Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.mft
File: QzU1eWRbvqHGfNqakci0GbUtg0Q.mft (raw, json)
Hash identifier: rFUxUqULXiOb8iYqK71MpRs47rLXoNBEfuubmPZBVrk=
Subject key identifier: D6:86:3E:8B:FD:26:F0:75:BC:4F:88:DB:64:3C:FB:83:1B:6F:AA:20
Authority key identifier: 43:35:35:79:64:5B:BE:A1:C6:7C:DA:9A:91:C8:B4:19:B5:2D:83:44
Certificate issuer: /CN=43353579645bbea1c67cda9a91c8b419b52d8344
Certificate serial: 01A10324BC0152C0D538833BA2490DFA839D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzU1eWRbvqHGfNqakci0GbUtg0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.mft
Manifest number: 28
Signing time: Sat 03 Oct 2026 19:01:41 +0000
Manifest this update: Sat 03 Oct 2026 19:01:41 +0000
Manifest next update: Sun 04 Oct 2026 19:01:41 +0000
Files and hashes: 1: EmTxLgOX0u1eXdSLbwj1AYSs8Gw.roa (hash: ZEwFPYBWkArICUZkIkdL6JG/Cplugs/id++jvH+LHRs=)
2: QzU1eWRbvqHGfNqakci0GbUtg0Q.crl (hash: VYFnwG3iKkvp0HeQZw9oFGd7oAKttUqOVcFQuJ/5AzM=)
3: xeajp4H0qE3EDocOiWV3z6Lcaiw.asa (hash: CnB9aCfs1wpkHQTQRTFtAdPWGj1JXtd4sar6rSuSo2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzU1eWRbvqHGfNqakci0GbUtg0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:bc:01:52:c0:d5:38:83:3b:a2:49:0d:fa:83:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43353579645bbea1c67cda9a91c8b419b52d8344
Validity
Not Before: Oct 3 19:01:41 2026 GMT
Not After : Oct 4 19:01:41 2026 GMT
Subject: CN=d6863e8bfd26f075bc4f88db643cfb831b6faa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:23:1f:21:ba:49:8e:84:af:57:79:7c:c5:
c0:60:f1:c8:aa:db:97:ef:f7:88:be:28:c6:a2:f5:
31:96:2e:c7:f0:15:ad:da:7a:77:e1:ed:79:2c:8a:
0e:41:d4:4f:2d:54:c3:4e:3c:e6:30:5f:df:1e:a5:
65:a0:75:ab:6d:a4:14:50:ef:d7:56:36:89:37:8a:
dd:f6:da:c1:47:08:f6:3b:a1:01:77:82:28:16:93:
20:22:14:c3:95:10:ad:64:0d:ce:ee:52:cd:48:9d:
94:68:9f:b6:2e:a1:89:dc:ed:cf:62:81:1f:7b:c9:
c0:c4:df:d6:ac:07:3b:99:d8:67:77:9f:26:a7:c9:
0b:43:d9:a9:bf:3c:4c:f6:1d:35:33:50:43:f8:12:
de:24:2f:e9:61:26:8b:96:04:00:d4:02:23:62:af:
1b:86:c0:c5:97:68:89:5e:1d:e1:09:7e:ad:d7:89:
35:e3:46:b0:90:6b:2f:5c:02:a5:57:aa:96:de:45:
bb:5a:82:9f:90:10:83:1b:63:d7:02:dd:42:18:cd:
ad:f9:86:27:bd:2f:4f:08:8c:52:20:15:90:fc:b2:
e7:ab:f5:ee:d6:04:92:11:ce:68:70:40:2a:ef:d3:
25:49:47:6f:99:83:87:d7:3c:3e:f8:2a:82:70:32:
33:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:3E:8B:FD:26:F0:75:BC:4F:88:DB:64:3C:FB:83:1B:6F:AA:20
X509v3 Authority Key Identifier:
keyid:43:35:35:79:64:5B:BE:A1:C6:7C:DA:9A:91:C8:B4:19:B5:2D:83:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzU1eWRbvqHGfNqakci0GbUtg0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b3:f7:33:21:75:7c:85:64:fb:5c:03:b1:95:81:6e:19:19:
50:8b:57:e0:e5:8b:b0:40:09:29:8c:a4:40:0a:e4:d8:34:82:
bb:a7:d7:a7:3a:ce:25:a1:02:50:7d:6e:90:f3:32:b7:a1:a9:
f6:cc:a7:3b:89:4a:80:7d:cb:a5:07:64:f7:ff:05:ed:d5:ea:
c9:af:1b:fd:15:46:a8:09:32:66:ab:30:6a:1c:27:fd:a6:01:
4b:97:7e:3f:9b:6a:d7:05:58:d8:ed:ee:92:ec:eb:fd:28:b0:
16:28:98:34:91:5c:ec:5b:27:7e:8a:fd:d3:78:0d:65:cb:91:
2a:c8:4a:20:3e:fa:05:0d:7d:fe:c2:65:eb:0c:06:6d:f7:0e:
bd:ab:5f:27:c9:f9:71:60:3c:aa:e9:47:77:9c:3a:c2:29:9b:
ea:aa:df:19:1e:5b:85:80:84:3a:d7:6a:b6:7b:29:89:10:8f:
2d:4f:a2:ce:12:7f:d4:88:4f:d6:e5:08:c7:a8:28:1e:a0:e3:
6e:f8:7b:e2:43:07:f1:cf:49:86:a9:64:4a:a7:ed:4f:cd:bf:
7c:45:74:f9:ca:03:5e:1c:76:b7:d9:81:3e:c2:94:2f:b6:16:
21:18:79:79:62:34:e0:39:f8:cb:78:43:04:2b:a7:af:0e:80:
ab:70:49:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:18:04 2026 by rpki-client