Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
File: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft (raw, json)
Hash identifier: 4vVZbfupugGUtuAx1oHbqQ1O3/jxQ6UcfVyt7CETu2s=
Subject key identifier: 18:2C:BC:CF:27:04:E8:40:4F:89:80:66:77:8B:CA:5A:8C:F7:55:CD
Authority key identifier: 42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
Certificate issuer: /CN=42432a319f54b058372fd32528eae51fc90c15b2
Certificate serial: 01A1833E2A7B189EBB2F48DE749AC5E0DB1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
Manifest number: 0778
Signing time: Wed 28 Oct 2026 16:00:51 +0000
Manifest this update: Wed 28 Oct 2026 16:00:51 +0000
Manifest next update: Thu 29 Oct 2026 16:00:51 +0000
Files and hashes: 1: 1V2N8PP3W6pg2dn86MMXMCFavbg.roa (hash: 6GyZmIlJdg5hYdJcaopJTcDcXE9f3YbiakWtgZ82HCg=)
2: QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl (hash: PP7fToTWecPg+eS/41kZRvKj81r5Yb3JMmy9W5Qjcwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:3e:2a:7b:18:9e:bb:2f:48:de:74:9a:c5:e0:db:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42432a319f54b058372fd32528eae51fc90c15b2
Validity
Not Before: Oct 28 16:00:51 2026 GMT
Not After : Oct 29 16:00:51 2026 GMT
Subject: CN=182cbccf2704e8404f898066778bca5a8cf755cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:17:01:58:e1:cf:0c:f8:fd:21:5f:13:be:e2:
29:5d:bc:2b:d8:ce:a4:1f:cc:48:ab:6e:51:74:b3:
7c:fb:17:61:f8:f5:60:f2:c9:b1:70:80:d2:f3:15:
ba:02:fc:bb:9e:5f:b7:e5:e1:35:08:bb:cc:36:c9:
ac:ca:fc:f1:0e:b7:33:34:e0:8e:29:09:69:ae:8e:
9e:b4:dc:76:eb:b3:ac:8a:fd:9d:b4:84:df:da:87:
e7:d3:43:6b:7f:2c:fa:61:63:51:66:10:34:91:d7:
5e:e8:16:78:53:83:fe:90:2c:95:17:e9:bf:27:3d:
49:e3:8b:43:23:9a:94:8c:6f:ce:8f:65:55:36:01:
9d:de:c2:f6:cf:67:80:a7:fe:18:90:ab:50:a6:23:
e6:7a:b1:de:43:ce:05:89:aa:91:58:aa:b1:4b:ee:
89:82:8a:10:59:67:10:d6:07:93:9d:be:8f:80:e0:
3c:74:85:4f:50:6c:ad:3e:ba:29:5a:5b:45:d9:13:
26:6d:4d:bb:cd:99:0e:04:6d:fa:f9:f4:96:d2:6b:
5c:9e:91:7c:1d:25:85:e5:a5:39:fd:75:3b:5b:3e:
02:e7:d0:31:3b:51:84:cc:47:f3:48:61:9c:f6:c1:
4b:3c:d7:8e:e4:93:09:20:e4:8f:c8:12:3e:5c:21:
df:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2C:BC:CF:27:04:E8:40:4F:89:80:66:77:8B:CA:5A:8C:F7:55:CD
X509v3 Authority Key Identifier:
keyid:42:43:2A:31:9F:54:B0:58:37:2F:D3:25:28:EA:E5:1F:C9:0C:15:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/7ab79c-9dff-4a5d-ae83-131dc2ba2ec8/1/QkMqMZ9UsFg3L9MlKOrlH8kMFbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3c:11:19:82:f4:5e:a2:f3:a9:2d:e8:80:7d:32:13:52:74:
38:f3:1a:99:ef:a3:d1:65:23:45:ba:a0:bc:31:e3:37:84:c4:
ad:e5:ed:b4:bf:51:e3:72:ab:60:f0:53:37:b8:95:6f:3a:a7:
74:5f:25:62:ed:93:5b:94:b2:0b:4a:15:43:7a:49:97:78:7c:
19:63:c8:3c:59:09:5e:43:bc:e4:3b:8b:37:7f:e6:aa:e2:3d:
f8:2b:88:00:76:8d:6d:b1:0d:bb:ae:0b:59:1a:03:b3:77:54:
cc:de:b9:06:e9:9b:b5:74:2f:02:d6:5b:31:5e:eb:b1:95:cd:
69:5a:a0:1b:71:2f:11:69:49:96:3c:db:48:41:82:e4:84:e1:
5a:fd:8a:28:47:22:6f:ff:38:0f:92:f0:93:84:f5:b7:2a:f5:
e6:f1:d2:f5:42:f0:b6:90:36:f0:3d:de:00:63:a6:67:4d:52:
05:83:fb:0e:ae:bd:d9:e6:94:cf:f9:59:ed:8b:8a:04:ec:8f:
03:78:16:4b:a8:c1:33:42:76:a4:9c:95:4f:ed:e4:d1:3f:d1:
97:2f:0c:3c:35:e1:31:3f:a2:e2:03:21:92:44:39:9d:72:4f:
d0:ea:c4:07:9d:ec:05:f5:78:f8:37:64:60:3d:72:95:bd:19:
11:9d:ab:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:21:45 2026 by rpki-client