Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
File: QpXD7wDP_s4vcbYZkcbG09pJwRA.mft (raw, json)
Hash identifier: WhNqjdhLQzv3lJOtgvVB3MXIdRSvra7FLrJqUNYNWaU=
Subject key identifier: 81:D2:17:B0:B0:2B:94:7A:99:2D:D2:D2:00:B0:B6:AB:9B:F3:D3:98
Authority key identifier: 42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
Certificate issuer: /CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Certificate serial: 01A1076F34396F64240FE7DF2965E13B86F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
Manifest number: 0772
Signing time: Sun 04 Oct 2026 15:01:30 +0000
Manifest this update: Sun 04 Oct 2026 15:01:30 +0000
Manifest next update: Mon 05 Oct 2026 15:01:30 +0000
Files and hashes: 1: BIcN5aoAOl1KvHqrpwSgfpe3bKQ.roa (hash: lnNlQg8amQO6kFSvzSOC3nKLC4UQiHYnnxg5VQ58z58=)
2: QpXD7wDP_s4vcbYZkcbG09pJwRA.crl (hash: zaBorEeOeavlD+SOEw7TPSt3twhjQU17pU9yr0Ze5Oo=)
3: mFfXpLKFugPnpjv01dOdi4FA4Gw.roa (hash: 3g2SXGJpuzV1vU10pMqGPocyoDuCUv6hUHSIZHwoqs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6f:34:39:6f:64:24:0f:e7:df:29:65:e1:3b:86:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4295c3ef00cffece2f71b61991c6c6d3da49c110
Validity
Not Before: Oct 4 15:01:30 2026 GMT
Not After : Oct 5 15:01:30 2026 GMT
Subject: CN=81d217b0b02b947a992dd2d200b0b6ab9bf3d398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f1:b2:13:ea:9d:91:9f:46:c7:0a:ab:c6:37:
fa:3f:73:b4:b1:07:c1:b6:e7:4b:ca:ab:74:d3:a3:
83:f6:00:36:59:1d:21:bc:8f:7d:fa:53:45:1d:2e:
99:03:63:a3:c6:b4:e0:43:38:d3:07:3f:98:7d:27:
d2:d2:4a:50:da:33:da:9a:e4:cf:0a:3d:72:db:9c:
12:11:d3:f9:93:21:82:1a:3a:67:33:5c:64:53:1e:
65:67:bf:c1:a2:a4:0a:c0:dc:09:da:53:17:47:9b:
97:f3:d9:6c:74:cc:ab:58:ab:b6:2c:f3:83:9a:7f:
83:5d:8c:4b:e9:ee:b4:54:ca:64:b4:9b:fc:d7:29:
83:3f:c4:8f:f4:f7:da:c8:75:e2:85:72:7c:0c:97:
1b:4f:ab:3a:ed:6a:cf:d2:94:e6:f0:9a:1e:75:9c:
57:c0:a9:e9:37:39:85:fc:18:ec:17:28:4f:1a:1e:
75:01:64:7d:69:cf:4b:90:5e:64:4d:8d:2b:25:8b:
70:93:e8:e2:77:31:9f:00:5c:03:a8:2b:5a:39:1f:
33:f3:e4:ff:97:fb:58:db:70:eb:94:9b:d2:b1:7d:
47:53:57:fa:1a:29:b8:d4:64:6a:f1:5d:b5:16:93:
a2:87:e9:ae:8b:ea:69:02:3f:c4:e0:a9:cf:66:41:
5e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D2:17:B0:B0:2B:94:7A:99:2D:D2:D2:00:B0:B6:AB:9B:F3:D3:98
X509v3 Authority Key Identifier:
keyid:42:95:C3:EF:00:CF:FE:CE:2F:71:B6:19:91:C6:C6:D3:DA:49:C1:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpXD7wDP_s4vcbYZkcbG09pJwRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3c7f83-bc28-4282-aa02-969f2a00ede0/1/QpXD7wDP_s4vcbYZkcbG09pJwRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:37:d0:b8:74:d7:c7:a3:23:dd:b6:47:0d:f6:00:e7:37:40:
f7:bb:df:92:a3:10:00:39:1f:01:b3:40:53:73:c9:4e:21:12:
51:da:d0:56:6c:7b:c5:6c:de:2e:28:91:75:e2:0f:89:d4:81:
c7:5c:52:f1:65:48:0c:e0:e6:06:00:1c:91:a7:c7:83:ce:d4:
a4:6b:06:f0:eb:d6:06:fd:b0:98:40:ef:f6:40:15:b0:f4:ad:
ed:ba:70:cd:73:b6:8b:f6:a7:ae:9e:0b:e4:6e:12:89:3e:27:
e1:77:4a:87:7f:2a:5f:8c:8b:04:c8:b7:d4:21:b8:7c:71:c7:
97:b5:5a:1a:79:55:ff:ef:be:d1:fc:39:43:ce:17:ee:67:14:
20:4e:a8:23:8d:e4:40:e6:2b:2c:79:ba:0d:9b:80:1d:75:d9:
98:1d:e0:d2:0e:da:4c:97:f4:90:a4:fa:d2:ce:5d:d4:79:a0:
da:10:4a:d4:42:53:f2:c8:49:7a:3c:65:48:d4:fe:76:ac:1b:
b8:f8:9e:59:58:95:e6:27:49:5f:21:30:a7:d0:39:d2:60:fc:
20:8d:0e:9f:88:ef:4a:4a:d3:6d:9f:cd:a2:ae:8d:88:85:59:
d6:67:d5:48:71:06:b6:ac:0e:fc:81:8c:7d:ad:5e:29:cd:9a:
7f:cf:05:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:44:14 2026 by rpki-client