Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
File: QcjQJBEIsB9etwj-i7uEfVOjDxY.mft (raw, json)
Hash identifier: lKtCYBF1fI7jo2oD8DmgMELqWAG4/dgPSIU8iYBN2gw=
Subject key identifier: B4:C0:AC:C3:D0:9D:A9:F0:AA:91:A4:8C:E9:A9:20:A3:DA:48:79:4C
Authority key identifier: 41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
Certificate issuer: /CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Certificate serial: 01A1740241B661AEC1E165C273AA2868B8E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
Manifest number: 1ABF
Signing time: Sun 25 Oct 2026 17:01:07 +0000
Manifest this update: Sun 25 Oct 2026 17:01:07 +0000
Manifest next update: Mon 26 Oct 2026 17:01:07 +0000
Files and hashes: 1: ALRri6kgiQCaJnYBd8e-iNH8nUk.roa (hash: bRi9PCHK9wO56WGyzaQUXDtECAlJgx3ISDb8+1dq0Jk=)
2: QcjQJBEIsB9etwj-i7uEfVOjDxY.crl (hash: mBpaplrBOFA/Ulg2sAq0DIHhdwxgFSdym9xoJXMcgWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:02:41:b6:61:ae:c1:e1:65:c2:73:aa:28:68:b8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c8d0241108b01f5eb708fe8bbb847d53a30f16
Validity
Not Before: Oct 25 17:01:07 2026 GMT
Not After : Oct 26 17:01:07 2026 GMT
Subject: CN=b4c0acc3d09da9f0aa91a48ce9a920a3da48794c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:31:08:ce:52:72:98:35:b2:4c:f6:a1:b2:c9:
6c:21:b3:5a:4c:f5:cc:94:c7:42:2a:6c:41:52:3e:
cb:07:71:ba:10:c3:11:9c:64:25:45:fe:6b:1e:a1:
ac:7f:f5:54:86:5c:de:6d:d9:3b:0e:dd:4a:23:73:
7c:0d:ad:55:a5:a9:ab:cc:a2:f0:17:ed:c5:a7:32:
ae:26:b6:a3:df:49:7d:bb:e6:98:78:03:0f:7b:43:
9d:08:fb:be:95:ce:5d:cb:33:33:7b:26:85:92:b3:
ee:25:8e:c5:23:11:34:ef:59:8a:e5:f3:56:4e:42:
97:83:0c:f4:9e:c6:45:b8:36:35:93:86:06:e5:49:
0d:e1:d1:4d:90:42:69:dc:e6:58:a8:f3:5b:c8:61:
d0:bf:90:98:a6:ae:cb:84:88:8d:47:97:d5:70:b1:
ca:05:d0:c2:25:7e:6d:9a:10:c6:8c:73:2b:c8:a0:
ac:f9:b9:55:10:42:99:6d:22:44:08:d0:54:ff:23:
9b:1e:7d:e6:02:e1:92:43:52:a7:75:52:bd:cb:44:
69:4f:c6:92:c3:96:ba:ac:1a:04:21:5b:5e:e9:2b:
83:61:33:78:9a:3a:df:fd:03:97:28:8a:14:67:26:
25:cd:ec:98:ac:81:2a:43:67:4b:8e:ce:1f:8d:eb:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C0:AC:C3:D0:9D:A9:F0:AA:91:A4:8C:E9:A9:20:A3:DA:48:79:4C
X509v3 Authority Key Identifier:
keyid:41:C8:D0:24:11:08:B0:1F:5E:B7:08:FE:8B:BB:84:7D:53:A3:0F:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcjQJBEIsB9etwj-i7uEfVOjDxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/fd7af2-5036-42ac-a3f7-d596ec14ee2e/1/QcjQJBEIsB9etwj-i7uEfVOjDxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f8:fe:ba:9a:76:49:99:fa:5f:97:24:d6:7c:9e:25:50:c4:
0d:23:83:07:c2:4a:94:31:d9:99:2d:59:63:23:56:a4:e1:3c:
ad:2d:8b:35:4b:d3:45:22:99:56:c3:e4:fe:3d:52:e6:1d:e7:
a9:95:b9:19:5d:44:f5:ac:5b:0b:96:e7:13:67:37:b1:d3:1c:
3f:79:30:10:e4:6e:ba:8b:4f:e6:76:a2:1a:d6:4d:31:53:c8:
3e:de:1b:f4:79:2a:8d:77:40:74:23:5d:e1:e7:a3:b5:f5:92:
ee:44:e2:83:55:5a:27:24:4a:9b:e8:2e:9d:e0:57:51:d3:9e:
a2:e2:53:97:0f:2e:36:de:ae:cc:7b:5b:0f:89:03:ae:09:dc:
76:7a:01:58:30:d4:c9:86:73:95:a7:98:9e:44:ad:8b:3a:8f:
1c:44:8a:b7:18:e2:a1:77:0d:00:b1:7a:2c:9d:87:4b:2d:7a:
46:f8:7f:35:92:bb:b3:c6:80:85:2b:5c:bd:8a:31:d7:ef:6d:
ee:d3:8c:8b:88:ea:1b:a1:cd:d6:cd:e7:41:3d:b5:0b:a9:af:
f9:5b:b0:90:85:41:1c:2f:74:42:31:ea:5b:32:28:b3:93:8f:
7b:36:0e:fc:c2:e5:5b:4f:e8:e6:44:42:fc:b7:69:66:ea:26:
e9:49:da:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:45:40 2026 by rpki-client