Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: GOmw3XGViZziNyaErFkErjI29ECRGGhpzkYQjlegIFg=
Subject key identifier: D9:5F:9D:62:C7:AB:7F:F9:00:E1:9C:8C:41:A5:B5:06:07:20:EE:FA
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 01A10625D7D45F45DF4EB69FB4475D104AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 1A8C
Signing time: Sun 04 Oct 2026 09:01:45 +0000
Manifest this update: Sun 04 Oct 2026 09:01:45 +0000
Manifest next update: Mon 05 Oct 2026 09:01:45 +0000
Files and hashes: 1: 16Of3nkjMP8UdSS9id5ZJPl_uic.roa (hash: 3kAPeMDB74ONzDFPUBPrWjZx5ADHmGueRoPekMbbEgg=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: q1E65Htvag7nQYYIrdmdA396LSqe1sRvRDdaLYDAC2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:25:d7:d4:5f:45:df:4e:b6:9f:b4:47:5d:10:4a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Oct 4 09:01:45 2026 GMT
Not After : Oct 5 09:01:45 2026 GMT
Subject: CN=d95f9d62c7ab7ff900e19c8c41a5b5060720eefa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:ae:f5:6d:7b:ac:cf:fe:72:16:fd:9b:21:
64:ee:91:f1:26:19:19:4b:62:9c:68:30:57:71:85:
f6:fe:85:59:3b:cd:89:2c:da:55:5b:c5:7d:9a:60:
8d:e0:59:0b:2d:81:ff:70:c3:70:c4:ec:69:12:0d:
e9:b7:85:f4:c5:79:09:bb:cb:7b:e7:b1:96:cc:0d:
b9:d3:a2:a0:e6:5e:7f:04:b1:24:75:c8:72:b7:01:
c8:a6:29:0a:48:ba:6c:8f:6b:02:e3:e5:5a:7d:a2:
f6:0d:ea:03:79:eb:2f:34:1f:a8:47:9c:01:45:c6:
07:57:67:be:fc:5d:04:38:1f:2c:2b:12:68:ca:c9:
42:48:97:f8:6f:0d:4d:bf:d9:89:05:85:9f:b9:ad:
ad:1f:40:3f:a4:b7:76:16:06:3f:2e:fd:37:f0:8c:
0f:c2:c9:9a:c0:a4:04:ee:83:9e:7a:b5:08:c2:ff:
29:f3:ee:3d:9c:0c:32:b4:1b:7c:12:b8:c2:5f:a7:
5f:fe:56:f4:57:b4:4a:cc:1e:47:17:98:7f:43:3e:
35:5e:0c:03:1e:e8:41:ae:d4:3f:6f:5a:b4:e1:bc:
10:ca:ce:55:77:3b:8f:be:48:a2:20:29:7d:6f:95:
7a:03:c1:79:50:9a:85:de:f8:ff:22:26:77:f5:98:
60:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5F:9D:62:C7:AB:7F:F9:00:E1:9C:8C:41:A5:B5:06:07:20:EE:FA
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9a:29:6e:ff:74:68:55:89:49:53:d3:36:7c:50:b8:90:f4:
02:cf:f5:d5:fc:73:55:3b:e3:97:37:fa:8c:37:80:d0:b6:c6:
9b:fb:30:16:24:39:50:5d:bf:ad:8a:b1:bd:fc:e2:12:de:d4:
8c:b4:c9:83:0f:9a:a3:fc:69:27:75:c1:eb:4d:f3:d8:9a:4f:
16:3c:04:75:96:b2:32:e9:83:48:83:d0:a7:14:55:fc:b6:86:
94:1e:b6:32:1e:87:64:ca:b8:44:d3:4f:d0:a2:b5:70:db:2f:
47:10:a6:e9:ad:14:45:a7:d7:19:7b:22:58:e1:bf:11:23:20:
3b:75:90:1c:78:9b:10:29:0e:ae:17:d4:ac:76:8c:02:3e:35:
ba:36:16:27:54:16:9f:57:a1:41:53:89:ea:c1:1b:9d:ae:9c:
fd:1f:fd:29:20:bb:ad:ef:a4:ac:f5:d4:4e:59:cb:55:5e:8e:
8e:71:68:78:3e:bc:76:17:07:7f:a9:50:26:32:b7:ca:a4:5d:
67:50:0d:90:99:39:6e:22:b4:0b:d1:80:af:4a:83:e3:a2:a8:
05:b7:46:b5:ff:fe:16:58:9b:34:9f:56:4e:45:59:09:6d:01:
ec:b4:ab:83:51:1f:ad:2b:3c:20:e3:68:79:8d:7f:59:17:d6:
12:4f:a8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:33:23 2026 by rpki-client