Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: ++13R0hdma5dpvnwUjKOwEVe2CjlNWfS2TJp/vus/7M=
Subject key identifier: 62:72:EB:F7:5E:BF:01:91:6E:24:D9:D5:73:57:9C:07:2F:53:AC:07
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 01A1739482B395D752C4945F8A2A626AED5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0F2E
Signing time: Sun 25 Oct 2026 15:01:14 +0000
Manifest this update: Sun 25 Oct 2026 15:01:14 +0000
Manifest next update: Mon 26 Oct 2026 15:01:14 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: FrRhrlmiQvLIMFWXQ+L0wiuoAG75fLtL2jhzkoEoWTk=)
2: UKN4qXdB5emZZX9TzM0PF4jJuRs.roa (hash: Y842Sm+wv4FkMHDbdNeBmo19SEMhJtIByCHRBpFd6qo=)
3: qOyavHaQUzWIgFJKhwDzN8qp-NU.roa (hash: 6+GcU7ai/o4JeNdvfA796blKNzslNJ8s8dxyOTcoPxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:94:82:b3:95:d7:52:c4:94:5f:8a:2a:62:6a:ed:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Oct 25 15:01:14 2026 GMT
Not After : Oct 26 15:01:14 2026 GMT
Subject: CN=6272ebf75ebf01916e24d9d573579c072f53ac07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:53:da:8e:ca:b1:d3:e0:4c:f8:f5:61:dc:92:
5a:28:86:45:3b:ae:ae:e0:85:60:39:49:65:a0:eb:
a7:c5:74:ef:d0:cf:a4:2d:66:f0:90:80:27:79:52:
0d:54:e1:43:0a:05:13:65:b6:de:04:ff:c6:c2:6f:
f9:0d:56:25:20:ad:57:64:6f:a8:1d:a0:7c:96:e3:
6e:7b:d1:fa:8b:a5:be:d0:7e:1c:bf:a7:03:31:5f:
41:c8:36:ed:0a:4f:57:c9:f7:2b:28:e1:c7:1e:4a:
50:bb:a8:00:c0:37:62:e2:20:03:d7:12:22:ed:54:
be:6c:0a:a2:69:39:0e:af:d4:7d:a2:a2:d3:09:16:
24:5e:20:80:c5:8e:b3:5c:15:99:15:2b:78:ea:2a:
ae:96:4c:f6:8a:78:e6:99:2c:12:1f:48:19:4c:33:
24:4e:c3:35:0c:68:c5:56:3b:24:21:12:e9:bd:00:
1b:27:ef:41:f0:03:33:e3:6f:e2:31:a2:47:7c:ca:
1d:36:ae:c2:00:f6:50:d6:c2:86:76:69:34:e5:54:
74:2a:bf:03:2e:57:bd:29:37:f0:17:8e:69:8c:4f:
e6:61:1b:30:92:67:57:3b:39:bf:82:5f:de:d5:a1:
fe:af:b4:f1:40:2b:e8:f2:a2:86:7f:7a:35:6f:cb:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:72:EB:F7:5E:BF:01:91:6E:24:D9:D5:73:57:9C:07:2F:53:AC:07
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:ee:a8:e9:5b:62:17:94:a1:b2:8a:db:7a:18:ec:c8:30:c9:
8a:24:e7:32:a2:54:0d:06:ee:c0:a8:88:07:2b:31:f1:87:a9:
25:82:2e:e2:c1:7b:96:7f:8d:d2:04:9f:a1:41:f1:63:fd:23:
a5:1f:0f:33:29:8e:28:6a:04:b7:f6:83:8d:c0:22:bb:e9:af:
6f:fb:c1:eb:c5:70:b6:7d:19:82:7a:fb:72:c5:b3:d6:7b:92:
fb:88:9c:50:9f:f6:76:59:93:cd:00:76:87:f9:ed:6b:c7:db:
79:28:a2:db:7b:38:34:07:49:62:0a:79:36:c8:63:75:86:00:
3b:93:f8:b4:0f:82:9f:cb:44:1c:df:eb:54:7b:26:a0:17:b1:
45:f0:f8:e8:f4:86:d8:46:41:db:6f:d8:cc:ce:11:df:17:68:
7b:22:fe:a1:85:a2:45:15:58:a6:3b:f0:69:ba:09:47:b1:e2:
76:3f:12:31:2c:b0:83:3b:20:f3:41:ad:ee:db:db:f7:0d:2d:
bb:f6:c7:b7:5f:82:d4:97:80:07:6e:fd:23:58:08:2e:d3:f2:
4a:3a:92:e1:33:9e:38:43:fb:37:f1:67:1d:dc:ae:35:8d:35:
bd:7e:1e:20:61:13:2f:29:92:c1:9f:fe:8a:cb:06:4a:15:57:
dc:2e:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:08:57 2026 by rpki-client