Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
File: QbiIzsBviqWb7MzHs6lwGKu3PQs.mft (raw, json)
Hash identifier: T5mOl8op2F5DPafoJMKySytg8tQaS77TVcY0UTZfF78=
Subject key identifier: EF:E7:B4:F7:6D:26:B2:06:53:4D:3F:D0:03:81:25:DE:9A:B0:98:13
Authority key identifier: 41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
Certificate issuer: /CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Certificate serial: 01A0EB1D0B3B9325ED83DB7DB41354B5E8B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:02:24 +0000
Manifest this update: Tue 29 Sep 2026 03:02:24 +0000
Manifest next update: Wed 30 Sep 2026 03:02:24 +0000
Files and hashes: 1: QbiIzsBviqWb7MzHs6lwGKu3PQs.crl (hash: uO/N2PJygmNfsnG6vSgAb1SgqFvBP5wpGR5nK5bk/MI=)
2: _QiQmroF9P3WbIwXaXOwVu2gju0.roa (hash: 9+ii97HZuPAGD+TGVcgVZZlv5SLZbzjKViVe7ESoXRc=)
3: kOQCx-Wt3RfUtND4HBeOaf-__Ao.roa (hash: 6wtyOlYKb3vdJIPgCwFvXGUrxNL2Wzr22WnpzvrLq54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1d:0b:3b:93:25:ed:83:db:7d:b4:13:54:b5:e8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Validity
Not Before: Sep 29 03:02:24 2026 GMT
Not After : Sep 30 03:02:24 2026 GMT
Subject: CN=efe7b4f76d26b206534d3fd0038125de9ab09813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:11:4e:93:71:93:f9:a0:8e:8d:50:95:df:d5:
e1:64:d2:81:9f:b6:af:42:77:d3:57:98:77:97:fc:
80:51:b9:b6:b2:da:83:aa:04:a4:b1:f1:bd:d8:2e:
d7:f7:2c:8c:bd:37:b2:4c:1b:99:66:13:e2:48:24:
db:08:d4:95:51:ac:a0:4e:32:00:05:98:f7:45:73:
77:23:38:90:bc:17:79:f7:fc:92:f2:84:21:49:36:
9a:e1:d1:9b:83:28:91:18:32:5e:4c:f8:d2:f7:2f:
37:41:b3:2e:2c:e7:5a:59:11:b5:09:1e:49:2b:1a:
49:61:4d:77:33:0c:e5:de:92:3e:2e:37:e4:0c:f7:
d6:81:ce:1a:50:2c:8a:ca:9d:b2:35:b7:3d:92:6b:
e6:da:ae:71:8c:7a:46:ac:a0:c7:68:2e:53:25:0d:
b3:76:9d:8c:3f:22:64:3b:ab:25:d8:18:cc:2b:bb:
43:83:62:6e:03:5b:47:81:81:66:35:90:92:9a:7b:
ec:a2:b9:f6:3d:80:fe:5d:91:99:c8:ae:7e:b2:e2:
e3:7c:76:1a:c4:e3:15:bb:e5:03:67:e4:d2:f4:e3:
18:58:59:6f:9f:63:59:ed:f3:d7:c7:cd:2f:19:3f:
1d:e8:7d:ca:0c:1e:8f:eb:58:54:e5:58:d7:12:72:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E7:B4:F7:6D:26:B2:06:53:4D:3F:D0:03:81:25:DE:9A:B0:98:13
X509v3 Authority Key Identifier:
keyid:41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:88:fd:eb:84:ea:34:16:04:79:a1:bf:76:4e:d6:10:cd:4d:
63:77:93:5a:86:d5:68:f8:f3:99:e6:9b:8b:1a:5a:8b:5c:65:
67:bb:61:1c:18:d7:b1:c6:9b:d7:3f:70:6c:33:d7:75:24:93:
4f:d9:58:2e:a9:df:fb:5f:e5:87:56:60:9b:8b:39:5a:cc:df:
d0:08:84:61:bb:e9:61:03:be:ac:ba:a9:4f:bc:99:1b:96:7a:
0b:39:dc:13:16:39:85:c4:46:43:8c:2e:2d:6c:fb:fa:46:1b:
9b:25:f3:ae:c4:97:68:0b:02:9e:65:ac:1e:df:29:9b:4a:5f:
5a:a7:d7:4f:05:25:f5:6b:2b:f9:33:b0:12:69:70:17:2c:39:
cf:72:aa:af:27:57:6e:13:3c:d0:b3:2a:bd:92:76:5f:22:73:
e4:61:ae:b2:d7:ba:a0:3b:f4:77:c5:0d:2b:24:aa:90:32:32:
f8:89:40:1a:68:46:86:2b:0d:d7:77:f0:4f:ff:ba:7d:40:4f:
d0:bb:9a:3b:0d:cd:eb:f3:30:3f:c0:2f:8e:0e:a6:22:71:32:
96:1b:31:84:69:14:9b:e0:dc:21:0f:a8:7c:11:0a:d7:56:9b:
1e:d2:e9:fa:2f:02:46:cf:a6:ac:ed:4b:86:5d:94:6e:83:5b:
5c:6b:14:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:29:05 2026 by rpki-client