 +0000
Manifest this update: Wed 28 Oct 2026 15:01:04 +0000
Manifest next update: Thu 29 Oct 2026 15:01:04 +0000
Files and hashes: 1: QA3igTHHO19TIPUdrmwb1Hq4L5I.crl (hash: w7sfs5gXxdo/90eRiWnsk/fUvZVgFx1XvW6elk/Su68=)
2: lex0MSfafX69jgAmgDrAWYS2f9Y.roa (hash: i/FMA/z6OJZHxVdVZzVnuaqiacIER1savYD4hQ1WM2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:6c:3c:75:7f:46:9c:62:f9:8d:9c:6f:a3:51:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400de28131c73b5f5320f51dae6c1bd47ab82f92
Validity
Not Before: Oct 28 15:01:04 2026 GMT
Not After : Oct 29 15:01:04 2026 GMT
Subject: CN=0863eb024fa187256a5405d5271f4fae16cca65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:32:b3:cb:f3:47:6e:29:2d:ce:21:dc:0f:
6a:8b:50:ae:27:c3:11:dc:c5:9b:ea:5a:0d:23:96:
0e:09:72:2f:7e:d4:47:40:8b:1f:4a:d0:82:fc:8c:
be:90:c0:dc:15:4b:24:a3:56:2a:f4:07:e7:fa:d4:
4d:6f:84:b6:94:69:b5:c8:ba:5c:29:85:d8:be:83:
64:67:dd:b4:ab:66:e1:85:d7:f3:12:4d:38:30:5d:
95:0e:df:32:14:b6:6a:99:53:08:82:2e:1c:57:cf:
47:c9:0b:73:ec:86:d4:3a:ae:cd:a5:2c:32:1f:81:
41:6f:1a:00:ed:d4:7f:d7:8e:10:81:37:89:fd:1e:
13:88:0a:4c:88:71:b1:fc:fd:4c:9a:d2:58:44:06:
fb:ca:e1:7c:4d:8c:0a:8b:7c:1c:a6:e1:7a:38:aa:
4d:d3:b3:32:63:d1:74:60:cf:d2:ef:0b:17:30:d1:
78:9f:b2:41:13:90:d5:e4:30:b8:b9:d2:92:59:f5:
f6:10:af:03:47:4b:74:23:f2:01:0f:d2:37:e4:e4:
0d:ec:8c:0e:d0:c2:44:83:f8:91:87:ef:d0:2d:51:
1a:95:85:48:88:a2:7b:03:57:c3:95:b4:41:65:ec:
6a:a1:76:87:8a:15:2b:f0:38:d7:69:81:25:ed:66:
9f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:63:EB:02:4F:A1:87:25:6A:54:05:D5:27:1F:4F:AE:16:CC:A6:5F
X509v3 Authority Key Identifier:
keyid:40:0D:E2:81:31:C7:3B:5F:53:20:F5:1D:AE:6C:1B:D4:7A:B8:2F:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA3igTHHO19TIPUdrmwb1Hq4L5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e797f2-f272-4663-b145-bc6a1b21fd5e/1/QA3igTHHO19TIPUdrmwb1Hq4L5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:43:31:81:be:1a:e3:6d:3c:79:68:f5:a5:7a:39:9d:cb:28:
60:ec:9d:d9:a2:ef:a1:fe:4b:fd:43:5a:15:3b:32:8f:0f:c5:
51:bc:77:bc:60:24:2e:50:82:05:4d:4c:34:a5:f8:95:9d:ce:
7e:04:dc:c5:78:6c:60:70:1d:7c:6f:50:28:77:cd:b8:b1:1a:
64:1a:d6:c4:b1:78:03:43:37:d8:36:d9:c8:b9:1c:34:b2:9d:
b7:52:f2:80:ce:63:a5:16:04:5f:df:4e:ad:04:e8:da:cd:e1:
cb:ad:a0:69:26:76:c8:be:72:8e:a4:64:ac:3a:81:10:30:d5:
ec:ee:56:6d:7d:47:2a:a1:8b:12:8e:6b:a1:2e:4b:5c:88:b2:
69:81:0d:73:61:9c:d7:1e:f1:ec:af:da:41:fd:73:c5:52:a7:
3a:3d:cf:21:dc:58:a3:05:70:e9:c3:9c:52:84:37:1e:d9:ce:
f6:0d:9a:45:e1:ae:d4:c3:49:d4:3e:9a:21:c1:31:72:1d:69:
2a:5a:92:13:69:31:65:c0:8a:58:e7:25:a1:6d:14:c5:b0:96:
1a:87:a2:e4:3d:ec:5c:37:88:04:59:6e:c5:47:d6:15:fa:6b:
c9:21:97:57:ba:3d:19:1f:f3:25:79:86:31:f3:49:30:5a:46:
fb:69:3c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:44:24 2026 by rpki-client