Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
File: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft (raw, json)
Hash identifier: oKG69qSaRDwP7YF9Q3EMjFPSj9rnHJ1A5cyXjOOJfU4=
Subject key identifier: D7:8B:D2:58:A2:62:22:A6:A1:95:EC:48:C9:D3:2D:2C:4C:32:0C:8A
Authority key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Certificate issuer: /CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Certificate serial: 01A0EC2F347C07564AD3AE8319760558C183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
Manifest number: 0230
Signing time: Tue 29 Sep 2026 08:01:51 +0000
Manifest this update: Tue 29 Sep 2026 08:01:51 +0000
Manifest next update: Wed 30 Sep 2026 08:01:51 +0000
Files and hashes: 1: IZkDUCigInWdeV2VhafZmgrDhxk.asa (hash: fVSaR3R0qI7sWBf1eA/UjYaOluP3hVc1HKfEAv11/p0=)
2: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl (hash: TXEV90cMhlp+jjAhr9fVXALVcptqKwAJdfLDs3kSMVo=)
3: rhdyAw8cgf05vzajT2FBLQ9vMv4.roa (hash: BXOL4wyuX+9APrFFUb6u0yh2z5n++kBGSbyspApqvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:34:7c:07:56:4a:d3:ae:83:19:76:05:58:c1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Validity
Not Before: Sep 29 08:01:51 2026 GMT
Not After : Sep 30 08:01:51 2026 GMT
Subject: CN=d78bd258a26222a6a195ec48c9d32d2c4c320c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:94:a6:df:e6:a7:bd:ea:5a:18:79:b2:01:
7e:01:36:24:cb:2a:c4:aa:e3:d4:2f:76:cb:8c:9e:
aa:4e:11:09:ed:65:97:43:1a:1a:81:71:d1:d3:1f:
6a:a4:2f:a2:81:a3:38:07:5a:26:3a:b9:a1:50:21:
78:8b:28:8e:7d:0e:28:3f:73:14:3a:fe:f4:af:8c:
18:0f:52:79:20:3d:13:6a:96:55:d8:a1:6e:87:35:
24:aa:40:08:0c:0a:6f:6e:b5:28:bf:ee:5d:95:6c:
00:c5:45:0d:db:05:1c:cd:d1:4b:3c:21:0c:a0:40:
17:f1:24:24:a2:d8:6a:1d:94:df:6b:97:56:65:6f:
a3:6f:04:ae:b5:6f:90:45:e2:c8:3c:51:bb:c5:a9:
11:85:00:0d:cf:91:6c:e8:86:c7:8b:2e:3d:4d:c3:
84:5f:a2:b9:9c:1f:12:b9:dc:11:05:7a:df:ab:cb:
e4:cb:d7:04:38:32:dd:11:0d:6d:9e:18:a1:70:04:
70:e4:ab:c4:ff:74:76:b8:bf:15:2c:27:49:3c:d4:
9f:59:ce:fb:16:f0:b6:7c:83:84:d1:44:c7:64:75:
fa:22:64:34:ea:1a:d5:ad:85:71:d7:39:cd:8b:ce:
b3:01:bb:a6:5d:c2:c4:73:5c:ab:39:12:67:47:71:
98:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8B:D2:58:A2:62:22:A6:A1:95:EC:48:C9:D3:2D:2C:4C:32:0C:8A
X509v3 Authority Key Identifier:
keyid:42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5e:b5:4b:8a:fc:cb:dd:dc:e1:a1:35:43:67:ed:40:50:17:
35:6b:dc:e2:02:7d:e5:b3:e3:0d:0b:5b:03:4e:e1:97:76:5a:
20:69:3b:b0:a7:f5:e8:9e:3f:e3:c3:d8:a4:e0:24:21:55:3e:
1c:06:a2:6c:0e:6a:a4:b8:02:85:e4:d8:a7:7b:cd:6c:5c:e7:
71:9d:14:53:94:d5:6a:af:24:ad:08:42:f0:73:61:1b:8d:e0:
4d:e0:6f:35:b5:25:0b:8b:0f:07:89:97:3e:82:86:e4:28:f9:
df:de:f7:16:69:e9:12:e1:dc:d9:52:7c:1c:5a:0b:ee:dd:02:
1b:42:fe:c9:9f:ce:c2:53:d3:84:a5:09:85:63:ac:27:43:a0:
a8:07:d0:05:04:09:8b:4c:34:88:5f:08:0d:cf:98:ce:a5:12:
58:94:a4:da:41:30:30:3d:14:7b:04:09:ea:89:c4:0d:2c:63:
50:3f:85:25:e5:99:59:39:18:12:03:db:ae:1c:37:65:e1:a6:
8f:47:48:17:bf:4e:74:d1:6e:f4:cf:90:38:2d:3a:4d:fa:ea:
1c:6a:d6:a8:4b:25:ef:9d:a2:f4:63:8f:2e:54:4b:7c:01:54:
63:34:2f:9c:9b:5b:4e:67:14:e9:a6:d4:5c:53:0b:a5:66:10:
df:e7:b1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:44:15 2026 by rpki-client