Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: kGb9fI9J3HMq9VP0Km64l2U/9WETdm4NLaSHEcnkrG4=
Subject key identifier: 19:CB:10:56:6A:17:B6:95:2B:1D:B4:65:26:E0:B7:4E:04:69:50:8B
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 01A181191720D135DA6352D5AFF9B418FEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 1A58
Signing time: Wed 28 Oct 2026 06:01:07 +0000
Manifest this update: Wed 28 Oct 2026 06:01:07 +0000
Manifest next update: Thu 29 Oct 2026 06:01:07 +0000
Files and hashes: 1: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (hash: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: foEX5akaPLYsw9rEKLkINK8CsCp3WPTAHyEk7JvjbvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:19:17:20:d1:35:da:63:52:d5:af:f9:b4:18:fe:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Oct 28 06:01:07 2026 GMT
Not After : Oct 29 06:01:07 2026 GMT
Subject: CN=19cb10566a17b6952b1db46526e0b74e0469508b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:23:39:74:a0:61:47:27:fb:d3:08:4b:e8:
c9:4d:e7:29:88:70:a9:47:18:40:aa:d4:68:8a:73:
f1:6e:82:78:93:97:de:f0:10:e8:46:42:fd:28:1b:
58:5f:fe:59:19:22:ff:7d:80:aa:10:86:64:3b:d8:
b1:d7:29:3c:64:14:fa:9c:21:c1:b4:7e:81:cd:ea:
d8:62:99:dd:8b:d5:5f:f3:8b:ec:7d:1a:b7:d8:5c:
34:6c:f9:31:20:d1:92:91:f8:6a:a9:95:e7:5a:48:
cb:f5:6e:62:af:fb:2a:2f:40:4d:6c:60:c1:96:83:
28:02:74:07:7e:4d:9d:ad:aa:b4:5b:a8:18:74:45:
25:b0:dc:66:cd:b5:b7:be:26:78:07:f6:a2:8a:b6:
60:1b:21:e7:4d:32:58:3b:2f:7e:81:5f:49:f4:d1:
fc:8f:3c:c7:fa:6c:b5:8e:da:bc:4e:b9:e2:26:e9:
93:af:26:ba:9a:2f:b8:1f:8b:e8:1c:2f:94:b4:d0:
67:59:eb:ac:c8:c3:c7:df:76:c5:16:2f:0e:35:92:
32:4d:0d:1a:20:cb:fd:0f:46:bb:63:46:73:61:55:
94:78:1e:1b:2d:c9:38:46:df:d1:32:79:41:f9:fb:
85:2f:e8:43:6b:5a:d8:1f:e5:63:54:97:44:64:0f:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:CB:10:56:6A:17:B6:95:2B:1D:B4:65:26:E0:B7:4E:04:69:50:8B
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:72:e5:4e:c9:14:95:31:15:ac:69:9a:9e:16:8e:3a:fb:33:
59:e0:c0:08:9c:52:95:d2:ce:cf:75:10:25:12:d9:f5:40:17:
15:8a:f8:31:3e:69:e7:c9:2c:99:bb:25:41:fd:58:a3:cd:f1:
ac:45:15:b1:07:6e:31:77:57:a9:ac:d2:c2:a4:ee:c9:ab:40:
84:ca:ff:31:f4:2c:9d:da:ac:db:5e:4f:fd:24:20:47:04:16:
ca:f6:6a:d1:36:32:16:cb:cc:55:5a:e6:9b:94:ce:a5:65:79:
8c:48:be:09:d8:d0:95:66:dd:14:7d:3e:8d:31:37:60:47:d3:
3d:47:c5:60:b3:58:c9:0a:0d:60:a0:c8:6e:dc:bd:3e:6b:05:
1a:cf:2a:fb:7b:d4:c5:23:19:84:c4:5c:97:62:78:21:4a:b0:
f5:cb:e6:de:c0:ef:51:a0:3b:47:fe:17:03:54:dc:cd:19:da:
0a:c5:d6:1d:92:a3:47:bc:1d:dd:d1:96:cb:6e:18:2e:a4:cf:
ad:ff:52:48:23:15:fc:3c:f0:dd:d3:c7:26:0b:6b:23:4d:30:
0f:3b:99:3e:cb:8f:56:32:4c:08:21:f5:4c:06:1c:0f:9e:e4:
79:e8:e0:3f:bc:76:30:47:12:64:fa:62:24:ab:46:0b:51:9e:
51:76:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:35:23 2026 by rpki-client