Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: OUXt6UEmcmE99CvTjkvvg9OY3wEQ5YiD+sEnnZ5l9pw=
Subject key identifier: B0:C1:B3:79:05:18:F1:2E:D3:CE:6F:E8:96:B5:93:F1:F5:3F:9C:B2
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 01A17D73721E395A7600273AABED223918EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 1A1A
Signing time: Tue 27 Oct 2026 13:01:20 +0000
Manifest this update: Tue 27 Oct 2026 13:01:20 +0000
Manifest next update: Wed 28 Oct 2026 13:01:20 +0000
Files and hashes: 1: 4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa (hash: b9MP0rdkmPkjLsxKnX60/w1PVwahqRg3qlsqfmJHgCk=)
2: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: cBT90UO9aU6rEjovUekPfWyjX4YJFGG5/ppyg0DC/P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:72:1e:39:5a:76:00:27:3a:ab:ed:22:39:18:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Oct 27 13:01:20 2026 GMT
Not After : Oct 28 13:01:20 2026 GMT
Subject: CN=b0c1b3790518f12ed3ce6fe896b593f1f53f9cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:9e:65:0b:6d:b0:a2:fb:f9:14:1e:4e:7f:
5d:00:bb:a1:43:fb:de:b4:62:ff:e7:b7:2e:45:46:
4e:23:ea:6f:c3:3d:39:71:0f:b2:00:b2:47:18:86:
c2:d1:a0:b2:f2:4d:e2:a8:22:6e:1b:25:71:96:77:
80:07:d2:39:7b:05:06:a8:be:99:76:dd:a5:5a:ca:
f6:4c:53:1d:a1:df:10:67:63:a1:73:47:63:39:fa:
a4:a9:64:d2:91:4e:16:14:2a:24:49:05:ec:5b:2b:
e5:72:d8:5d:10:14:59:de:a6:82:35:2e:38:3a:cd:
22:64:ee:b4:fe:74:b0:6e:c9:ad:62:db:46:50:0d:
32:da:9f:59:73:d6:ab:21:d4:19:a1:64:39:b0:0a:
a5:9b:7f:78:ee:e9:f4:34:21:0e:4c:d6:a1:0a:8a:
d6:10:97:a1:89:53:2b:0d:67:14:3d:16:b9:05:30:
c3:e8:ab:f7:b9:b0:7c:52:33:be:43:38:db:b3:6c:
68:61:4b:02:19:ab:2a:df:38:2c:54:4a:ee:be:76:
b5:4d:ac:d2:34:e4:be:28:43:18:e6:0b:86:c7:68:
5d:34:a6:4d:20:0c:18:11:69:33:1e:53:00:a8:ac:
9d:4f:b1:75:6c:e2:0b:43:a1:bd:6b:e6:a1:b9:c0:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C1:B3:79:05:18:F1:2E:D3:CE:6F:E8:96:B5:93:F1:F5:3F:9C:B2
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:bf:a6:33:2d:4c:cf:bf:6c:ab:ce:3e:1c:1f:d7:7a:85:c9:
b3:7b:77:35:70:f8:a9:a8:a7:1a:7d:09:a2:a9:af:ed:04:67:
87:5e:14:a7:a9:52:01:f9:d3:92:41:68:3c:2b:51:b6:ac:50:
00:c7:d2:79:34:62:cf:14:7d:e7:7f:1c:98:10:32:74:c2:49:
0b:d6:b8:63:62:dc:7d:bb:af:dc:7e:bd:a3:12:dc:9d:ae:2f:
5e:0a:43:18:f2:05:ca:a7:78:ab:78:3b:35:32:92:54:86:02:
e3:ec:5a:50:ea:6d:e3:e7:bc:55:82:f4:a1:48:b3:11:72:e8:
f8:8d:4d:5c:52:70:00:e9:85:12:22:7b:dd:82:a5:a7:1b:4a:
3a:26:73:94:c1:eb:35:38:54:71:33:5e:f0:42:00:4b:58:7c:
33:34:56:52:f2:0f:45:0d:2f:56:b1:be:e2:8d:e6:94:89:58:
5f:7d:47:de:89:bd:31:4f:14:85:3e:c8:14:d5:4b:93:3c:3d:
e6:40:2c:d9:ec:d2:00:83:aa:a6:37:cd:b5:1f:98:cb:81:ee:
cd:f8:52:c9:a2:dc:53:bb:1e:83:86:4f:0e:f1:ee:c2:c9:0a:
ae:12:0b:51:78:15:88:2d:e3:59:c4:e2:4d:fc:d3:f8:74:4c:
56:32:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:02:32 2026 by rpki-client