Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: iw1kmCBjIjqv0o87tTiUm23lbR95YzAojSiesQzPnlw=
Subject key identifier: 3B:E3:82:B4:97:64:AD:73:98:CE:B0:9F:57:FB:ED:2A:AC:5C:73:D5
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 01A135FEA8FC8A2920D6F724C497BC99CCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 0C6D
Signing time: Tue 13 Oct 2026 16:00:44 +0000
Manifest this update: Tue 13 Oct 2026 16:00:44 +0000
Manifest next update: Wed 14 Oct 2026 16:00:44 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: rVmOKKnOBrqgm+seRIdT1EajQP/P4Lno1duvUDMvPQw=)
2: RhhybVhgxehJpyQFfu1dQiF3RZc.roa (hash: vTXKPtYUm1UxDqfrm9GUHJ6eZM3EZfiTITZU7YFaPA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:fe:a8:fc:8a:29:20:d6:f7:24:c4:97:bc:99:cc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Oct 13 16:00:44 2026 GMT
Not After : Oct 14 16:00:44 2026 GMT
Subject: CN=3be382b49764ad7398ceb09f57fbed2aac5c73d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:0e:56:47:79:51:bc:61:8d:b8:aa:2e:03:
f7:bb:be:fd:4e:4b:83:4d:28:af:dc:4d:f7:71:13:
aa:86:f2:d8:dd:68:c0:66:b3:3b:22:46:47:b7:b5:
db:33:01:55:00:ff:f5:dd:e0:b0:45:e0:02:f0:71:
37:9b:8c:19:46:9d:d2:36:8f:ae:17:7b:cc:8f:c9:
a6:8c:0d:16:12:d6:7e:fe:56:ae:73:67:85:9a:16:
60:ee:a7:42:f6:f9:b2:a1:45:74:04:48:a5:0f:ab:
c9:df:4e:16:b3:2b:cf:0d:43:5d:25:bf:37:58:8f:
1e:49:37:4f:f4:af:99:37:1b:b2:9a:c5:20:67:02:
9f:76:18:8f:f6:72:31:ba:41:61:d3:fb:35:46:07:
91:a5:a9:ad:75:5a:58:0d:39:d6:6a:86:5d:70:22:
df:72:84:7e:0e:93:09:fc:8a:c7:c0:f4:83:29:04:
24:05:f9:db:d2:44:4e:8a:53:08:c8:5e:d7:65:e4:
6f:f5:cd:91:5d:ca:d4:0f:2e:00:45:67:c8:11:26:
60:49:81:e6:89:4a:0f:1b:22:e5:5a:42:7b:eb:d5:
e7:76:72:1c:a7:89:94:f0:5b:05:16:c8:d8:81:f5:
ff:38:97:ef:de:4c:c7:89:03:19:f0:48:91:82:d3:
e3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:E3:82:B4:97:64:AD:73:98:CE:B0:9F:57:FB:ED:2A:AC:5C:73:D5
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:54:2c:7b:a1:62:53:50:b4:53:32:7a:16:ef:85:d6:70:66:
f2:2d:09:64:f5:34:8e:ef:20:fe:56:2e:57:0b:24:02:89:17:
1f:4a:55:20:85:5e:98:7d:4f:80:14:1d:92:65:95:5c:98:c0:
01:6d:2f:be:4f:21:2d:c8:11:15:a9:0b:79:f5:89:f1:bb:a8:
33:2e:f5:3e:a0:ba:bb:d6:47:10:8d:0e:07:fa:df:b8:4e:e4:
13:68:5d:cd:26:fb:c7:a8:dc:a5:51:d1:a9:77:20:d2:87:7b:
50:b8:ef:80:f8:50:c4:8f:2e:a6:ea:5f:c2:ed:81:c0:3b:6f:
e1:2f:df:97:ee:83:60:3a:34:48:28:7e:7d:63:c6:32:18:c9:
76:b6:3f:b1:34:d3:94:25:2b:5b:2c:91:ca:94:32:f4:1d:b3:
ca:de:56:01:33:6f:94:98:d1:8c:7b:c0:fb:06:f3:7e:94:12:
26:f2:3e:9a:a5:07:29:c4:b0:2d:f5:02:d3:a5:5a:bb:ba:58:
a7:25:26:cd:90:fe:c5:01:17:f2:98:a7:71:0a:cc:9a:aa:2d:
c0:fb:5a:04:d5:07:d7:5f:e4:5a:4d:89:70:c4:6f:26:8a:f4:
0b:fc:04:dc:d4:75:0f:2f:f3:4f:51:ca:68:7f:74:da:b4:b4:
79:9f:2b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:03:16 2026 by rpki-client