Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
File: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft (raw, json)
Hash identifier: WJGrTkoKxsSW8i8vaLTJYnySPw780hPElwiSVH5dOUc=
Subject key identifier: 41:44:5D:28:E5:73:35:9B:F1:28:5A:18:92:E2:A9:AB:5C:AA:D9:D9
Authority key identifier: 40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
Certificate issuer: /CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Certificate serial: 01A100238505F89714D35F9910A014D04F8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
Manifest number: 135C
Signing time: Sat 03 Oct 2026 05:01:29 +0000
Manifest this update: Sat 03 Oct 2026 05:01:29 +0000
Manifest next update: Sun 04 Oct 2026 05:01:29 +0000
Files and hashes: 1: 4ryD7ofmQrN3Mqeu7FPqqWRiYsE.roa (hash: q+5ychHqPBM+eMaL8WGUlpDBY/rhlRPXMm2CsfC21Bk=)
2: ORhpsoGrJDtd4dSX8wo8j8MueNc.roa (hash: Ea9U9BiaJTwEkaiRq8X+h6S8mcjyQT3ldp1ldkiJibY=)
3: QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl (hash: xpWGKb/0E9uLQLSFc2gi5qtXQKrA01fM0xiS3/Pxvjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:23:85:05:f8:97:14:d3:5f:99:10:a0:14:d0:4f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f872e4cdb07d6839147e43a4a419bc84ba3214
Validity
Not Before: Oct 3 05:01:29 2026 GMT
Not After : Oct 4 05:01:29 2026 GMT
Subject: CN=41445d28e573359bf1285a1892e2a9ab5caad9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a3:56:22:5e:ce:a9:83:c9:80:82:79:37:a7:
b3:e5:9b:8c:b0:6e:e8:ec:03:f5:55:53:03:69:09:
75:c1:19:a0:3c:7c:40:94:42:53:44:5b:57:11:44:
9c:79:b0:e5:52:e9:18:a4:7d:c9:a2:11:eb:b9:2f:
70:29:ad:df:6e:98:07:77:1c:c0:fa:65:41:3e:68:
ed:e8:cb:30:af:07:d1:44:7e:2f:04:52:82:67:52:
66:c5:0d:d0:cb:7d:c7:68:0b:a3:10:2c:92:af:f1:
54:e8:03:a2:55:77:d0:21:08:a8:48:49:ff:77:f9:
cc:99:63:ab:69:5c:f2:82:91:2d:31:54:67:74:9e:
00:0f:f5:4a:90:bc:2b:c9:87:91:e1:09:94:ce:ba:
8f:54:63:22:57:b4:9d:44:cc:25:6a:6f:38:ed:75:
1c:2b:83:7d:1d:ed:d5:dc:59:5e:ad:27:fe:16:b2:
13:aa:60:7e:2b:99:49:a5:08:93:b2:2a:cd:66:23:
be:1f:ae:5c:ab:e1:5b:bd:7f:95:a2:a1:3e:b8:8c:
9f:eb:63:83:15:6b:dc:05:d6:78:94:c5:34:9f:9f:
5f:92:0d:50:0c:ac:14:8e:85:75:88:38:a1:95:88:
bc:63:19:e1:96:ba:f3:b7:a4:53:b3:5f:ab:aa:6f:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:44:5D:28:E5:73:35:9B:F1:28:5A:18:92:E2:A9:AB:5C:AA:D9:D9
X509v3 Authority Key Identifier:
keyid:40:F8:72:E4:CD:B0:7D:68:39:14:7E:43:A4:A4:19:BC:84:BA:32:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/5c92d5-a7eb-4929-ae19-da138ade222b/1/QPhy5M2wfWg5FH5DpKQZvIS6MhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:7b:ba:fa:e5:db:36:c8:01:e9:04:f0:8b:5a:13:38:4f:bf:
2e:03:1a:be:9b:7a:5e:19:f1:5a:6e:59:89:ba:95:58:e6:d9:
36:6d:a9:63:e1:99:a7:04:8f:91:dd:8a:0e:4b:b9:8b:73:2a:
e6:dd:ce:e3:fc:b7:7a:2e:76:54:d0:9e:62:8b:53:75:2b:ce:
88:e8:a3:d7:79:11:91:cf:c1:94:9d:97:ad:41:b8:9f:b4:36:
09:12:06:d8:90:a0:e0:4a:02:e4:04:dc:ef:9c:b5:bb:da:9f:
d0:64:4b:ad:24:9b:57:8c:14:e9:5b:74:0b:95:e0:3f:ea:e3:
a3:31:05:0b:d5:89:41:f2:83:60:f7:a4:90:12:7e:28:be:47:
4c:2b:64:99:24:e6:23:17:a6:05:44:ca:17:c5:8f:a9:5b:72:
7e:e2:66:6d:de:6b:8b:b9:7e:68:8c:0a:ca:d0:d1:6b:84:dc:
4a:3c:80:03:c1:87:ae:3e:b6:d1:12:34:e1:57:cc:31:13:75:
64:04:db:a0:99:1f:7a:e7:15:35:9e:31:7e:40:e3:95:9e:36:
b6:14:34:56:a7:07:3b:4f:9a:a2:ea:13:26:53:7e:83:b2:84:
78:60:e1:4c:bc:27:c7:5f:eb:05:4c:c0:05:4e:4b:c5:05:3b:
b5:92:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:41:43 2026 by rpki-client