Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: naYpKQhSSntfDKua7CnqYaoAJYfFofRdyecxSO5cCMk=
Subject key identifier: 26:FA:CA:29:9E:25:76:72:8F:59:EC:A3:74:9D:A1:27:AA:EF:55:18
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 01A1DCF080F0C73F8104EE9D14D6CCCAAFB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1746
Signing time: Sun 15 Nov 2026 02:01:51 +0000
Manifest this update: Sun 15 Nov 2026 02:01:51 +0000
Manifest next update: Mon 16 Nov 2026 02:01:51 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: xtWJPs84WMVRxyFS96a5fvZLGokN+v51ftyRySM63Bg=)
2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:80:f0:c7:3f:81:04:ee:9d:14:d6:cc:ca:af:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Nov 15 02:01:51 2026 GMT
Not After : Nov 16 02:01:51 2026 GMT
Subject: CN=26faca299e2576728f59eca3749da127aaef5518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ae:59:70:8e:73:00:79:12:ca:ef:0c:a9:0d:
81:24:38:c1:3c:18:7c:89:c1:e9:29:d0:27:c0:21:
5c:5e:8f:be:3c:03:99:6b:f4:9f:60:03:02:e1:3a:
19:88:7b:4f:43:4f:88:4e:d2:25:b9:0d:d9:89:e6:
a3:a1:df:49:80:da:50:67:8a:65:0c:75:22:59:e3:
6f:72:9f:35:56:39:06:c5:eb:a4:85:79:7d:c1:3c:
fe:ed:1f:1f:07:b2:33:21:04:83:84:2d:87:b4:19:
02:e7:00:0f:96:5f:b3:32:22:76:c7:7a:2d:67:10:
e2:4d:0e:8c:9a:52:21:31:32:19:5f:5d:c0:d9:2f:
25:08:9e:0f:79:71:cf:b6:90:e7:b6:51:e0:b3:a0:
3b:db:3b:b4:93:e8:d0:3b:2e:28:c2:05:0d:cb:a9:
c9:25:36:a2:10:57:ca:6e:e5:22:33:e7:7e:89:cc:
10:89:a3:f4:86:c8:69:84:57:c5:1e:bf:78:e1:81:
7a:21:fd:d2:be:42:68:3d:58:9b:0c:e6:0f:1b:ae:
ed:23:c3:95:28:4b:8d:1a:9a:9e:99:b4:d4:3b:df:
00:c4:cd:77:5a:42:b4:76:d9:7b:a1:8e:ec:6a:00:
16:f1:c4:92:64:25:c4:24:61:53:1c:5c:9c:3d:33:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FA:CA:29:9E:25:76:72:8F:59:EC:A3:74:9D:A1:27:AA:EF:55:18
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a8:85:77:48:cf:ae:e9:02:e3:c4:89:d5:57:93:98:2a:ce:
b8:59:55:4c:f6:bb:b3:f0:2a:d2:80:c5:e4:9f:b9:df:71:ac:
2e:36:cf:58:32:74:ee:16:42:a8:d4:31:fc:68:6b:cd:c2:82:
b0:80:d8:2e:bf:dd:d4:1d:74:c3:5b:34:e1:62:aa:9a:28:53:
97:0d:79:5f:c5:58:43:07:a0:37:bd:3f:7d:17:69:5a:98:97:
65:37:48:a4:df:43:60:cc:e9:26:76:e1:07:9a:83:04:28:3a:
ce:f5:ce:27:34:a5:1a:7c:1f:25:18:68:45:26:0d:42:5c:8f:
86:e0:0e:0b:d5:3e:95:21:0f:d3:c2:bb:1e:f1:8d:84:a0:af:
06:e9:a3:36:2a:fc:e0:c6:64:33:37:7b:80:ff:a5:e5:0a:1e:
65:6b:b8:50:f3:23:6d:57:b0:49:50:12:83:6b:f5:7d:9c:3b:
ab:09:52:15:09:52:d8:02:12:63:20:14:37:1f:45:f3:70:f1:
c7:6d:73:be:11:c7:26:50:b4:99:81:c2:c6:90:6b:36:5e:4e:
57:ed:ee:15:ec:d5:0d:8d:71:db:e9:d6:a9:94:c6:67:4f:2e:
02:3e:07:c3:c9:8d:b4:07:93:e2:bf:29:cb:ce:98:29:57:cc:
47:30:7a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:58:04 2026 by rpki-client