Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: LaQWp2f0tXzPvMJUpq3rXKa3N1cfRAdO08nDGvUp0j8=
Subject key identifier: 28:78:98:3A:0A:BE:D8:DF:B4:47:A6:52:58:30:41:9E:0A:75:5F:15
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 01A11A50547C896BE7256A6E77CA8AFA5B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 1779
Signing time: Thu 08 Oct 2026 07:00:34 +0000
Manifest this update: Thu 08 Oct 2026 07:00:34 +0000
Manifest next update: Fri 09 Oct 2026 07:00:34 +0000
Files and hashes: 1: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: 5g7lRxBkK/EiT0Fhoz4UEqJhrJ+g4XDFGY228J/NX0E=)
2: w011lYt62c3hWszahC6AWv6giHI.roa (hash: xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:54:7c:89:6b:e7:25:6a:6e:77:ca:8a:fa:5b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Oct 8 07:00:34 2026 GMT
Not After : Oct 9 07:00:34 2026 GMT
Subject: CN=2878983a0abed8dfb447a6525830419e0a755f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3f:53:a1:8f:09:24:03:f4:02:59:1e:32:56:
10:1f:bc:7b:04:3b:72:a9:b0:92:ae:28:24:a6:24:
14:c9:b5:d1:ad:4a:5a:d3:01:df:8e:2e:f3:6d:66:
06:aa:4e:2e:1a:16:69:af:3b:02:12:1a:8b:59:8f:
63:ef:41:5f:a2:f8:e0:21:c4:45:17:86:88:4b:45:
7d:8b:3d:53:32:cd:6d:c4:94:48:16:e9:c9:ba:67:
72:53:d1:1e:ad:5d:f8:ed:77:9b:a9:c2:fe:6a:28:
c9:87:3c:21:c8:80:b0:4e:55:63:00:4b:8d:9b:97:
fa:3e:04:8e:1c:24:98:ee:b5:76:ab:63:74:d0:cd:
25:e2:ad:23:e4:d7:ca:51:48:8f:29:b9:65:dd:3d:
d4:03:c9:d6:bd:ae:7e:96:db:03:e4:02:7d:f1:8d:
62:b8:06:8d:68:1d:7b:90:3d:bc:f5:01:f7:1a:24:
7b:24:54:bf:c0:9c:da:3b:93:25:63:e2:97:e1:85:
24:0a:04:f9:0e:ae:87:9e:56:46:40:71:cd:69:b2:
b0:7f:7b:00:d1:cb:80:67:58:bd:b4:46:18:2b:d5:
09:fa:ba:df:d9:23:1e:df:d7:5f:43:4a:4f:9b:01:
c0:3f:3f:81:48:50:01:1f:52:e4:0c:5d:df:9e:6c:
10:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:78:98:3A:0A:BE:D8:DF:B4:47:A6:52:58:30:41:9E:0A:75:5F:15
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7f:78:78:08:84:78:cd:ff:92:fd:6c:1b:18:43:ce:a2:61:
84:ff:73:59:8d:f2:cc:5c:34:51:a3:86:85:60:bd:75:ab:9d:
b7:7b:be:1f:38:1c:47:fa:48:ff:4d:80:52:cc:fa:ba:d8:00:
2a:7a:f5:6e:96:20:d0:9b:75:e6:8e:ee:c9:ed:31:0c:fe:b2:
2b:3c:8c:28:d5:32:2f:98:2f:91:44:95:33:92:22:01:9d:30:
a7:20:cd:78:06:fd:fb:2a:8d:50:64:36:d9:7b:86:17:31:52:
19:c8:39:d2:31:26:11:45:ef:f4:96:ae:f2:e7:64:f9:81:49:
b9:2a:23:b5:c1:48:2f:16:fb:d1:b1:d3:d0:9c:22:ea:c5:01:
da:5c:73:03:4f:6f:2f:3b:f6:6d:06:35:e4:77:94:05:fd:bf:
e2:e0:2b:f4:38:97:b9:0d:77:22:8a:62:6e:55:0a:f7:14:a8:
4b:87:61:fb:96:20:99:86:44:49:f9:77:61:b6:ce:17:cf:05:
05:51:ac:a4:57:2c:93:32:6a:4e:a2:a7:0a:d7:75:5e:25:4d:
0e:a1:6a:42:52:6b:3b:42:3a:87:f2:bb:5b:96:c9:35:c5:ce:
81:b1:37:ee:2d:c3:89:f8:40:46:20:b6:5f:e2:05:63:d5:71:
f3:0e:37:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:24:10 2026 by rpki-client