
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.mft (raw, json)
Hash identifier: JEmimXHGV6tZUIyXrXMqDz3lE1/q1AP/mgVL548cH8o=
Subject key identifier: 42:2B:D9:A5:F0:F7:97:F0:CF:1A:97:3D:A9:4B:F3:B5:32:B2:54:4C
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial: 01A183AC40314894C56111DDD20A6DBFBE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
Manifest number: 1A5A
Signing time: Wed 28 Oct 2026 18:01:06 +0000
Manifest this update: Wed 28 Oct 2026 18:01:06 +0000
Manifest next update: Thu 29 Oct 2026 18:01:06 +0000
Files and hashes: 1: DAx6kSb1RhGpO9yrUuteRaJtlP0.roa (hash: trEbTAVUulhDK7QkaPxzXefg5Sh7SP/MDtVzjJ/I6JU=)
2: _-QUYBinY6QqUVVjWb8Vv4XjmsY.crl (hash: tMadO9nlODyQgRUnGRcyc36ZwWtp0/uQlNrxuxWs/2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:ac:40:31:48:94:c5:61:11:dd:d2:0a:6d:bf:be:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Validity
Not Before: Oct 28 18:01:06 2026 GMT
Not After : Oct 29 18:01:06 2026 GMT
Subject: CN=422bd9a5f0f797f0cf1a973da94bf3b532b2544c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:55:db:08:f1:12:d9:bc:6b:0a:2a:ab:a8:
f3:7a:d9:a3:42:c2:7b:05:de:44:c6:1a:94:3f:a8:
9c:78:88:ad:bd:35:a4:92:21:78:d6:e9:0e:99:38:
f6:28:54:a5:4f:07:f5:f9:ce:cd:85:d5:e9:41:cc:
a0:d7:d9:65:00:5c:47:f9:ba:15:92:04:32:a9:94:
d0:a6:83:82:74:f8:ad:23:6b:69:36:f8:20:fb:75:
fd:48:5c:79:3d:1d:22:bc:21:1b:15:a0:27:46:27:
12:b0:dc:f6:26:02:bb:16:37:f1:d9:fe:c5:d4:35:
05:41:73:79:33:a8:c9:db:43:cc:d4:7e:4a:2e:dd:
70:a4:88:fe:1a:88:1f:aa:ec:88:36:dc:36:62:52:
62:3a:49:19:09:04:e7:e1:d1:08:36:70:80:2c:90:
01:9d:ad:96:07:6f:d5:72:ad:a0:de:cf:25:95:fe:
e6:28:09:0f:1e:d0:b0:40:3d:4d:1e:76:9c:8d:45:
70:0d:01:2a:1e:70:87:71:bd:e5:82:bc:cf:a2:bd:
07:36:4a:7f:c4:04:eb:2c:3d:ab:fa:5c:e6:9b:30:
84:3f:31:f0:0a:48:5b:d7:d8:21:c5:ef:75:6c:68:
ab:2b:dd:c8:87:0e:48:01:f7:f4:69:2b:ef:81:3e:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2B:D9:A5:F0:F7:97:F0:CF:1A:97:3D:A9:4B:F3:B5:32:B2:54:4C
X509v3 Authority Key Identifier:
keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:3f:fa:ee:df:ca:fd:60:24:f4:fa:e7:70:4d:35:0e:d2:95:
65:d1:5f:e8:7e:bf:fd:fa:72:8d:08:63:95:69:fa:8d:2a:ca:
90:93:a8:ca:07:12:a0:78:c8:16:d1:ad:2a:00:bd:57:f3:35:
72:32:6e:71:dc:a3:62:92:80:8c:74:f6:5f:ec:11:c8:36:61:
0b:7d:fb:d0:86:90:18:aa:01:af:bd:2a:60:78:52:18:1b:74:
49:8b:b9:e7:b7:45:be:6a:58:53:2c:3c:52:55:a9:43:05:53:
d9:f1:53:2b:7c:c5:02:3a:74:9f:5c:d5:2b:14:38:b5:6d:80:
25:92:fe:ee:47:0a:42:9c:71:4d:36:ca:0a:67:64:d6:11:38:
f6:c0:5e:1b:f9:64:b5:99:b5:9d:4e:5f:3f:59:ff:d5:a5:18:
9e:b1:12:1b:2d:cb:7e:b9:b6:37:3f:98:23:f4:66:a4:59:85:
a4:d5:a1:96:2e:f8:1b:59:2d:25:bf:5e:b5:ff:ea:36:2c:f1:
f8:cf:e3:a7:ac:4e:02:5c:89:47:d0:3a:74:d4:d3:f7:61:09:
8d:2a:20:09:ed:25:8e:85:b9:be:f1:42:45:f8:1a:32:7e:de:
04:bc:1f:27:ff:13:61:1b:9b:31:bf:4f:3b:93:98:ea:bd:a5:
0c:c0:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:14:41 2026 by rpki-client