Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
File: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft (raw, json)
Hash identifier: iAAOgLOpkwi4978S5R9n/+p1tAhHzbU85U9NOWF+J+I=
Subject key identifier: 3E:78:6E:80:94:04:7F:43:28:8F:6B:DA:C9:ED:B4:65:43:0B:55:9E
Authority key identifier: 42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
Certificate issuer: /CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Certificate serial: 01A1DDCBBEAC48B859F54616B493824A7901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 06:01:19 +0000
Manifest this update: Sun 15 Nov 2026 06:01:19 +0000
Manifest next update: Mon 16 Nov 2026 06:01:19 +0000
Files and hashes: 1: Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl (hash: dMJq390hKOKl8yk2bmp75n+/d/0RT3plBy9ohtZ0wPU=)
2: Seo64cK5BBL5Z5Lga5yI1lf8M6w.roa (hash: LMUW9+NLiMGnI7ZWrV590GSKNkkWYi8Hg05UOVRU3Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:be:ac:48:b8:59:f5:46:16:b4:93:82:4a:79:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429b1cf21d20f8c6f94641e3327e4555e2e41102
Validity
Not Before: Nov 15 06:01:19 2026 GMT
Not After : Nov 16 06:01:19 2026 GMT
Subject: CN=3e786e8094047f43288f6bdac9edb465430b559e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:81:2b:cf:d3:b9:b5:a1:11:da:10:e5:05:
0e:23:9f:f7:3a:d8:c4:72:9b:60:cb:ea:a6:00:c4:
81:dd:72:14:f5:f9:6e:9e:3f:f3:07:2f:98:21:b0:
7b:6c:65:c7:c5:f4:e2:b7:70:b8:49:2a:8d:4d:5d:
64:45:60:f8:33:aa:50:4a:44:ec:72:a7:8b:e6:83:
fd:cf:53:21:c7:8a:e7:39:37:44:f2:85:fe:58:43:
bd:dd:e7:df:c3:04:9b:b6:c6:90:da:b3:db:59:44:
23:e9:f0:04:22:ba:cf:16:5c:ed:33:85:6c:cd:21:
a3:67:c7:28:3c:32:05:91:54:b9:09:4a:4c:ca:d3:
c4:3a:d6:24:c8:1c:ed:b8:ab:74:c8:96:82:a6:6e:
a2:91:9c:b9:b9:0e:ca:da:83:a5:f6:54:9c:a2:50:
99:2b:16:8c:11:41:9e:64:cf:d5:2b:7f:ce:a1:27:
dc:3d:62:79:22:40:99:ed:9b:6a:00:8c:c8:99:ac:
03:f4:01:79:e9:b3:74:e1:ba:25:55:e2:7f:e9:88:
de:c4:90:44:3a:f2:d7:84:17:be:8a:18:ff:5f:eb:
ef:51:5d:1d:9a:ff:cd:09:51:a3:f8:f6:72:62:9c:
d7:c7:95:34:ef:c5:17:1c:09:40:8e:7b:70:0c:22:
79:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:78:6E:80:94:04:7F:43:28:8F:6B:DA:C9:ED:B4:65:43:0B:55:9E
X509v3 Authority Key Identifier:
keyid:42:9B:1C:F2:1D:20:F8:C6:F9:46:41:E3:32:7E:45:55:E2:E4:11:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/204509-8a32-4b28-97c8-e56e738380de/1/Qpsc8h0g-Mb5RkHjMn5FVeLkEQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:b8:e7:65:c6:b2:bf:1e:9a:2f:6e:c3:e2:a5:73:37:66:81:
2c:c7:9e:30:a6:c7:ea:04:33:6c:85:71:c4:e1:90:7f:6f:c2:
8e:35:ce:75:69:13:b6:68:e0:07:a1:dd:0f:5c:78:c1:16:7a:
cd:41:16:f5:b7:cf:6d:5f:5d:b5:72:e9:ef:d0:72:a0:d9:06:
89:3b:bb:fd:d6:a1:dc:cf:bd:cf:df:ce:d7:c9:3f:9c:03:21:
a2:e4:89:f0:37:49:2f:07:5b:7c:d3:39:05:9c:6e:92:73:e8:
95:b5:0a:90:7b:55:50:f5:06:2f:bc:7a:ec:23:1d:88:8e:a9:
4e:d5:3d:4f:23:bc:77:e3:2e:f6:74:01:b8:6e:ed:81:8d:3f:
7c:41:d2:42:0b:7d:17:f9:23:1c:58:e3:54:6c:61:80:4e:a1:
5b:09:2f:5b:d5:1c:0b:66:d6:ad:e8:74:5e:48:50:43:8e:b3:
b2:eb:7e:42:05:e2:ac:59:1a:b2:4b:5a:46:5a:d4:c5:e8:f2:
1e:aa:58:7e:ea:72:73:21:f9:ef:d3:dd:97:be:97:7c:9b:5c:
7f:7f:38:44:3c:45:79:06:b4:07:63:41:ae:13:71:99:fd:a8:
f8:c9:6f:a9:37:b9:6a:39:af:25:3f:a4:63:b6:23:75:47:38:
e6:f1:bf:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:02:31 2026 by rpki-client