Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
File: QGuz4srXsQAlbhxKf1VbajjYdSY.mft (raw, json)
Hash identifier: NnzJBa+KRLMTmZjfmU/4mLgDc6BhSbGBen2U+TvxYw8=
Subject key identifier: F1:71:A3:42:A6:F1:85:B6:81:9F:71:5D:32:91:77:66:9A:01:2D:31
Authority key identifier: 40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
Certificate issuer: /CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Certificate serial: 01A159670E6802CEA24F4669CC8E6E6D96F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
Manifest number: 0274
Signing time: Tue 20 Oct 2026 13:01:28 +0000
Manifest this update: Tue 20 Oct 2026 13:01:28 +0000
Manifest next update: Wed 21 Oct 2026 13:01:28 +0000
Files and hashes: 1: QGuz4srXsQAlbhxKf1VbajjYdSY.crl (hash: dZR7c0na72qSPIV+tkjXN8b0oBE1ewPWQgRUl9Dxkt0=)
2: QuYIuEWfuLxCBh6SczKlvzLc7R0.roa (hash: wq5LtQWkzD1IvS0cRF5e7YpZie3ZK8BoD748nc2SSUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:67:0e:68:02:ce:a2:4f:46:69:cc:8e:6e:6d:96:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Validity
Not Before: Oct 20 13:01:28 2026 GMT
Not After : Oct 21 13:01:28 2026 GMT
Subject: CN=f171a342a6f185b6819f715d329177669a012d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:8f:94:93:36:c9:c7:c9:ee:75:3d:fd:e8:
80:ea:ef:85:06:7f:ba:ba:87:b4:a0:76:fd:75:29:
76:59:f0:a1:a1:9b:75:97:32:1a:b3:8d:52:39:23:
e4:13:12:20:43:f7:66:9b:d2:14:27:56:4e:1c:b0:
87:48:02:8e:fa:ec:aa:0c:05:47:ea:98:89:da:f7:
93:30:ba:ab:c2:41:af:a4:12:96:27:30:da:b9:42:
20:c4:d0:51:40:fa:23:b9:00:5e:e7:79:8e:e0:dd:
c3:68:f6:d5:26:39:6c:02:c0:84:1f:7f:55:be:c9:
63:96:a3:f3:60:2c:e0:01:e2:3d:23:6a:de:e5:2a:
c9:6f:b9:94:da:44:4a:c6:ac:ed:89:31:5d:a2:d0:
a1:e2:db:85:20:74:e2:0b:ec:8d:fb:5e:0c:cf:93:
dd:e0:c7:ad:bc:ab:23:60:98:2a:42:93:d3:0d:36:
d6:1f:1c:1f:e6:b4:99:1a:c9:7c:9b:7d:b9:6c:d7:
b7:af:38:9b:81:fa:d4:c2:a2:8b:59:32:3e:11:66:
7b:43:cd:79:9b:d9:78:8b:31:87:0d:e2:cd:b6:13:
d7:44:90:5c:47:4f:67:7a:69:a7:f4:c6:e3:6a:a4:
57:c1:af:ef:86:f8:b0:15:da:c2:af:52:60:c4:fb:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:71:A3:42:A6:F1:85:B6:81:9F:71:5D:32:91:77:66:9A:01:2D:31
X509v3 Authority Key Identifier:
keyid:40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:05:70:37:6e:c8:dc:27:30:c2:fd:7e:a7:86:f0:a2:cf:56:
f0:77:4f:2e:bd:98:6e:77:80:0e:e5:3a:9e:83:34:a8:b2:41:
e6:0e:57:d6:44:ad:a3:d8:0a:63:62:c8:e7:06:c7:bf:cc:a2:
59:df:cb:98:d6:69:ec:7b:9e:91:4f:6f:59:24:1a:97:cf:3c:
f0:94:76:e6:5e:ff:06:1b:8d:ec:57:a1:24:d4:71:83:2b:b3:
72:4b:e2:b4:86:34:54:8c:65:a1:3a:8b:b6:75:d7:9e:f3:58:
b9:19:5c:84:1f:60:49:b5:2f:a3:37:35:6c:d8:ef:aa:1f:a4:
b0:fa:24:d6:e3:59:47:ec:a8:8c:4f:dd:3e:46:fb:44:98:84:
81:a3:cc:bc:a6:cb:d1:04:59:73:80:26:ca:b7:87:db:cd:18:
b4:13:81:c3:1b:ac:40:51:e7:84:41:eb:2d:49:c3:d7:9d:08:
a9:bf:3f:c9:89:50:de:a0:35:d0:81:2d:41:74:b0:0e:68:39:
0d:63:88:82:d3:1c:68:84:16:ec:d5:aa:ec:42:05:94:3d:b4:
0c:b6:10:14:20:47:6d:15:5b:66:9f:ec:80:f1:de:25:6b:7f:
9a:af:e7:ae:e4:89:73:79:c7:3c:cb:77:38:43:32:fa:54:3f:
03:e7:65:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:20:15 2026 by rpki-client