Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
File: QXF5yEiCEh630SJJWnrH6joAcMg.mft (raw, json)
Hash identifier: ityG37hgDbri2ZXdtH9gLtjLN9bIOMKXIpfIUfDY1W0=
Subject key identifier: 74:14:BA:BB:FA:FB:E2:6C:C4:50:74:BC:EF:8A:63:55:EE:23:6B:61
Authority key identifier: 41:71:79:C8:48:82:12:1E:B7:D1:22:49:5A:7A:C7:EA:3A:00:70:C8
Certificate issuer: /CN=417179c84882121eb7d122495a7ac7ea3a0070c8
Certificate serial: 01A12A9F909D4E94D92FD0E291DFE09E4048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
Manifest number: 026E
Signing time: Sun 11 Oct 2026 11:01:02 +0000
Manifest this update: Sun 11 Oct 2026 11:01:02 +0000
Manifest next update: Mon 12 Oct 2026 11:01:02 +0000
Files and hashes: 1: QXF5yEiCEh630SJJWnrH6joAcMg.crl (hash: RrHEMELEwDhVTucU/7kODHOwV3FdHeCuF7hnZtkVwBw=)
2: gFG9Wl84d8X9xFisW6jM5nOXCEU.roa (hash: PgnlQFmyF6NB2/hGt3DIQB9LhPjYBLOyS8GHZ24ktDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:9f:90:9d:4e:94:d9:2f:d0:e2:91:df:e0:9e:40:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417179c84882121eb7d122495a7ac7ea3a0070c8
Validity
Not Before: Oct 11 11:01:02 2026 GMT
Not After : Oct 12 11:01:02 2026 GMT
Subject: CN=7414babbfafbe26cc45074bcef8a6355ee236b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d8:58:3d:78:61:10:e0:57:69:4c:ac:9e:50:
a5:5d:25:7d:a7:fa:06:58:81:98:e9:be:80:01:eb:
43:d8:6c:c8:4d:95:4c:37:7e:26:36:7f:74:63:2d:
07:8e:28:92:4a:b1:99:8c:26:11:38:56:c4:5a:78:
42:2b:93:70:3b:f1:7b:94:b5:cb:84:e1:93:cd:7f:
a0:6f:31:d6:d2:55:ce:2f:e2:f7:64:a0:8b:b6:0f:
af:0b:98:8c:a1:40:0f:c5:ad:ec:48:e4:83:0f:0a:
8b:c8:44:06:19:c2:69:e4:7e:28:59:b2:54:f0:22:
b4:62:56:6e:1d:e8:9a:56:b7:5c:94:e6:66:d7:20:
a6:51:31:bd:fd:70:12:fd:54:25:a2:86:0b:81:53:
51:b0:41:b5:23:03:41:fe:92:03:5f:6a:77:be:de:
0f:8d:eb:17:ab:38:4c:f8:d7:25:a3:6c:5f:f1:d0:
e3:43:bf:cd:ea:36:00:74:99:e9:a5:b3:1f:ef:d1:
12:1f:ca:6a:de:90:e6:17:b7:7d:21:0b:e6:74:2a:
e8:b6:b9:6e:41:0b:55:b8:1a:7c:0a:0a:92:ed:b7:
b3:03:ba:c0:89:fb:44:89:e0:10:ea:a0:73:e0:69:
2e:c6:2b:77:8a:36:d6:2f:38:5c:fe:86:11:58:e0:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:14:BA:BB:FA:FB:E2:6C:C4:50:74:BC:EF:8A:63:55:EE:23:6B:61
X509v3 Authority Key Identifier:
keyid:41:71:79:C8:48:82:12:1E:B7:D1:22:49:5A:7A:C7:EA:3A:00:70:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QXF5yEiCEh630SJJWnrH6joAcMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0d3f44-db1b-4192-8c42-40f2a93727a4/1/QXF5yEiCEh630SJJWnrH6joAcMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:72:60:c5:bd:4e:44:47:91:bc:c2:86:1d:0b:5a:bf:6c:1b:
17:c8:bd:70:4c:1e:3f:63:3d:85:de:dd:cc:95:95:81:51:b2:
32:4a:05:04:c5:0e:03:84:92:69:74:92:43:e1:86:86:15:92:
a2:92:5a:7f:bb:6f:30:b0:6c:9c:ba:5c:dc:d6:b1:0c:8f:21:
8e:97:3d:34:6f:36:0c:df:78:21:2f:da:2c:12:5b:28:6c:db:
31:fd:e9:0a:b4:aa:d9:e7:ee:30:88:79:97:76:bd:6a:79:45:
e9:b7:2c:f3:6c:46:50:05:bc:da:e5:f2:13:02:ba:c8:00:79:
09:6a:92:76:36:aa:d6:43:c3:cb:fa:63:1a:23:ae:0c:84:44:
11:a0:0a:81:33:0c:dd:bb:16:d5:6d:8e:35:43:08:57:cc:32:
09:88:f4:34:13:1d:3d:7a:70:ef:3f:61:72:4c:ab:96:0e:b0:
1a:96:3c:6f:e6:3a:bf:9f:44:64:e6:c9:bb:2b:e9:b2:98:4b:
34:8c:07:30:1a:4a:ce:d0:81:b4:2c:ee:40:02:60:4d:3f:20:
40:1d:04:92:14:fc:4a:c2:5f:7c:7b:9a:0c:80:f8:be:98:19:
58:09:23:14:cf:88:74:8f:51:8b:5b:44:2a:8e:11:47:09:d8:
c1:46:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:18:37 2026 by rpki-client