Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: NzU6Mgrg0T6LVx69NZ6JRD1M5e5y1yHrC/QPVL4zq0c=
Subject key identifier: C2:9B:F3:BA:EF:59:E8:D8:93:29:CA:CE:EC:F6:92:F8:9A:2B:C4:DF
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 01A12D69A75CE3280F908DF6936AA8CF6C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 1A9C
Signing time: Mon 12 Oct 2026 00:01:01 +0000
Manifest this update: Mon 12 Oct 2026 00:01:01 +0000
Manifest next update: Tue 13 Oct 2026 00:01:01 +0000
Files and hashes: 1: NMKwSUUrM8k8eQKWjQoXhVr67Q0.roa (hash: CYXCafl1+25dso4rJFuju+aK/xutXRo5p4nK7eGdbTw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: ONGhFeOFOSEO0R9cmFW71alBD9hPQ/xSlAoYAQMXTJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:69:a7:5c:e3:28:0f:90:8d:f6:93:6a:a8:cf:6c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Oct 12 00:01:01 2026 GMT
Not After : Oct 13 00:01:01 2026 GMT
Subject: CN=c29bf3baef59e8d89329caceecf692f89a2bc4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bc:b3:6d:c4:c4:ad:0d:a9:07:77:b4:4e:bd:
4d:46:9f:80:9d:34:f3:00:0a:c4:95:f7:b9:9b:91:
d6:0d:c4:45:1e:28:52:3e:a2:eb:7e:a1:35:86:e9:
07:f0:12:ae:ac:b3:32:57:41:be:2b:3b:87:4e:d1:
64:71:bc:a6:a6:df:a8:15:dc:f0:10:58:d1:da:42:
64:53:88:59:e0:0e:b3:61:f3:42:0b:38:ad:22:95:
d5:35:9d:d5:89:31:40:5e:c4:b7:b9:04:91:fd:8e:
4b:58:d1:bb:32:04:1a:6c:17:dc:c5:19:55:9d:04:
36:30:ba:03:07:75:31:af:f0:a7:cd:d7:80:bf:bb:
17:d9:a1:b5:e8:fc:32:03:81:6a:0e:3b:3e:11:24:
d0:ca:f1:ea:0f:67:e6:41:0d:1c:2c:53:f2:ad:bd:
14:d3:a9:5f:1d:ee:98:11:d0:7e:15:82:98:6d:9d:
65:2d:02:44:09:14:f1:84:c7:cf:53:6a:04:fd:30:
ee:3e:3e:12:24:7f:6a:f3:3e:d8:5a:f1:bc:4b:30:
72:d7:f9:69:72:2c:6c:c1:64:36:b7:3a:d6:5a:51:
16:63:8c:db:c6:b9:22:3d:21:94:d5:26:8f:7d:6b:
0c:53:78:6b:27:45:d2:2a:b7:d8:de:ed:82:6f:76:
88:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9B:F3:BA:EF:59:E8:D8:93:29:CA:CE:EC:F6:92:F8:9A:2B:C4:DF
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f4:02:b2:cc:a7:e3:32:68:81:8a:1f:b4:16:1f:a8:94:35:
c8:f8:c3:cd:89:a9:c2:cb:43:e4:f7:e7:05:86:cc:ae:7c:88:
e3:2b:38:49:47:5e:eb:da:47:64:30:81:83:e8:5d:32:2f:c6:
f3:f1:e9:4c:48:90:7b:6e:49:95:df:90:d7:3e:5f:cd:b8:bb:
0a:19:f8:cd:db:b5:db:62:04:9c:78:a8:a1:22:79:29:36:28:
a6:f6:f3:58:bb:42:73:91:57:b8:59:86:4a:e5:5d:1c:fe:f0:
32:31:5c:5f:4c:23:42:8e:1f:0f:29:24:6e:dc:58:a1:4d:06:
5d:9d:07:3e:ae:8b:91:0f:97:d8:db:66:fe:e1:e1:53:7c:5d:
80:0f:a8:4a:72:24:2c:77:61:84:51:88:1f:0d:c4:3a:bc:36:
2e:87:66:6a:c6:d6:f1:d5:5b:05:be:7d:c7:9a:48:09:82:f3:
b8:97:98:e3:25:ae:05:ce:78:c7:8e:48:8f:f3:2b:d5:25:de:
8b:a0:d2:58:cf:96:67:b4:29:6e:e8:5d:83:31:e7:20:ed:b9:
5a:fd:60:8e:65:67:e7:ab:b7:69:24:f1:34:81:aa:23:6a:61:
e2:f5:62:1c:68:54:f7:f1:bc:51:28:ab:40:d4:0c:2d:17:5e:
29:10:5f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 10:48:48 2026 by rpki-client