Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.mft
File: QXlpg5PQ6w2vaf_Zf3h9e4gjciE.mft (raw, json)
Hash identifier: HO2qDxHPls2djUwOL3ovMvgMVhzNskLkgq+ko8zVLHo=
Subject key identifier: 7E:DE:1E:24:76:17:29:A2:DB:5F:E3:DE:D9:A4:C1:E9:42:71:5D:58
Authority key identifier: 41:79:69:83:93:D0:EB:0D:AF:69:FF:D9:7F:78:7D:7B:88:23:72:21
Certificate issuer: /CN=4179698393d0eb0daf69ffd97f787d7b88237221
Certificate serial: 01A12D32AA16DA5CA2F43E428D788FC10E57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.mft
Manifest number: 5E
Signing time: Sun 11 Oct 2026 23:00:57 +0000
Manifest this update: Sun 11 Oct 2026 23:00:57 +0000
Manifest next update: Mon 12 Oct 2026 23:00:57 +0000
Files and hashes: 1: 0sKQ6lhJjOfA8m4MnsDvoZK8mfU.roa (hash: pRrSriyn66y2vAXuLnClWani4xncpO1hF4wIQyYy3So=)
2: QXlpg5PQ6w2vaf_Zf3h9e4gjciE.crl (hash: hk2cJGo3qV9KyQCZOpwDsqrlEBuOqPNbdW/XzTPv4mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:32:aa:16:da:5c:a2:f4:3e:42:8d:78:8f:c1:0e:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4179698393d0eb0daf69ffd97f787d7b88237221
Validity
Not Before: Oct 11 23:00:57 2026 GMT
Not After : Oct 12 23:00:57 2026 GMT
Subject: CN=7ede1e24761729a2db5fe3ded9a4c1e942715d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:95:13:9b:c6:74:af:c9:d7:ec:b5:c0:b2:d3:
0a:67:d5:40:64:31:ff:21:4e:3f:49:96:63:1c:fe:
2b:9a:87:81:b4:4d:02:ac:8d:20:dd:88:50:a5:f0:
64:b9:a5:7f:c4:85:82:50:1e:62:47:00:7b:fb:33:
10:77:c1:f2:e1:d7:18:d8:21:ce:81:03:95:1c:24:
f9:8c:c4:70:39:bb:42:2b:4b:8a:3a:1c:b4:d0:89:
14:80:86:f8:4c:2e:a3:40:45:4f:94:9f:10:7f:04:
b0:d5:69:3a:47:51:1d:0e:83:d7:a9:31:db:0b:3f:
7a:60:bc:e1:2a:05:98:51:19:7a:19:26:5c:a2:2f:
9a:41:a6:ea:5f:e3:05:65:d4:b1:1b:ac:f1:fe:73:
90:0d:61:85:3a:a7:69:1d:96:92:48:70:fa:aa:d7:
7d:2f:e5:51:49:ad:8c:fb:d8:69:4f:1c:86:bf:e4:
d2:c6:3a:31:10:10:99:62:cd:f6:a8:87:46:13:ef:
31:90:1c:84:3e:a3:2a:e5:e8:c7:98:72:6a:30:59:
cd:f1:97:3d:32:73:d7:15:86:11:f2:24:f3:97:fe:
cc:8c:81:f9:cf:aa:1d:c3:c1:f3:2a:15:94:9e:b2:
7d:67:91:f9:43:d4:d9:5f:c6:00:c3:8b:65:a8:38:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:DE:1E:24:76:17:29:A2:DB:5F:E3:DE:D9:A4:C1:E9:42:71:5D:58
X509v3 Authority Key Identifier:
keyid:41:79:69:83:93:D0:EB:0D:AF:69:FF:D9:7F:78:7D:7B:88:23:72:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/95b229-8c06-4744-9d72-fc075d3778bd/1/QXlpg5PQ6w2vaf_Zf3h9e4gjciE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:bf:de:43:1a:9b:95:eb:4c:8e:47:c1:41:84:89:9d:48:b4:
21:b6:96:e8:78:81:fe:6a:c4:3a:77:86:82:24:fd:d8:fe:bd:
9a:97:56:00:b0:2c:eb:a5:dd:f2:37:a2:8a:46:d4:22:5d:76:
c3:99:3e:26:8f:04:04:5d:90:48:63:9a:21:f7:7e:d1:83:0f:
2d:1d:8b:9e:e5:06:33:79:0a:e0:cc:8a:d3:38:3b:e3:76:b4:
74:c1:9f:a6:0a:b8:58:a8:79:c2:45:78:80:94:06:54:f3:f3:
b4:21:a8:89:a3:8c:89:29:2b:40:15:e2:fe:26:c8:59:1b:21:
c4:fd:41:68:2c:dd:58:69:2e:8d:17:b5:92:69:f4:c3:d3:67:
d1:57:2f:c2:c3:9a:dc:ec:46:f9:38:51:bd:fe:71:a7:96:0e:
b0:4c:6a:3f:30:65:2c:da:a6:33:fd:08:ce:ed:b8:26:e4:17:
91:15:fe:0b:78:ba:b3:64:8e:e2:9a:c0:1e:24:7b:39:3d:d4:
fa:d2:d7:76:52:78:9c:63:14:0d:51:be:b6:b2:ad:77:45:53:
6f:4c:6d:cb:48:0a:94:09:36:d3:73:53:cf:d7:44:80:44:dc:
f0:10:27:f9:c7:ea:d3:10:1e:40:88:65:79:8a:80:33:c6:64:
95:68:e1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 10:03:45 2026 by rpki-client