Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: wZmPsR/pF00kQPWQqDheRmgNyTFuVp1VXiuiA+1ke/w=
Subject key identifier: BE:2C:89:14:19:CD:22:FC:5C:4D:41:E1:0E:51:9B:C0:D8:E1:62:0E
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 01A11B2BD635186CEA9066A05415E85E1469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 1298
Signing time: Thu 08 Oct 2026 11:00:20 +0000
Manifest this update: Thu 08 Oct 2026 11:00:20 +0000
Manifest next update: Fri 09 Oct 2026 11:00:20 +0000
Files and hashes: 1: 41UHcYawFZ6dwCf_FfKVxB6pAyA.roa (hash: mxz0vZfXkFbrjS45D2R+Mi2lF9MSSxAbkahXO8KfBYc=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: S55Avv/fTZG61TdmUN7Evdhe8Tt5RdeSxPG2XEV5OW0=)
3: gDO3yGlii3vGStP0g8IXSinnODc.asa (hash: 4GKXfRU/6q53CGfLh+IE//Y0yEXtQGF8Ot458LYjOwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:2b:d6:35:18:6c:ea:90:66:a0:54:15:e8:5e:14:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Oct 8 11:00:20 2026 GMT
Not After : Oct 9 11:00:20 2026 GMT
Subject: CN=be2c891419cd22fc5c4d41e10e519bc0d8e1620e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8e:47:35:49:de:da:c8:e1:1d:1c:d6:0c:fc:
1f:48:59:ba:55:da:27:1e:ec:c9:28:fb:ed:25:34:
63:8c:86:d2:d8:5d:b6:57:ff:25:b0:be:6f:38:6c:
47:72:f7:59:41:96:bb:8b:f1:79:24:00:ba:32:a4:
b3:47:bd:6a:6b:fa:b5:6a:6c:05:27:31:19:db:a6:
45:d2:4c:9e:9a:99:9e:91:a1:af:24:f8:c6:7d:75:
ea:64:1f:9e:8d:20:3a:e2:17:af:fb:a1:de:64:2f:
60:15:fa:1a:55:ac:a8:d2:18:b9:44:7b:35:91:8a:
24:7f:8c:2d:f7:bc:aa:15:13:4f:62:3f:0e:58:85:
a8:1c:71:85:48:39:3b:35:71:a8:a4:d4:7f:4a:1b:
a6:66:90:29:c8:9c:82:74:5f:a6:73:0e:07:cc:54:
77:9b:8b:5d:64:4e:c0:4a:f1:12:0f:21:79:d7:36:
8f:71:17:5f:e7:8f:81:33:ec:c0:9b:1e:da:70:d7:
f3:b1:33:42:f4:20:e6:56:f0:10:00:5b:bb:36:70:
70:3e:22:13:46:1f:99:a2:bc:b6:06:9c:e7:a4:75:
ea:be:1b:4f:2f:43:14:0f:fb:4a:e7:d2:ab:dc:9c:
0a:64:a1:21:8a:d2:9e:32:70:69:7e:02:3e:a2:33:
f9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2C:89:14:19:CD:22:FC:5C:4D:41:E1:0E:51:9B:C0:D8:E1:62:0E
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c2:45:fa:8d:17:b3:a3:4c:09:52:35:20:24:8f:64:1e:81:
85:90:74:4f:17:65:29:ae:56:52:43:e9:51:c8:c1:0c:5d:9f:
92:9c:50:2b:e1:2a:9d:4c:9a:22:0b:24:50:18:47:97:66:66:
68:fa:90:36:2e:1e:7e:7f:29:71:1c:bb:67:5b:7d:04:aa:47:
37:4a:0f:21:fd:df:26:58:3c:31:9e:1f:50:d9:57:d3:37:64:
bc:5d:28:0a:e6:7a:bd:f3:ec:50:ea:2e:89:b4:2a:82:57:6f:
51:50:f3:07:6c:ec:ef:7b:1b:17:da:ed:bb:93:b5:80:45:34:
a7:cc:0d:0d:87:53:6f:1f:76:0e:b6:d2:c4:92:75:3e:18:0d:
bd:a1:b9:ff:b4:f9:39:41:d7:b1:e0:4d:18:3e:79:db:52:5a:
30:0e:68:3e:b8:a1:f3:f1:db:03:bb:3e:ee:41:a5:b3:53:a5:
94:0b:dd:27:06:fa:95:e9:b2:28:d9:aa:75:10:f9:33:96:e1:
b8:a8:58:e5:36:06:17:7a:79:69:7a:c7:8f:23:2c:1f:73:22:
93:c4:10:5e:f7:1d:b7:a2:ed:e6:dd:d7:d3:06:e4:43:98:19:
1d:48:ad:62:27:53:fc:c9:48:cd:88:37:f3:6b:b2:ec:26:88:
9a:99:ac:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:01:54 2026 by rpki-client