Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: vCAqTtYuBYYoX6dKGJ7E7ZbV9SDCbDmz+OIBqiIGoM4=
Subject key identifier: 23:00:C7:11:13:21:B8:67:A8:B5:D0:D3:DE:0C:89:21:AB:95:18:93
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 01A17FCFECEFBBFBF20B89890B02E210C22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 1ACB
Signing time: Wed 28 Oct 2026 00:01:35 +0000
Manifest this update: Wed 28 Oct 2026 00:01:35 +0000
Manifest next update: Thu 29 Oct 2026 00:01:35 +0000
Files and hashes: 1: 7kcTDPtrsAccIFtq7M7wM_oA42o.asa (hash: jfkqgTwMmeuO5g0zs7rfVVOHUNY0M+VynB68Y9zU2I4=)
2: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
3: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: ZTeBEQQr0EMsMtUBRSv1FlnUD5k0J4hoE2bCVIRDKo0=)
4: kKPUL3XL5kfL6DXSXiFlJFUqzf8.roa (hash: MqfgECWtHRXZOaXWHtLXuKHhrTsYhuIDOqY4suEA3jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:cf:ec:ef:bb:fb:f2:0b:89:89:0b:02:e2:10:c2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Oct 28 00:01:35 2026 GMT
Not After : Oct 29 00:01:35 2026 GMT
Subject: CN=2300c7111321b867a8b5d0d3de0c8921ab951893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:f4:a0:f4:b7:01:71:28:3f:a9:30:63:69:
06:7c:23:c4:a3:6d:f9:f7:0d:c0:0b:15:ce:95:87:
3a:df:91:4c:f8:41:0c:d1:6b:83:ea:25:a0:6f:87:
73:45:25:9e:6f:80:93:13:92:1a:e8:d7:be:49:48:
98:16:39:b6:18:1d:35:cc:0b:70:19:a6:73:59:ba:
96:c8:2c:40:f6:b3:63:28:1d:16:13:12:8a:4b:98:
49:78:2e:4e:26:5f:ef:b9:f3:50:48:fa:84:6f:f3:
58:8f:fd:fc:9c:83:dc:ea:2d:76:07:d5:77:aa:b9:
2d:70:1b:7b:42:af:93:67:be:de:7e:3d:17:a8:5c:
01:04:c9:34:00:1f:9f:90:51:f1:86:25:b5:14:cf:
a0:a7:e2:39:f4:38:45:23:de:ed:84:0a:fc:bd:8a:
27:0f:0b:53:75:27:85:c9:36:c2:f7:32:7b:ee:62:
59:1c:26:66:a5:1f:17:0f:83:ce:e9:19:02:20:1a:
be:29:31:9e:ae:fb:ab:0f:17:2a:19:31:af:21:26:
a6:a4:6b:1a:cb:1f:cc:46:a9:ec:c1:63:91:7d:2c:
d8:34:8b:fb:df:ac:18:61:b5:83:de:ea:04:26:c6:
13:dd:e6:df:42:84:74:51:75:bf:5e:da:96:71:79:
72:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:00:C7:11:13:21:B8:67:A8:B5:D0:D3:DE:0C:89:21:AB:95:18:93
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1d:62:c0:39:a5:d0:a1:83:0d:56:b3:f4:1d:23:a0:71:6c:
de:50:67:2b:85:15:99:cd:a6:48:2a:9a:1e:cc:82:de:82:82:
eb:80:e0:6e:ac:62:3f:2b:f2:1a:11:07:a6:5f:d2:60:24:ae:
ca:86:f9:82:5a:c2:eb:fa:40:b8:b2:22:32:9c:9f:a4:2a:e7:
cd:5a:d8:da:16:f7:fe:83:4d:8d:17:5e:f5:78:56:fa:1a:f2:
9d:1c:41:4a:50:df:cc:5c:52:2c:37:b3:90:cf:9e:ac:98:87:
b3:23:6c:7d:2f:8d:7f:7e:fb:a8:15:2c:3b:c8:86:d3:a2:e9:
05:33:7d:83:b4:5b:a9:3f:ab:45:86:81:33:98:e4:10:bc:9a:
57:69:b1:48:2f:74:b3:f2:03:45:79:15:6c:d7:df:1f:9b:28:
40:44:b6:e6:e6:52:9d:af:0a:0b:84:89:18:f1:75:51:78:7c:
79:3e:d4:78:15:c8:d6:9f:cb:7c:4f:a2:a0:b9:d2:20:a5:f7:
1d:b5:ae:74:2a:11:33:b3:f0:14:2f:a5:80:51:5d:9a:4b:21:
45:17:01:bf:8d:81:bb:82:42:2e:d1:04:e4:d4:6c:24:78:db:
f9:28:09:22:7a:d7:02:f1:10:5c:d7:36:29:0e:7a:9b:9e:bd:
b5:dc:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:04:16 2026 by rpki-client