Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
File: QGuz4srXsQAlbhxKf1VbajjYdSY.mft (raw, json)
Hash identifier: r8/GCiuj1O9cvn+exaQf6AjbCI91bJGwtmDicPpgydU=
Subject key identifier: D5:DF:2D:2E:79:70:0C:C5:BA:BD:40:0A:22:43:16:2C:81:57:07:21
Authority key identifier: 40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
Certificate issuer: /CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Certificate serial: 01A15778F9FF4980F1DD2BDF18F30FC038AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
Manifest number: 0273
Signing time: Tue 20 Oct 2026 04:01:48 +0000
Manifest this update: Tue 20 Oct 2026 04:01:48 +0000
Manifest next update: Wed 21 Oct 2026 04:01:48 +0000
Files and hashes: 1: QGuz4srXsQAlbhxKf1VbajjYdSY.crl (hash: d+f2Fm9DtrITsW2VP9g5SPZ1B3stxmLyBZdsW20nFgc=)
2: QuYIuEWfuLxCBh6SczKlvzLc7R0.roa (hash: wq5LtQWkzD1IvS0cRF5e7YpZie3ZK8BoD748nc2SSUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:78:f9:ff:49:80:f1:dd:2b:df:18:f3:0f:c0:38:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Validity
Not Before: Oct 20 04:01:48 2026 GMT
Not After : Oct 21 04:01:48 2026 GMT
Subject: CN=d5df2d2e79700cc5babd400a2243162c81570721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:41:23:c1:e0:b1:26:1d:cb:43:b2:ea:c7:
20:df:65:83:98:1c:65:76:28:b8:6a:49:d5:1b:5e:
71:27:7b:8c:6a:ec:32:3a:7a:dd:52:69:c9:ff:83:
f8:2b:be:ab:e0:22:25:80:94:3d:c9:30:fa:5a:51:
a4:c0:ef:99:e0:2f:c9:12:5c:92:23:bc:bf:bf:68:
a8:a8:ca:c9:d1:1e:ef:d9:a4:64:9c:8d:cd:fa:7b:
2f:a8:37:d5:a5:74:f8:3d:68:90:06:28:d2:9e:20:
55:a0:34:e1:e7:37:27:45:10:ee:11:c2:ed:d7:dd:
a1:a3:2f:68:1b:53:a5:56:bd:9c:21:f1:f6:ee:af:
32:c9:09:ea:96:ba:18:96:ef:56:86:b2:51:e1:f2:
93:a1:8c:bd:b9:c5:d1:00:3d:10:8a:45:9e:da:73:
73:b2:07:6f:c4:12:dc:42:d9:56:4d:85:21:76:22:
25:5d:7c:7a:e7:3c:0d:f6:ba:7a:39:75:2f:06:64:
8f:8d:92:e0:be:de:e0:ff:7b:75:25:6b:4f:b5:b6:
af:37:41:80:bb:b1:82:b2:fd:4a:26:ef:b1:60:d1:
c7:d0:44:7c:07:e4:d3:a7:dc:9e:60:91:1d:7a:99:
72:36:f5:4b:53:6a:94:54:d7:4f:61:b8:f5:03:71:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:2D:2E:79:70:0C:C5:BA:BD:40:0A:22:43:16:2C:81:57:07:21
X509v3 Authority Key Identifier:
keyid:40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:66:dd:55:fe:87:46:ac:cb:b7:a1:c5:b2:89:ad:2e:c3:de:
3a:32:bd:db:81:9c:14:3a:79:1a:24:98:62:ef:27:3a:ea:b8:
fb:a1:29:66:04:f6:1a:29:61:63:c5:62:e8:da:e9:cd:f5:57:
d2:21:df:d1:00:58:d2:d6:9a:16:74:18:08:1f:4a:a2:25:a3:
a7:b1:d1:0b:c5:17:dc:89:da:5d:4b:85:43:d5:aa:60:a4:f2:
dd:c1:b6:49:b9:14:d3:78:51:46:b7:01:76:8d:1f:58:9e:f7:
55:e1:00:f3:53:ed:50:db:86:d0:15:e1:5c:43:87:a9:e5:67:
b1:c7:90:92:bc:fe:b0:65:40:fc:1d:2a:16:ec:2f:a5:bf:7b:
dd:a2:5a:bd:e9:0a:12:4f:a7:3f:5c:e9:7d:bc:6f:59:63:2b:
1d:31:ee:a5:84:35:5e:83:93:77:e4:31:b8:d7:d6:b5:e4:69:
12:32:d5:33:26:fa:55:d7:db:ee:b0:6c:fb:2a:3e:59:6a:b8:
82:6f:f7:1b:54:1d:09:8b:78:93:bc:84:b5:c1:83:37:ca:ce:
75:e9:4d:82:af:80:37:54:b7:a6:99:88:99:ae:8d:56:84:ea:
07:04:2a:89:6c:84:21:8f:6c:a3:1d:77:f6:5c:7b:67:cd:72:
22:94:a7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 13:18:53 2026 by rpki-client