Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: OHp0upCy87cDANrztcTjNtB1kf5AJwj3WgfPspFN9AY=
Subject key identifier: 42:C4:06:C1:9E:8B:27:4E:B3:EC:D4:F0:83:9E:A4:F6:C8:B1:AF:CF
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 01A10A025F33FE25CB1D2A2345BEB2326913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 1A8E
Signing time: Mon 05 Oct 2026 03:01:29 +0000
Manifest this update: Mon 05 Oct 2026 03:01:29 +0000
Manifest next update: Tue 06 Oct 2026 03:01:29 +0000
Files and hashes: 1: 16Of3nkjMP8UdSS9id5ZJPl_uic.roa (hash: 3kAPeMDB74ONzDFPUBPrWjZx5ADHmGueRoPekMbbEgg=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: jBBF5T0XugsT4sgln+zgv2gLPLCV+VcivA22G1pevtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:02:5f:33:fe:25:cb:1d:2a:23:45:be:b2:32:69:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Oct 5 03:01:29 2026 GMT
Not After : Oct 6 03:01:29 2026 GMT
Subject: CN=42c406c19e8b274eb3ecd4f0839ea4f6c8b1afcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fa:6e:7c:12:24:5f:c6:a8:b4:44:75:b2:45:
19:aa:96:f4:71:aa:fd:01:a1:00:25:6c:5f:2d:49:
81:2c:83:ae:bf:c7:c7:de:a5:d1:a9:9b:59:1a:ac:
91:1a:98:59:7b:cb:7e:c5:7d:0f:2d:10:d5:2c:97:
46:ac:26:28:f7:03:9d:af:38:a2:6d:17:6b:22:0e:
a3:96:13:cb:eb:84:25:d6:97:29:73:6e:54:fd:16:
b6:51:d5:0b:a7:75:c6:0d:bf:d8:48:1e:7c:44:65:
28:58:2c:f4:3e:b3:29:5c:23:1e:7a:f2:f4:94:ec:
34:29:37:f7:4e:83:e4:3d:09:cd:08:8f:27:14:8a:
fe:34:2d:c1:14:cc:68:ea:5e:2e:b2:99:34:4f:a6:
4a:3f:db:a4:c1:be:ab:6a:e6:01:6d:f8:a1:3b:40:
33:7f:86:a0:33:b2:00:55:47:9e:50:44:7b:b3:60:
36:9d:18:5b:01:c3:47:e8:6d:09:40:6d:6d:81:84:
00:9e:5d:b7:a5:25:f3:0f:1e:7d:c1:74:fb:bc:d8:
1e:bc:9e:ea:fb:c6:23:4f:59:7c:9c:c1:05:61:c0:
96:75:6a:f7:a7:4b:b8:d3:88:5d:d2:9e:77:4c:07:
31:8e:9f:e1:0d:a2:1f:34:f3:df:b6:91:b4:32:e9:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C4:06:C1:9E:8B:27:4E:B3:EC:D4:F0:83:9E:A4:F6:C8:B1:AF:CF
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:40:3e:e5:02:5e:08:4a:8c:eb:18:20:b7:c7:df:5d:16:05:
86:46:a8:a9:63:10:94:5b:58:2d:26:63:99:cf:62:9f:af:ab:
9a:86:c3:cc:fa:2b:0b:28:cc:bd:75:7e:61:ff:0d:d6:ec:d4:
8f:99:bf:37:e0:4b:75:19:3c:de:8a:3d:43:d8:d9:7f:f0:53:
91:74:e5:5c:73:e3:a9:da:ec:b7:fb:f5:63:5e:b0:85:15:c5:
cf:f2:63:31:6b:fc:96:e4:69:3a:df:eb:85:cd:ea:8a:36:f8:
f3:3b:69:5a:07:6b:1c:d2:b0:77:a4:d9:a2:0c:83:c5:03:48:
a7:e3:24:1f:24:0b:ad:27:12:d1:0f:fa:70:c2:5e:25:e4:d9:
39:f7:68:6a:76:3c:19:71:e1:58:19:43:e6:7c:b6:12:e6:cc:
08:00:de:41:84:57:67:92:1c:84:ef:d0:cc:6c:40:58:29:33:
b6:ec:3a:2a:04:c4:22:39:e8:29:c3:64:96:32:09:ca:a9:eb:
3f:ef:91:a9:90:64:a1:8e:ae:d7:10:77:45:08:52:be:31:b1:
91:b3:e0:b1:96:42:fc:ff:cc:f2:18:44:26:e0:fe:2f:a1:62:
64:2a:41:33:5f:1d:f6:5e:01:e0:69:3f:77:07:95:cc:2a:a6:
c7:19:6b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 09:44:28 2026 by rpki-client