Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
File: QpNhzRgdhu9U6-L8kagOxTTOrHg.mft (raw, json)
Hash identifier: Xo1JGvHXFYR6+K3MvlM13eVFMx/Qns1qN1hpQt2onrI=
Subject key identifier: 35:56:79:04:0F:80:49:23:9E:C2:82:DC:6F:1E:35:DD:A7:CD:4F:28
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 01A17C28DC47D0954DBB5A9A1B1738903AD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
Manifest number: 0EF6
Signing time: Tue 27 Oct 2026 07:00:14 +0000
Manifest this update: Tue 27 Oct 2026 07:00:14 +0000
Manifest next update: Wed 28 Oct 2026 07:00:14 +0000
Files and hashes: 1: 9pGoDb8m8-uHunZG0g4IpC_J3W8.roa (hash: j9T9+HzYFR2vUjj6NG2JWZokXgG77nlwhtywobwQLLE=)
2: QpNhzRgdhu9U6-L8kagOxTTOrHg.crl (hash: C7j4/1QV9YkV8NBkkzwZzr47fc/VAxqvzwg7ottLRsQ=)
3: fdAWH39zdbtm7mMYQ8ChXiiwNho.roa (hash: DJA2F7Y08swfNI9bds3Jp09xBGdfNtIaDN7pjPNot9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:28:dc:47:d0:95:4d:bb:5a:9a:1b:17:38:90:3a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Oct 27 07:00:14 2026 GMT
Not After : Oct 28 07:00:14 2026 GMT
Subject: CN=355679040f8049239ec282dc6f1e35dda7cd4f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bf:9c:10:e7:48:ae:ff:5a:27:a2:60:d4:23:
e5:6e:9d:c5:59:c3:f3:51:8b:2f:d1:ba:c1:55:ba:
e4:1c:9f:3d:01:6d:74:a2:63:19:fb:f9:ba:bf:2f:
50:19:4f:fc:d7:5c:8c:c6:bc:05:8e:61:88:eb:cc:
1d:24:27:db:bb:f5:99:bf:0a:c8:2f:62:0b:dd:2f:
bd:5f:d6:e5:de:6b:2e:57:d1:a1:f5:5e:62:60:4c:
03:85:e5:a6:ed:88:13:85:b5:77:99:00:3b:b9:01:
f1:cb:2c:59:b4:64:0d:6e:8c:b4:69:f5:da:ab:b8:
1b:ca:70:af:f1:9f:74:0b:6f:54:49:d1:ed:35:2a:
35:18:a8:0f:43:fc:6d:ff:b8:fe:a2:97:8b:68:a0:
e9:83:6d:b6:42:b5:5e:5f:0d:b2:9d:73:6e:79:8d:
1b:46:ee:4b:17:24:dc:d7:f7:0b:f7:dd:e0:71:01:
e7:2f:d6:c5:0c:80:5a:6b:5b:04:61:96:bf:28:5b:
32:4b:bc:bf:76:9e:e1:f0:88:32:48:39:ff:7e:20:
d8:c5:d6:04:04:cb:75:ab:0c:15:31:cb:87:a3:c0:
f4:13:d2:b8:f2:49:ff:b1:de:03:ea:26:33:0c:a2:
9b:30:87:65:77:e7:02:17:82:8c:63:19:5f:97:73:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:56:79:04:0F:80:49:23:9E:C2:82:DC:6F:1E:35:DD:A7:CD:4F:28
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1c:0c:fb:a8:6e:09:2d:c2:0c:7a:8c:a3:96:a1:97:66:71:
6a:93:95:d3:27:29:42:0b:ff:9e:71:4c:5a:a0:a0:7a:88:cd:
80:4c:54:3b:04:07:97:67:1c:d3:f8:f0:d4:31:3c:ca:07:35:
a6:ac:29:ff:09:85:f4:b3:56:0d:63:67:00:57:6c:11:20:04:
20:f4:f4:24:27:b7:30:8e:b1:ba:e9:96:39:76:75:23:b9:14:
2e:ed:92:22:95:1f:3b:7c:86:1b:03:c2:37:ca:d8:62:2f:cb:
d1:6f:c3:9e:0e:04:75:f1:7a:0b:c4:87:d3:a7:5c:4b:25:08:
2b:2d:6e:8d:c7:41:0e:fe:83:e4:e8:a7:0f:25:48:9c:e0:53:
a3:55:6d:4d:5a:fb:0e:50:c0:48:88:66:f2:e2:a5:7f:30:f9:
e4:fc:3c:8b:ae:44:4c:f0:ab:a5:5b:57:4f:82:87:1a:7e:98:
f1:07:0d:ee:0a:c8:a4:60:36:01:19:31:89:a9:81:e1:af:db:
f6:13:0e:78:8a:cc:79:31:b3:09:4b:88:22:a6:d7:97:e3:4d:
cd:2b:15:f3:a1:f1:42:bd:9a:54:07:94:98:73:ea:63:7f:86:
c6:fb:e1:5d:49:07:a3:f9:9a:65:f4:45:0e:00:a9:0a:48:3a:
2a:e5:e9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:51:15 2026 by rpki-client