Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
File: QCyplx1qX35ZZL1aNMsFhXPBJjc.mft (raw, json)
Hash identifier: /WxyKy0act2EmbYNfSodcI+O23GgIMsJCYv2N0OnUEM=
Subject key identifier: 74:88:AD:28:08:AF:0F:3E:E7:81:68:91:74:B4:EC:31:ED:26:D5:5A
Authority key identifier: 40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
Certificate issuer: /CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Certificate serial: 01A1065C70C592EAD2EC1CEF199659C4651F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
Manifest number: 0493
Signing time: Sun 04 Oct 2026 10:01:23 +0000
Manifest this update: Sun 04 Oct 2026 10:01:23 +0000
Manifest next update: Mon 05 Oct 2026 10:01:23 +0000
Files and hashes: 1: A7X8g3OhgGqnnbr-0WIRET4xYAw.roa (hash: kbb2YQ9dHJjmfvC79NiEO4ENeqQEa58hlnvuoRfRlxI=)
2: QCyplx1qX35ZZL1aNMsFhXPBJjc.crl (hash: 4xCW0k6g/hZ9bAKiQtBUSXUYkv+n6/HSn6LIKfdaSmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:70:c5:92:ea:d2:ec:1c:ef:19:96:59:c4:65:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402ca9971d6a5f7e5964bd5a34cb058573c12637
Validity
Not Before: Oct 4 10:01:23 2026 GMT
Not After : Oct 5 10:01:23 2026 GMT
Subject: CN=7488ad2808af0f3ee781689174b4ec31ed26d55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:d8:95:6e:b8:ae:b8:ea:68:89:48:07:c9:
d6:84:4d:af:88:17:61:13:d5:7d:9c:d7:fc:cf:22:
0c:9a:85:e9:e7:49:f5:b5:2b:0c:68:f5:c4:58:3c:
59:ad:bd:88:1d:46:c6:1f:08:8f:03:9f:9f:26:25:
a9:c7:dd:3e:e3:91:03:4c:2c:0c:0d:7d:1c:c4:96:
7d:df:ba:a7:5e:b3:eb:f3:76:03:37:0f:7d:92:bd:
50:20:af:68:a0:b8:ce:e4:68:76:ed:ca:88:e1:1e:
9e:23:69:b6:90:00:0d:89:eb:ce:c0:4a:df:0c:b3:
03:90:33:1e:7f:ed:03:dc:64:a6:ff:b9:77:ef:a7:
f9:9a:0f:9e:39:fd:1b:0e:93:14:c7:a8:7b:b6:2c:
10:ce:a7:ca:69:8e:a6:f5:ee:80:4c:92:85:9d:9e:
8b:77:27:47:5d:1e:ed:00:b2:86:dd:2d:b1:64:15:
f8:d4:58:ab:7f:38:c6:c3:50:ff:23:de:52:d0:aa:
30:60:c7:2f:b3:42:d2:12:c4:70:8f:30:08:bf:aa:
62:ab:cb:9a:9c:c0:9d:8a:e9:26:45:2c:79:cb:ca:
ae:4f:fe:e2:fd:2b:e7:30:53:02:9e:62:d5:ba:31:
a2:3d:97:2a:80:f4:cf:63:ea:e8:99:46:d1:81:a3:
dd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:88:AD:28:08:AF:0F:3E:E7:81:68:91:74:B4:EC:31:ED:26:D5:5A
X509v3 Authority Key Identifier:
keyid:40:2C:A9:97:1D:6A:5F:7E:59:64:BD:5A:34:CB:05:85:73:C1:26:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QCyplx1qX35ZZL1aNMsFhXPBJjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/78c5f6-0e43-4245-9c70-42385820f8b3/1/QCyplx1qX35ZZL1aNMsFhXPBJjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:34:59:1c:57:07:ba:fa:ef:cf:2f:c5:35:6b:0c:05:b5:62:
f3:1d:11:d7:a4:e4:94:95:d1:10:93:c5:c0:b3:2a:3d:1e:76:
dd:02:56:e5:e8:db:f1:ee:08:f0:aa:8e:32:9d:02:1c:e1:55:
54:d6:00:9f:d0:bd:38:38:1c:bd:e3:2a:9e:a4:9a:e3:46:8a:
24:fd:f9:82:e8:27:54:a1:9d:45:23:e0:cd:91:d4:6f:ad:c8:
11:bc:5e:81:d3:21:4c:fb:98:3b:2d:19:f4:85:45:27:5b:25:
5e:f7:dd:5a:db:77:de:43:98:6a:ba:68:a1:ab:0a:d9:9b:55:
c0:67:83:83:cf:68:c2:92:8f:20:41:12:ee:d9:18:d6:7f:85:
93:07:e1:fb:3e:6c:53:04:2d:a4:c3:6b:8b:31:97:4f:df:35:
2c:11:03:62:5e:7e:8e:9e:60:9f:5f:34:8d:ec:30:7a:52:0b:
7f:d9:ab:25:ba:21:97:c3:63:7a:b2:41:d4:ce:d9:72:df:a8:
a1:10:02:27:bd:a9:3e:56:1a:2c:b6:da:46:d2:e4:ba:e1:8c:
ee:12:06:7f:95:4c:8b:c9:ac:0a:32:3b:08:06:d2:c8:82:dd:
f2:d1:7d:8d:2f:e9:4d:f7:b3:48:88:c7:72:32:63:36:19:45:
70:4b:67:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGXHDFkurS7BzvGZZZxGUfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMmNhOTk3MWQ2YTVmN2U1OTY0YmQ1YTM0Y2IwNTg1NzNj
MTI2MzcwHhcNMjYxMDA0MTAwMTIzWhcNMjYxMDA1MTAwMTIzWjAzMTEwLwYDVQQD
Eyg3NDg4YWQyODA4YWYwZjNlZTc4MTY4OTE3NGI0ZWMzMWVkMjZkNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9XYlW64rrjqaIlIB8nWhE2viBdh
E9V9nNf8zyIMmoXp50n1tSsMaPXEWDxZrb2IHUbGHwiPA5+fJiWpx90+45EDTCwM
DX0cxJZ937qnXrPr83YDNw99kr1QIK9ooLjO5Gh27cqI4R6eI2m2kAANievOwErf
DLMDkDMef+0D3GSm/7l376f5mg+eOf0bDpMUx6h7tiwQzqfKaY6m9e6ATJKFnZ6L
dydHXR7tALKG3S2xZBX41FirfzjGw1D/I95S0KowYMcvs0LSEsRwjzAIv6piq8ua
nMCdiukmRSx5y8quT/7i/SvnMFMCnmLVujGiPZcqgPTPY+romUbRgaPdbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSIrSgIrw8+54FokXS07DHtJtVaMB8GA1UdIwQY
MBaAFEAsqZcdal9+WWS9WjTLBYVzwSY3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAt
NDIzODU4MjBmOGIzLzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi83OGM1ZjYtMGU0My00MjQ1LTljNzAtNDIzODU4MjBmOGIz
LzEvUUN5cGx4MXFYMzVaWkwxYU5Nc0ZoWFBCSmpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALjRZHFcH
uvrvzy/FNWsMBbVi8x0R16TklJXREJPFwLMqPR523QJW5ejb8e4I8KqOMp0CHOFV
VNYAn9C9ODgcveMqnqSa40aKJP35gugnVKGdRSPgzZHUb63IEbxegdMhTPuYOy0Z
9IVFJ1slXvfdWtt33kOYarpooasK2ZtVwGeDg89owpKPIEES7tkY1n+Fkwfh+z5s
UwQtpMNrizGXT981LBEDYl5+jp5gn180jewwelILf9mrJbohl8NjerJB1M7Zct+o
oRACJ72pPlYaLLbaRtLkuuGM7hIGf5VMi8msCjI7CAbSyILd8tF9jS/pTfezSIjH
cjJjNhlFcEtn6A==
-----END CERTIFICATE-----
Generated at Sun Oct 4 20:07:05 2026 by rpki-client