Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: GWRrxl3DypnHVHFxZT8w+ri0v0t3fh4vVyKs2qc7sK4=
Subject key identifier: 44:B3:AB:BD:9D:29:E0:F3:B8:11:54:49:D6:F4:5F:14:E1:CE:FB:DD
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 01A0D539349A40AAA9C24A04D6D8A3CABCB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 1749
Signing time: Thu 24 Sep 2026 21:01:30 +0000
Manifest this update: Thu 24 Sep 2026 21:01:30 +0000
Manifest next update: Fri 25 Sep 2026 21:01:30 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: MEgBFrnErCdwoKNWwGuhVA6p2i5ySxhskmV++9y8/EY=)
2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:34:9a:40:aa:a9:c2:4a:04:d6:d8:a3:ca:bc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Sep 24 21:01:30 2026 GMT
Not After : Sep 25 21:01:30 2026 GMT
Subject: CN=44b3abbd9d29e0f3b8115449d6f45f14e1cefbdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6f:ad:73:2b:13:be:e6:13:28:1c:a1:06:19:
9e:f7:35:55:a5:06:2a:52:1c:b0:48:0f:7d:da:1f:
e7:17:72:a6:6c:9d:8b:70:ed:63:9a:5b:0b:e5:b1:
52:e9:fb:c2:62:a6:7f:98:3f:eb:39:ba:b0:49:e8:
cb:3d:37:b3:c4:72:6a:47:0a:69:d2:f8:49:f7:7a:
38:98:77:e8:fa:cf:af:8b:79:cc:40:c2:aa:a2:81:
41:ac:8b:a6:e4:11:85:d4:f6:9c:06:b8:9d:c5:89:
75:d4:8a:a5:c5:01:82:0c:8f:55:21:8e:33:2c:8f:
45:da:17:9a:9d:f8:f4:98:d2:a6:c6:f1:21:eb:47:
43:58:69:85:13:9f:c9:4c:16:c8:7b:93:78:8f:80:
04:25:7d:f8:c0:0d:72:dd:16:cc:79:90:a0:8a:84:
0c:41:45:45:36:9a:5d:56:a8:8f:c0:d1:d0:21:19:
96:a6:af:d2:2a:3a:e4:c0:eb:72:37:3d:bb:d3:dd:
3c:f5:44:2d:c5:53:ea:a5:fc:1f:17:52:3b:4a:93:
a6:8d:32:03:74:04:98:f6:62:c1:0f:54:79:ac:65:
b2:33:cf:b4:4b:31:57:24:e1:ff:9a:8d:f2:33:13:
09:55:f1:9d:82:28:a7:18:92:04:a1:3f:80:8c:00:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B3:AB:BD:9D:29:E0:F3:B8:11:54:49:D6:F4:5F:14:E1:CE:FB:DD
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:ab:a1:df:e3:06:db:dd:b7:08:94:6f:ba:05:65:09:3e:b8:
92:80:3e:16:1e:71:62:bf:48:5a:d4:80:93:22:72:9a:47:f7:
ef:61:fb:3b:1b:0d:dc:f2:f3:be:cc:52:a2:a1:5a:c6:14:4d:
20:d0:d9:0f:44:ee:e7:12:d0:50:f5:4a:0e:04:83:49:bc:f6:
8c:93:84:0d:e9:55:06:03:42:c0:59:31:b4:ab:21:46:97:63:
fb:2c:f7:e2:a8:53:9f:80:a3:9b:65:bd:18:4f:7a:98:d5:a2:
d2:4a:c9:82:2b:92:6d:9d:90:de:a9:c0:fd:4e:b6:5e:f0:03:
e6:cd:3d:10:19:7f:62:b7:92:fc:de:73:d7:9e:96:8f:14:fb:
63:08:82:10:b5:89:e4:b8:3c:83:30:54:0b:3b:a6:8f:cc:56:
01:07:83:5e:7b:c3:71:db:f3:18:9c:a1:91:89:23:b7:03:07:
90:f3:93:d1:63:93:19:b2:78:c1:88:f6:c5:a4:72:4b:ac:1f:
8b:1d:be:a1:58:d9:f0:59:64:f7:1c:84:67:77:91:66:a0:68:
2c:18:fc:b1:57:b4:c8:b4:28:d6:00:63:29:ed:74:60:cd:37:
df:a1:96:05:0a:da:89:4c:3a:e9:5d:41:fe:f4:f1:ad:1f:e6:
ab:b4:54:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:13:18 2026 by rpki-client