
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
File: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft (raw, json)
Hash identifier: i7WVDVRieOSbqT1Curb71a4ZrPXNabrh9rKGfnNSUBw=
Subject key identifier: 89:E0:DB:22:1D:5B:2E:0F:34:4D:7C:60:94:8E:3C:2A:55:FD:8D:0A
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 01A12767724EACAD1BE479F8C416CE093ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
Manifest number: 170C
Signing time: Sat 10 Oct 2026 20:00:53 +0000
Manifest this update: Sat 10 Oct 2026 20:00:53 +0000
Manifest next update: Sun 11 Oct 2026 20:00:53 +0000
Files and hashes: 1: QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl (hash: W+/ggMBAnKTbloIvz9Oi654gK35r1LP8zMCOx2SUCDE=)
2: SWRq_pl9YE3Vmep3Sz-bHbzjenU.roa (hash: PpkmpYFRPnBUp9wde4ONrE1EcXa6IfUcynokhBV559M=)
3: gRMoRivinGkBgKRmH-SV8yoYcgU.roa (hash: cVbIfSm3Q8ulteh3vXummnzFjESsnysosWKYY8XHU6k=)
4: msnnLQdoKjqNvOHMJs9IN5ceZuY.roa (hash: 5lKEYe5Gxrq+ObFCrI6WSzVszy2h6z3OHnDq+L5Kw/0=)
5: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (hash: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA=)
6: vG4zf4gBfvqtcILrPLbA-wHSJso.roa (hash: GuoYyttXZtfdHI3sLS6+ceDcyDmzz98nHEsNcf7mD9A=)
7: vdlRGBUxKdk1J59T9yk33Tc6VXs.roa (hash: psrrFdXSYr4Fiv+zDVJQMMF62M2YJ/7GZn06Znz7wu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:72:4e:ac:ad:1b:e4:79:f8:c4:16:ce:09:3a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Oct 10 20:00:53 2026 GMT
Not After : Oct 11 20:00:53 2026 GMT
Subject: CN=89e0db221d5b2e0f344d7c60948e3c2a55fd8d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f4:ef:13:ff:cf:ee:a9:24:b0:4a:46:6d:a6:
fd:8c:8a:43:58:4e:ad:27:bb:b6:7b:7d:91:74:29:
96:ed:6c:f5:c0:11:14:22:5a:a1:b3:42:8b:5e:f7:
b5:e6:cf:e9:98:4e:eb:90:64:5a:01:95:94:77:d5:
e8:83:64:3a:01:1b:7a:14:f6:e7:1d:52:17:c2:a7:
da:58:d4:bc:63:78:ec:0c:ec:4a:89:a7:12:0c:c5:
e5:06:84:93:3e:53:57:2f:65:6e:a6:38:43:72:77:
f9:39:db:00:94:83:f2:51:55:1a:5d:b1:7d:d5:fd:
85:e2:5c:30:b5:4c:ab:c3:33:ce:75:13:14:9d:7c:
0d:63:a3:68:43:0f:39:d7:cb:fa:69:58:b8:87:83:
76:fb:6a:17:2b:16:c5:89:95:81:3f:d9:d4:30:e9:
a0:0b:46:0e:1e:68:38:eb:b3:f4:76:f1:79:63:7b:
71:0d:72:af:2c:fc:74:f2:a3:30:8c:19:dd:10:40:
1a:69:6c:40:1c:b0:1c:f0:b7:e0:fc:11:6d:fd:00:
1f:a4:87:22:66:26:18:0d:ab:f2:ce:9e:6c:0e:9b:
51:6a:68:06:1e:f6:93:a0:bf:32:8d:e4:b4:6e:ac:
f2:69:1d:86:0f:8b:58:a1:a1:ba:bf:3a:79:4b:e6:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E0:DB:22:1D:5B:2E:0F:34:4D:7C:60:94:8E:3C:2A:55:FD:8D:0A
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9e:e2:66:5b:df:c2:8a:d3:77:aa:1a:5d:b2:12:f6:8f:e5:
ce:62:d2:00:0c:ab:15:35:10:4a:d6:9a:cb:b0:ff:99:3c:0f:
46:9d:01:06:5c:25:d2:f9:3a:75:86:f2:74:72:2c:4c:d0:b0:
f7:87:e0:13:c0:9b:3f:d8:96:17:5b:6a:34:c6:24:9e:f4:68:
58:68:32:2f:2b:b6:a0:47:d1:bc:33:d3:02:4e:71:bc:df:cf:
96:87:3d:f6:46:01:c3:64:35:75:91:8b:77:b7:0f:79:2f:03:
a5:b4:72:7b:c3:d5:18:03:6a:73:7c:fc:1c:57:e7:d3:6e:e7:
4c:36:9e:b9:82:4a:0f:d3:59:96:c5:53:4c:66:82:3d:bc:e3:
f3:2f:ea:63:89:37:c8:db:dd:ee:08:1f:57:1e:db:5d:9d:7f:
d0:18:80:8a:7f:4a:b3:7e:22:54:8d:4e:94:62:c3:62:91:36:
b2:5d:f6:ce:f4:c6:e6:62:40:f2:6c:df:8d:d4:8c:5d:19:0e:
ef:16:a3:10:81:33:c2:ff:7e:90:35:71:26:ab:43:f0:76:00:
9e:00:63:88:02:69:c8:85:4a:5e:9e:b2:94:30:97:fe:c9:4d:
cd:37:a0:fc:51:b4:db:78:e0:c6:23:b6:68:e3:fd:7c:c5:95:
08:2c:35:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:42:09 2026 by rpki-client