Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: J30XF7/HOWdSpFEHbKhhU352xUyc2i5aHN9E8/oQ/9Y=
Subject key identifier: 00:A3:BB:D5:0C:05:B4:6E:0B:54:DC:F2:34:44:AB:2A:71:A5:9D:5B
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 01A17FCF2EE852A497522CAF92E74A853C00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0DA8
Signing time: Wed 28 Oct 2026 00:00:46 +0000
Manifest this update: Wed 28 Oct 2026 00:00:46 +0000
Manifest next update: Thu 29 Oct 2026 00:00:46 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: PYNFzJgbaowajiF26Edhk4ns/w9ZV/y+SxLCLihLll8=)
2: jS-v8sE_nNDS2wE29fkwjQ61v88.roa (hash: Flk+FfCfxIzDWzTQRWNpdyzzfWx1artWupYvhrPXQYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:2e:e8:52:a4:97:52:2c:af:92:e7:4a:85:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Oct 28 00:00:46 2026 GMT
Not After : Oct 29 00:00:46 2026 GMT
Subject: CN=00a3bbd50c05b46e0b54dcf23444ab2a71a59d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:d4:15:e3:48:81:1f:4b:0c:8a:95:41:90:
4e:ce:62:96:3d:5f:51:96:a8:a4:61:0d:39:1a:fe:
ec:6e:9c:2f:5f:cc:7f:58:c4:98:6a:88:fd:7f:91:
85:e9:bb:45:80:c6:d2:82:1e:6b:c9:c6:8f:2e:d8:
af:57:68:d4:9e:e2:b1:8e:51:aa:b0:49:0e:aa:31:
75:64:b3:e2:30:2b:68:66:00:00:15:36:8d:44:65:
c4:f5:c5:b2:d6:21:18:03:20:df:01:bc:fa:75:ff:
23:6e:64:da:8a:6b:c7:5b:d0:89:84:fc:b1:a2:89:
63:39:36:1f:bd:eb:d6:c5:9a:37:98:18:8c:b9:3f:
2a:95:fd:f2:59:5a:69:3a:55:5d:06:54:a3:73:75:
57:c0:df:67:1c:8c:dd:82:ca:47:f0:8a:c7:63:cd:
e0:45:15:fa:cd:a7:eb:d9:b0:ad:6a:9e:bd:5e:6a:
d8:93:71:ca:d7:5c:b7:ff:a7:6a:e5:8e:e9:58:8a:
f3:64:b1:0f:de:1a:96:9c:e6:fb:e9:1f:c3:65:48:
0a:4f:cc:fc:be:1c:cf:9b:60:a3:a0:04:af:3b:c9:
ab:c8:66:b9:94:2e:69:98:f2:e8:bf:cb:80:fd:8f:
e3:9f:96:6b:07:98:a0:af:5f:87:85:a6:20:93:c2:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A3:BB:D5:0C:05:B4:6E:0B:54:DC:F2:34:44:AB:2A:71:A5:9D:5B
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:6f:d0:3b:b3:1d:5e:48:35:8a:62:e0:11:64:27:94:94:ad:
7a:b0:e7:3b:c8:47:56:3e:cc:58:e3:bf:b5:9a:be:fd:3a:29:
8c:38:9a:e9:13:91:e5:94:3e:da:47:ba:9b:61:6b:a2:eb:08:
b0:77:75:a2:3e:f9:cf:dd:e5:a8:c5:eb:2a:52:86:c4:b0:58:
77:f6:b8:65:e6:a9:98:b8:59:1c:72:c5:c1:94:83:61:bb:41:
37:78:eb:a5:87:89:c6:2d:4c:0b:f9:69:a3:d3:b3:4c:84:06:
cf:1b:28:65:e6:23:56:f1:4d:76:38:18:fc:25:e0:5c:31:b2:
72:55:77:9c:69:1b:b1:e5:dc:22:ed:d1:af:3f:83:3d:10:f7:
15:4f:2f:00:5d:3e:ed:70:a8:f0:eb:5e:a3:20:0a:72:39:33:
44:4a:02:d0:3f:c2:b2:19:9d:d4:d8:33:ce:b5:0f:fe:ea:e8:
c7:0b:63:7c:e0:31:88:93:94:16:8a:07:1e:69:29:bc:b1:f8:
d4:d8:a8:53:d9:03:98:d1:22:4a:7b:a5:c2:78:ed:54:bc:73:
19:ce:9a:44:42:6c:51:24:40:02:d6:e6:40:d9:0b:08:ed:ba:
08:ab:02:f0:2f:e7:42:ca:d3:62:05:fb:44:3d:71:f6:29:8e:
11:1b:e5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:01:58 2026 by rpki-client