Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier: 0QNC3UMgYbAfTJHc5I/++ObL953e/7XtEL5Fg0ohFSs=
Subject key identifier: 3B:18:FF:82:24:8D:0D:B1:B3:FB:5E:48:4E:D6:75:55:B2:CF:12:43
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 01A107DCFB0982A1A49F9F6660CA02676732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number: 0845
Signing time: Sun 04 Oct 2026 17:01:24 +0000
Manifest this update: Sun 04 Oct 2026 17:01:24 +0000
Manifest next update: Mon 05 Oct 2026 17:01:24 +0000
Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: B8rbQ7D/AEDUV3bkDRZNA50tr1Zzb9S/jDvbu333bto=)
2: mIEKfqcwzKGnUqM9s4OdPs7YrbA.roa (hash: buVxIPz10EIVfwpYwh+P1ZYqWF3K+n7bUAR0sR0jGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dc:fb:09:82:a1:a4:9f:9f:66:60:ca:02:67:67:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: Oct 4 17:01:24 2026 GMT
Not After : Oct 5 17:01:24 2026 GMT
Subject: CN=3b18ff82248d0db1b3fb5e484ed67555b2cf1243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:04:39:eb:b9:a3:f0:e1:2b:5e:f6:fc:9c:
c3:7a:c1:8c:30:df:48:c5:63:67:f0:29:0d:2f:cd:
de:b7:19:ef:28:b0:ad:ef:fd:81:32:9e:3c:66:9a:
f0:35:2c:7c:30:40:d8:df:55:50:16:da:52:44:fd:
48:6a:61:6f:7f:16:b5:bf:15:c9:46:0f:80:cc:38:
7d:b3:0c:c3:58:f6:de:75:2a:25:9c:e5:27:73:05:
b5:d7:19:97:e5:ad:92:8b:ae:7c:74:fd:9e:51:97:
3f:94:2d:be:87:ec:49:03:fb:f5:2a:80:c4:1b:5d:
18:f2:88:4f:4b:9a:31:c5:17:32:49:ef:40:d0:e9:
f9:8e:61:e7:ca:23:ca:d2:c2:92:9e:7c:36:b6:6f:
a1:84:0d:39:9d:12:75:4f:c5:27:a2:6d:e3:21:2f:
eb:72:5e:f5:b2:b3:a3:95:10:dc:b1:93:1f:64:1b:
a5:a1:6f:f4:3e:23:ef:e2:50:d3:8a:e8:d6:cb:98:
c8:2d:11:02:e0:0f:8e:57:61:28:ae:ff:04:48:da:
9a:ca:22:34:b8:26:e2:7f:19:15:e4:4c:b3:54:32:
db:16:c7:d2:a1:e9:e1:10:26:3a:b2:56:25:f0:e8:
39:91:53:ba:b4:25:18:0e:c4:e7:47:6b:dd:d8:c7:
2a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:18:FF:82:24:8D:0D:B1:B3:FB:5E:48:4E:D6:75:55:B2:CF:12:43
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:a9:ff:e5:d3:34:de:73:62:ea:6f:22:aa:2f:1c:3f:4c:ec:
93:ef:e5:87:fb:0d:d3:94:40:a9:77:17:88:b2:ea:bb:38:57:
60:80:0c:7c:66:ff:f4:de:b6:51:59:fe:01:8b:27:9d:de:02:
dc:d7:74:0f:90:b6:af:48:20:32:64:36:ab:93:4c:fc:e9:72:
89:fd:08:bb:3c:78:ed:29:d4:73:4c:24:6a:6c:1c:01:cb:61:
5a:b5:10:16:56:38:dc:fb:49:61:d4:f6:a0:d3:b0:fd:62:09:
2e:93:62:53:47:7b:27:9f:54:87:33:68:96:77:4e:4e:00:fb:
b4:08:1e:90:6f:01:d9:0b:dc:cd:e1:1a:1a:c4:89:8f:50:f2:
31:be:2a:aa:ed:4a:d0:25:7f:39:f6:12:1b:54:79:cb:00:79:
24:dc:b6:f8:7a:ad:da:ec:f2:00:df:1a:d2:0a:c0:1a:c0:0d:
83:19:44:86:81:d3:56:02:d8:d4:29:d8:46:86:7b:a1:c2:cb:
65:da:d3:68:7a:81:38:c5:73:3b:34:70:1a:4d:14:98:ed:3e:
57:7b:bf:03:70:5b:e2:68:e1:9a:c7:ee:5d:f4:92:56:9d:78:
d9:ed:c6:31:0a:2f:ac:ea:7b:29:17:94:ca:63:9f:5d:de:8d:
01:46:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:04:43 2026 by rpki-client