Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: wwvE1jA+30/aHSnIo48+WSPBf0erI5n2CUhq1jijn10=
Subject key identifier: 91:6A:40:7B:B8:7F:30:49:17:14:D6:0A:CB:03:09:EB:B0:BA:C1:A1
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 01A12BE9586997566D9374827F6421251D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 122D
Signing time: Sun 11 Oct 2026 17:01:15 +0000
Manifest this update: Sun 11 Oct 2026 17:01:15 +0000
Manifest next update: Mon 12 Oct 2026 17:01:15 +0000
Files and hashes: 1: 9l35f4vtEnwERy91rSIzMefrFvk.roa (hash: o4NZxjI3TjEffFvPCpSdso698d9KA9gU7jcbU25ovX4=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: VhC7KFCrNYD7WBvpT63ixZ0UMV0r+C0tBI4sGR3polc=)
3: _DMWomZ-zw9r2w8AsNSptLxDmfA.roa (hash: 5DRqqMVL9GM/PG8SfYwPRoOqjNYLEPPU5+fO2uX+eWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 17:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e9:58:69:97:56:6d:93:74:82:7f:64:21:25:1d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Oct 11 17:01:15 2026 GMT
Not After : Oct 12 17:01:15 2026 GMT
Subject: CN=916a407bb87f30491714d60acb0309ebb0bac1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:61:73:5a:f8:37:1e:49:b8:d6:3e:f5:9c:9d:
64:f8:1c:72:27:96:d0:5c:b7:bf:55:7d:ea:4e:a1:
01:6f:2b:78:01:4b:f3:61:61:c4:6f:f2:40:d2:ab:
cb:ca:2c:5f:77:77:b7:9c:32:c3:ad:7a:44:f2:57:
34:4b:52:8d:57:90:4f:61:7c:82:51:a0:1d:cf:2b:
cc:52:74:76:3d:b9:fc:51:68:39:7f:e3:42:a3:f2:
db:fe:a7:aa:c2:f1:0e:ab:98:1e:f7:10:5f:b1:f6:
90:35:d2:98:fb:6c:8e:04:a9:5a:52:53:41:dd:67:
39:7f:dd:d3:dd:f3:d0:55:19:9e:29:09:db:6c:07:
2a:03:88:d6:53:c6:6f:1c:8e:94:39:fd:fb:b7:55:
f3:da:46:a1:80:87:83:0c:59:a8:bd:c3:c9:5f:e4:
12:5a:92:07:95:92:e5:74:35:67:cf:97:16:cf:c5:
69:70:45:85:19:d8:3e:ed:ca:32:e2:5d:77:74:be:
e3:34:55:b3:05:3c:05:f2:fc:e7:05:c5:42:d8:59:
d1:2b:69:b7:85:ce:90:7a:70:ea:0c:64:4e:3a:6d:
22:d3:7a:06:0f:97:4a:92:88:4a:bb:c9:3b:ab:64:
89:9f:85:40:a6:8f:93:4e:f7:3e:ec:c8:b5:74:1f:
2a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6A:40:7B:B8:7F:30:49:17:14:D6:0A:CB:03:09:EB:B0:BA:C1:A1
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:57:6f:be:98:65:bd:2f:ec:48:a3:e3:d1:21:db:67:4c:1c:
32:54:49:00:a6:4e:5c:c8:22:94:3a:71:3f:fd:55:a0:b8:bd:
49:7d:87:3d:82:65:60:49:b1:9f:70:b6:f3:ee:8e:cf:da:c2:
2d:50:c6:c9:53:52:7a:d9:18:e7:db:03:63:a4:f7:f4:52:85:
d0:db:21:53:86:02:34:cc:5d:b7:95:98:e0:29:3a:c9:fa:2b:
6f:92:d4:14:5c:de:a9:e7:c9:32:1e:92:a2:f5:e9:10:6c:c1:
73:04:e8:b3:26:8d:81:f6:4f:68:1d:2b:fc:23:fa:44:af:f7:
7a:77:4f:b5:e5:98:99:01:f9:d8:8b:54:d1:6d:4c:0c:ea:6d:
ce:e1:83:2f:93:1d:71:4b:1b:ba:7e:f9:8e:c8:69:da:1c:78:
64:ce:c0:ba:88:d4:a1:db:0b:20:73:bc:fa:fd:ab:ac:4d:7a:
1f:5d:9c:8b:4b:78:39:4d:c7:c9:e0:96:a5:16:a1:87:61:ff:
00:b8:29:ba:23:ee:27:98:57:60:9a:4c:ed:00:82:66:bb:27:
f3:0a:c4:e8:d2:df:87:6d:69:1f:cf:0e:0c:bf:16:a2:f8:c4:
c5:df:45:05:7b:24:ca:2e:f3:fb:07:04:01:3c:3b:ab:c7:b7:
31:55:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:35:17 2026 by rpki-client