Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
File: QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft (raw, json)
Hash identifier: +2Pv0TVbJRlVWTeL7FPHsAZDSCkWMmKqp5uHIPKGilk=
Subject key identifier: 73:71:8B:ED:7F:45:5E:54:8C:8A:C6:28:23:88:BD:B4:23:6B:16:EE
Authority key identifier: 40:0B:BC:1C:65:4F:D8:8E:04:0A:0F:A7:94:8C:6C:3F:3D:D9:16:D9
Certificate issuer: /CN=400bbc1c654fd88e040a0fa7948c6c3f3dd916d9
Certificate serial: 01A11BD09E552235D5E1C9527F164F11CEF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
Manifest number: 7A
Signing time: Thu 08 Oct 2026 14:00:18 +0000
Manifest this update: Thu 08 Oct 2026 14:00:18 +0000
Manifest next update: Fri 09 Oct 2026 14:00:18 +0000
Files and hashes: 1: QAu8HGVP2I4ECg-nlIxsPz3ZFtk.crl (hash: 79ivIuVqtN0xfJPP/oBHbOUXxhAs2TPdlbQWdWLmkOU=)
2: eaoDxQJvrJYu6cYms8T0nP0nQww.roa (hash: pSWhtvDnivm9h8nEKPtzE2ztIFwGkPLz2VOJgQFEu/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d0:9e:55:22:35:d5:e1:c9:52:7f:16:4f:11:ce:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400bbc1c654fd88e040a0fa7948c6c3f3dd916d9
Validity
Not Before: Oct 8 14:00:18 2026 GMT
Not After : Oct 9 14:00:18 2026 GMT
Subject: CN=73718bed7f455e548c8ac6282388bdb4236b16ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9e:5a:09:71:5f:b5:95:51:8d:e2:12:e2:16:
7c:c5:c6:7b:90:9d:13:71:97:59:05:05:3a:0e:ce:
f8:0e:81:6e:f3:cb:3b:a0:4b:93:df:b7:94:5d:70:
d3:65:7e:51:12:ce:35:15:71:8d:67:e5:62:55:e2:
84:98:79:d5:c5:dc:e9:b1:fb:52:6f:b6:00:ef:a4:
6f:e0:ef:ed:cf:73:48:0b:04:5a:13:3b:87:2b:c0:
9f:3a:22:2f:6e:b4:30:c4:51:bb:dd:af:30:2b:6c:
4d:aa:77:5a:f5:e7:38:58:08:79:11:a6:55:73:d7:
9a:49:8c:67:7a:05:cf:59:10:ac:80:b3:c1:bf:a0:
ba:d1:7a:20:7e:f2:1b:b4:d8:c3:56:cf:48:81:d1:
f5:64:03:a6:73:83:0a:60:81:74:58:e0:04:b1:7c:
b6:5a:e2:5d:56:44:73:bf:eb:af:96:aa:56:9c:37:
9d:69:20:67:19:d1:c5:8f:aa:e7:8f:8f:40:89:e5:
80:58:86:97:3d:52:92:a1:75:38:2b:56:06:43:78:
51:d9:73:7f:9f:bf:8b:94:73:60:5b:52:46:c0:57:
4f:a5:52:c9:1a:30:98:1b:b6:dc:48:7e:16:ed:e6:
ce:d3:e4:6a:88:51:ca:36:4e:3b:09:7f:9d:4b:f0:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:71:8B:ED:7F:45:5E:54:8C:8A:C6:28:23:88:BD:B4:23:6B:16:EE
X509v3 Authority Key Identifier:
keyid:40:0B:BC:1C:65:4F:D8:8E:04:0A:0F:A7:94:8C:6C:3F:3D:D9:16:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:2c:0f:c4:a9:75:b6:d6:27:3d:14:cb:4b:49:4a:53:75:7c:
66:a8:c2:f6:80:db:db:c1:35:5f:d7:5f:ba:bf:5b:e2:a3:d3:
e8:69:9d:99:fb:b1:d4:14:05:27:2f:f4:30:4e:d9:67:06:d2:
b6:29:91:3a:8d:29:96:6d:40:2c:49:b5:e3:4c:18:cb:88:52:
9a:68:02:c8:26:4b:16:9f:b0:6d:8b:6b:b3:aa:5b:cb:af:85:
8e:a5:aa:9e:2a:23:9a:00:73:d9:e7:09:df:5e:e9:6b:a3:f9:
32:3d:73:91:eb:1f:39:df:92:f3:7d:04:97:41:d5:65:32:f4:
f4:a4:f1:e0:dc:e1:bd:0b:f2:ea:e9:31:99:a8:e2:e5:b0:a3:
c2:20:4f:59:be:b8:94:9c:a4:09:e7:15:53:f1:93:01:ea:d1:
c8:1a:f9:67:6c:b0:f7:49:e4:fe:e8:a7:9c:4b:0b:f1:62:e3:
55:f3:02:fc:ad:5e:a1:dd:d3:84:7b:60:a0:79:03:7b:1b:66:
dc:ba:08:d3:dc:77:a2:85:71:38:a2:46:cd:82:8b:6d:6b:fe:
ce:75:e1:f7:c9:11:ea:cc:b5:5f:27:d8:c1:ab:ad:8c:79:55:
52:31:dc:be:b5:9b:60:11:6b:1f:a8:57:b7:83:c0:31:f3:b7:
1a:83:81:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:32:06 2026 by rpki-client