Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: Jj0uvfK2tTZ4VygbQxiiexd3tppp/UAZQEAujXc8rb4=
Subject key identifier: E7:B9:29:E6:92:50:B9:A4:30:AC:39:BC:43:F9:E3:14:50:FC:F1:CC
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 01A18150575AEA6BE31444F876B3A4AB7CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 1A1C
Signing time: Wed 28 Oct 2026 07:01:28 +0000
Manifest this update: Wed 28 Oct 2026 07:01:28 +0000
Manifest next update: Thu 29 Oct 2026 07:01:28 +0000
Files and hashes: 1: 4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa (hash: b9MP0rdkmPkjLsxKnX60/w1PVwahqRg3qlsqfmJHgCk=)
2: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: dN0b4mqkyfmhzmb6igsDTlJ4zpmPihxya9jdBLAVl8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:57:5a:ea:6b:e3:14:44:f8:76:b3:a4:ab:7c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Oct 28 07:01:28 2026 GMT
Not After : Oct 29 07:01:28 2026 GMT
Subject: CN=e7b929e69250b9a430ac39bc43f9e31450fcf1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:02:08:89:96:8f:e9:ca:3e:c7:1c:f0:29:bf:
c5:3c:06:26:9e:5d:c4:03:b3:f6:28:84:1f:76:62:
1d:5c:82:27:29:18:92:ac:b5:25:5e:09:21:38:61:
0d:f1:86:c8:cf:48:d3:42:1f:af:a5:79:ff:a4:4a:
39:25:a7:07:69:4d:fa:6d:eb:30:9c:bc:bd:8e:09:
fa:5b:94:e8:22:6c:46:f9:a3:3d:b8:f1:a1:fd:75:
9f:8f:6f:5f:04:20:b8:ea:45:73:84:7b:d7:6f:c4:
e0:6f:2c:70:d8:0a:8e:8e:74:a9:21:1b:b8:5d:3b:
a9:0b:ee:84:69:ad:62:03:ef:2b:db:c0:8c:15:ba:
84:00:2a:b9:12:00:3f:9a:3f:61:02:6d:10:89:bb:
9f:cc:63:fa:d6:48:0b:02:6f:a9:4e:8e:55:16:d7:
28:82:97:fc:53:e0:b5:dc:34:f2:f9:46:73:9a:de:
c8:67:d2:06:f8:d9:2a:da:bf:d1:46:d4:79:ff:af:
d1:1b:93:bc:c0:7e:25:67:96:8b:ce:3d:c9:ea:47:
4d:ce:cc:f4:ca:96:3e:20:38:33:f0:1d:68:54:53:
f6:d0:09:13:55:23:84:81:14:cb:20:e6:ec:f9:93:
46:6f:91:0b:4f:f0:57:06:43:a0:85:60:51:15:74:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B9:29:E6:92:50:B9:A4:30:AC:39:BC:43:F9:E3:14:50:FC:F1:CC
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c0:2d:26:84:7c:89:94:33:f2:59:66:a0:37:c2:a4:10:f0:
2f:15:3d:68:25:58:80:02:79:fb:99:47:c6:65:f5:c1:14:d9:
ff:f6:78:7b:e8:85:30:fa:d8:6c:19:fb:2c:b9:11:3c:ea:0a:
48:99:d9:b9:81:32:25:87:7b:e9:58:72:68:d0:e0:da:21:fd:
f8:c6:62:9d:8b:25:ce:ee:16:62:36:59:a2:c9:f7:00:a0:a9:
6a:ac:92:f6:74:34:80:60:85:f4:27:51:be:34:7c:6a:f9:a4:
dc:18:d6:c0:64:35:59:2b:55:71:3c:45:18:08:07:a4:60:5a:
e7:06:bf:39:9a:ef:ea:78:e2:9b:75:7e:0a:9f:8e:fd:c2:76:
5f:17:76:45:13:41:57:15:f1:79:29:c9:33:cc:e7:5c:6b:13:
b3:d7:c6:9d:71:75:fb:fc:4f:e7:d9:21:87:ca:cd:93:57:59:
b3:b9:77:14:e7:5f:a1:7a:14:ce:a1:e1:18:96:cf:cd:15:1a:
9c:b1:ad:75:cc:48:db:37:87:ce:1b:ce:f9:38:2f:11:c3:e4:
92:f1:32:02:0b:ed:7b:76:68:4e:e5:c7:0a:66:01:c5:22:c5:
54:d2:7a:89:9b:e5:53:0b:e9:25:73:d9:22:15:5e:df:29:49:
07:d9:73:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:39:47 2026 by rpki-client