Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
File: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft (raw, json)
Hash identifier: baMzK1Hc23GHL306HFdAefQV1VqaLbd9tLk0DbMwbqc=
Subject key identifier: 47:50:9E:90:C1:49:CD:DB:40:57:7B:D5:ED:F7:0D:5D:F2:58:E2:59
Authority key identifier: 42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
Certificate issuer: /CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Certificate serial: 01A17627E3440749C91BCF400F9F897182DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
Manifest number: 0BFE
Signing time: Mon 26 Oct 2026 03:01:27 +0000
Manifest this update: Mon 26 Oct 2026 03:01:27 +0000
Manifest next update: Tue 27 Oct 2026 03:01:27 +0000
Files and hashes: 1: 65LDhkWiOsePvay_daaS19w9IrU.roa (hash: RDR1Bk3idKoyL2q+z5ptGPj51Bc2Dh1ei6t9SnrsQKk=)
2: QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl (hash: M+DnfimfS/bui9HN+7Ctz0D4ltwgsr3jqT4omlbhRLQ=)
3: bvcW9C77biAqAwCABs7ccm3YctM.asa (hash: amxmB2iLuW5f4DLf7tIdU00/H+pNIK2yozg2NDZwG0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:e3:44:07:49:c9:1b:cf:40:0f:9f:89:71:82:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f9a96952777f1074338303ecb65025c4e2b8b5
Validity
Not Before: Oct 26 03:01:27 2026 GMT
Not After : Oct 27 03:01:27 2026 GMT
Subject: CN=47509e90c149cddb40577bd5edf70d5df258e259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:63:ce:2d:72:46:80:eb:99:ad:0f:58:f4:
37:af:87:0e:20:0e:1a:45:0d:e8:de:7f:61:47:62:
42:6a:80:f9:11:e6:de:bb:ae:89:e7:42:6c:98:bf:
76:85:ea:64:ed:4d:4d:c3:74:68:17:00:ef:76:1c:
be:20:8a:09:cb:9f:41:68:24:d0:f0:b2:58:0d:d4:
cc:01:ed:c3:f9:cd:d1:cc:c8:15:ce:31:75:0e:b2:
2d:79:0b:e5:f2:c5:61:d3:d2:ca:be:a5:db:3f:1e:
c1:e0:83:ab:07:57:31:2b:6e:73:6a:89:6f:62:12:
de:19:0f:c9:ef:f3:5c:9b:ff:e2:6b:3a:82:15:e0:
57:6a:80:8e:02:92:86:ae:19:09:f5:b1:7f:8f:2c:
d2:2c:da:78:9b:7e:a9:1c:89:d6:57:b3:0f:43:42:
7d:30:ce:d6:ae:df:f4:73:0d:0f:77:11:9c:d9:1d:
6b:94:a6:b9:a6:06:51:3d:1d:89:8b:62:3a:d1:d2:
6f:d6:13:e1:f7:da:77:4d:42:ba:f9:ce:29:9f:8f:
f3:ef:fa:ad:b5:81:b7:52:ea:3c:6a:57:fa:49:bb:
45:e3:62:07:bc:4e:8e:a2:f0:96:17:65:2e:15:5d:
67:32:60:42:4e:07:ac:21:55:64:b4:1c:e1:87:cb:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:50:9E:90:C1:49:CD:DB:40:57:7B:D5:ED:F7:0D:5D:F2:58:E2:59
X509v3 Authority Key Identifier:
keyid:42:F9:A9:69:52:77:7F:10:74:33:83:03:EC:B6:50:25:C4:E2:B8:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2f7bc5-a036-4219-ad8e-77fa2912994d/1/QvmpaVJ3fxB0M4MD7LZQJcTiuLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b3:b1:3f:e2:5c:8c:85:12:1b:d3:8f:8b:81:7b:28:ae:e4:
f6:83:00:3f:ad:33:33:73:11:58:08:e8:cc:0e:d9:4a:3f:c0:
eb:8c:aa:4d:c9:c1:87:45:c5:f5:cf:3d:28:8e:d7:3e:93:2a:
5a:64:e2:70:b2:91:3d:19:17:24:21:d7:d5:ec:f1:36:6d:ea:
11:1b:da:a9:27:55:13:af:2a:bc:cc:c6:29:a6:c9:13:8a:b1:
03:21:28:f2:41:99:43:52:d1:19:0f:18:43:c3:05:a3:46:42:
38:8c:1b:89:f6:c3:99:06:39:66:5b:93:33:02:91:da:51:e3:
97:0b:2b:2b:c8:de:71:6d:b3:4d:83:9e:82:61:50:8a:82:d4:
d0:71:31:74:a3:28:60:ca:55:4d:f2:70:9b:b9:b1:5a:2b:08:
7b:c3:b8:f2:7e:5b:93:18:33:0a:8d:2e:02:f3:03:97:d4:00:
b9:82:9c:e3:cf:ae:bd:87:8c:db:66:f8:46:63:b7:c6:e5:79:
76:3d:40:02:9b:91:93:32:cc:68:15:51:de:b2:be:65:62:bc:
db:7f:ff:2c:2a:83:34:77:f7:56:fe:b5:65:ce:91:3f:1f:28:
a0:06:5a:a7:f7:fc:ad:7f:2b:74:74:66:3b:e7:15:fa:17:1a:
e4:2d:3d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:18:43 2026 by rpki-client