Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
File: QBY91EFO8-eS4AUB80786UQKnE4.mft (raw, json)
Hash identifier: G07yplUhep+U2+VwylXrxyfsUbABkkjj/KbWeCyilqI=
Subject key identifier: EC:20:C8:70:0B:9E:09:47:D8:52:2C:AE:2F:7B:79:47:27:39:35:25
Authority key identifier: 40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
Certificate issuer: /CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Certificate serial: 01A1889BB10A5188FD26ED28D959BAD8301B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
Manifest number: 1ACD
Signing time: Thu 29 Oct 2026 17:01:07 +0000
Manifest this update: Thu 29 Oct 2026 17:01:07 +0000
Manifest next update: Fri 30 Oct 2026 17:01:07 +0000
Files and hashes: 1: QBY91EFO8-eS4AUB80786UQKnE4.crl (hash: eHJI/B6cZqI8236XlgXTsQj8qrcXFXcvheb/fKUh0M0=)
2: XVQmZyZgIfyuS-i9_dYYU_5CGT0.roa (hash: BPYDVshqMOmc9U1pef4+DfyaziPWsnfi+uZonkxHf4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:9b:b1:0a:51:88:fd:26:ed:28:d9:59:ba:d8:30:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Validity
Not Before: Oct 29 17:01:07 2026 GMT
Not After : Oct 30 17:01:07 2026 GMT
Subject: CN=ec20c8700b9e0947d8522cae2f7b794727393525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:74:55:6b:fb:cf:ab:57:35:37:bb:8b:c1:
21:a8:d4:ec:55:2f:42:90:a9:1d:ce:ab:bd:4b:6b:
c4:7d:10:26:1b:00:dd:1f:30:9f:aa:85:26:35:fa:
54:f2:fd:eb:b5:31:6f:f9:33:2d:a5:37:fd:a7:88:
6e:90:fd:5b:e0:e7:ed:80:8d:a6:0f:4d:2d:36:c6:
9a:ff:3a:c2:e1:b3:fc:96:9f:90:49:70:23:14:50:
1a:8d:9d:aa:91:96:30:7f:95:da:12:fc:9b:58:e9:
37:4f:a1:14:65:fd:18:cb:0b:a9:a2:3a:e5:66:15:
b5:4d:e8:30:65:dc:dd:b3:b4:07:f4:ed:71:83:c0:
ad:bf:4c:ea:d3:d9:37:b2:f8:84:3c:1e:aa:cd:32:
ef:7a:70:c5:96:c5:19:00:11:cc:94:ea:e7:2a:5e:
30:f6:d7:ab:f5:a3:02:1f:6f:68:28:81:1c:fd:8f:
98:f4:e2:d3:ed:65:06:20:e3:24:9d:96:1c:1b:c6:
b4:e3:fc:4f:55:92:82:86:a3:31:17:6f:22:38:1e:
02:ae:4b:1a:d6:97:e7:81:d0:ad:9d:c4:39:1a:5b:
57:60:22:2b:0d:98:1f:42:11:c2:6c:8c:6b:97:6e:
e0:ba:97:7c:af:cd:30:ff:fb:40:b1:9a:02:df:1e:
c8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:C8:70:0B:9E:09:47:D8:52:2C:AE:2F:7B:79:47:27:39:35:25
X509v3 Authority Key Identifier:
keyid:40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:e8:c2:26:3d:80:49:6f:35:a3:be:28:1a:3b:07:29:97:05:
12:15:b7:f7:fb:25:8d:7f:80:5d:e1:17:86:f5:57:6e:a2:0f:
30:61:73:d7:53:39:7a:46:3b:6f:68:2b:d9:da:7e:53:fa:16:
f4:0c:d9:b4:24:ef:9e:ec:4d:f3:d9:1f:ca:0a:46:bb:d2:5b:
59:85:99:e1:8e:e1:d3:50:dc:33:b5:0a:b9:83:2d:d3:3b:18:
ce:30:69:67:fb:9b:36:09:bd:11:8f:9f:3f:32:ab:b8:65:65:
fa:a2:41:57:8a:22:2f:dc:e4:c5:ee:22:19:7d:ce:1c:1d:62:
5d:97:64:35:f5:4c:ed:1b:52:2a:1d:90:c5:8f:fe:1a:fa:82:
77:35:f5:aa:b7:87:58:b5:79:63:e9:2e:b7:ba:1c:e3:e6:a8:
13:aa:e9:a1:74:9a:9d:ad:c0:75:c6:84:80:44:36:cc:cd:ab:
e6:b8:59:f5:68:52:cd:cf:44:0e:77:ea:36:d5:79:de:c3:36:
91:81:ba:03:25:5a:58:7c:a7:72:13:0d:d9:e1:d0:30:c0:7e:
b6:ac:b5:b5:ec:63:20:5f:49:f0:17:87:d1:d5:fb:21:1c:91:
9f:73:34:da:a7:e5:9b:07:40:a4:2a:63:8b:9f:30:db:e1:67:
86:0c:5e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:54:24 2026 by rpki-client