Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: 3lC4f/E74PckTO0Zph0G2Q2JHKpWEzZiNoBLZ+QtmSA=
Subject key identifier: 9C:08:79:B4:AA:B4:2B:19:42:34:70:46:4A:6E:AE:0E:81:97:AF:14
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 01A12165683E91BD9BA565194E2D549FB72E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 1A9A
Signing time: Fri 09 Oct 2026 16:00:56 +0000
Manifest this update: Fri 09 Oct 2026 16:00:56 +0000
Manifest next update: Sat 10 Oct 2026 16:00:56 +0000
Files and hashes: 1: 4646eK1Tkwjccpu4DCzx2JumzS8.roa (hash: lg2Dl0touPmWfPjJx+g7bMR8N5f9QX+NTtoNaXQCBJU=)
2: EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa (hash: X80Gqz0nE+6UFtGApp5Wktmc8Oc2CPQtKl4rwvAFscI=)
3: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: xTF7NUDJcNHk6RAwosRdWfBT18bRQy8N5G3CzSCW5VM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:65:68:3e:91:bd:9b:a5:65:19:4e:2d:54:9f:b7:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Oct 9 16:00:56 2026 GMT
Not After : Oct 10 16:00:56 2026 GMT
Subject: CN=9c0879b4aab42b19423470464a6eae0e8197af14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:40:63:47:f0:02:fc:99:32:df:52:0f:e1:
aa:96:49:a7:52:d0:1e:cf:03:11:7b:41:44:cc:3f:
f3:88:e9:eb:ba:4f:49:02:43:b2:af:29:43:5c:97:
ae:b9:77:90:ff:2e:c4:28:dc:07:53:47:e9:d1:cb:
3d:c0:cc:52:7b:d9:8d:41:5e:2d:f4:f6:10:6d:41:
14:bb:14:56:e7:d9:aa:d9:fe:f7:8b:5c:b5:35:4f:
36:86:0f:d0:4b:e3:40:75:b1:fa:f7:d1:87:88:78:
35:40:d3:f5:63:2f:dd:78:b6:14:e4:a1:43:34:cd:
ee:28:a5:8c:5c:96:4a:1d:a9:c4:70:9e:1c:c5:b9:
85:45:17:12:1f:66:6f:65:be:10:eb:4f:67:dc:a7:
0b:be:21:aa:7b:10:61:49:ad:bc:49:10:4e:3b:4b:
5e:1d:b5:27:23:14:5a:ce:5d:4c:15:a2:d2:5e:0b:
24:3b:67:a7:fc:4f:d1:8d:5e:a0:56:1c:c9:ef:bf:
e7:dd:ea:6d:81:50:82:65:d6:f6:b9:cb:a3:5e:5a:
54:60:92:39:90:65:89:13:56:df:2f:48:4f:fb:b3:
34:3c:c2:59:92:1f:cc:f7:0c:63:c8:10:90:c9:71:
4e:69:0d:fa:92:18:03:0c:06:d2:92:3a:3f:d5:f4:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:08:79:B4:AA:B4:2B:19:42:34:70:46:4A:6E:AE:0E:81:97:AF:14
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:07:95:8e:ad:5b:c3:4c:4a:79:85:83:cf:55:09:ca:bf:2b:
41:b8:2f:66:2d:33:71:5e:23:d6:7c:75:21:51:b1:0d:0f:3e:
27:dd:d9:dc:7f:b1:46:b0:02:13:7b:d1:28:5d:b4:28:af:4f:
3e:86:8a:0e:4e:e2:60:0a:5e:3c:53:c2:d0:a3:55:4e:1e:9e:
eb:c9:f8:17:68:37:b7:f7:51:cb:90:4c:b9:73:12:56:0b:9f:
6c:e4:ee:cb:85:39:58:67:46:bb:d9:e5:37:26:b6:46:94:c4:
13:81:c9:04:84:ad:60:32:e2:06:55:ac:f6:11:75:07:1a:ca:
4f:e1:df:7f:6f:9d:62:d4:ce:79:9a:35:b6:90:5a:a9:b1:c5:
37:ee:c0:33:f7:46:87:e7:18:44:7e:b3:4d:d6:9a:77:c0:08:
b1:9e:b3:8b:73:10:47:6e:7f:9f:5c:6d:cb:11:50:d9:30:70:
c2:ab:c9:0d:5d:09:27:12:ef:95:90:36:d7:42:cd:4d:81:11:
73:1b:fa:ca:ac:7f:f0:10:c5:e9:c1:3d:4a:ec:66:50:f1:dd:
8e:c3:ae:c6:26:26:63:17:91:0b:12:aa:69:5f:32:35:02:7a:
5e:21:62:2f:b0:a1:04:d8:ee:d0:c9:b5:18:dc:e4:b3:c9:c6:
06:1a:40:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:09:22 2026 by rpki-client