Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
File: QEPj9wJFibliregc9EVjBvTTXmg.mft (raw, json)
Hash identifier: AjJ+G9HNuyry7GpAxOL4D4mDEP21SWgQkie7ReqCmhg=
Subject key identifier: B0:A2:A1:FD:71:1B:BE:12:DD:5E:FB:23:40:1D:44:66:C1:D5:C7:7C
Authority key identifier: 40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
Certificate issuer: /CN=4043e3f7024589b962ade81cf4456306f4d35e68
Certificate serial: 01A0FF48293764E7DA22EE4D4EFB33763FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
Manifest number: 176B
Signing time: Sat 03 Oct 2026 01:01:54 +0000
Manifest this update: Sat 03 Oct 2026 01:01:54 +0000
Manifest next update: Sun 04 Oct 2026 01:01:54 +0000
Files and hashes: 1: QEPj9wJFibliregc9EVjBvTTXmg.crl (hash: iebbMOemNfYFFOhpCtdzwDBLpN40Gi/jlXuCtAGGEmk=)
2: w011lYt62c3hWszahC6AWv6giHI.roa (hash: xoQYARNhUnVWQjLbtBlHZU61msSzpQAeDZVvNEmV+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 01:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:48:29:37:64:e7:da:22:ee:4d:4e:fb:33:76:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4043e3f7024589b962ade81cf4456306f4d35e68
Validity
Not Before: Oct 3 01:01:54 2026 GMT
Not After : Oct 4 01:01:54 2026 GMT
Subject: CN=b0a2a1fd711bbe12dd5efb23401d4466c1d5c77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:db:a6:21:6f:ea:5f:b1:3d:eb:db:fd:9f:2d:
a8:56:4a:2d:97:78:1f:26:78:70:64:a8:1c:76:ca:
29:45:d9:98:57:66:b2:d2:ad:e7:9a:6d:45:b6:30:
3b:0c:20:d8:39:66:39:1a:d8:69:f8:63:41:be:ec:
af:78:70:ce:ad:5b:a3:63:8c:3c:c4:70:a1:82:4f:
5b:6b:59:03:8b:e7:e0:ac:e9:ab:c1:69:82:bb:cf:
34:d0:9a:88:76:4d:09:93:6e:b2:8c:35:9d:c3:4c:
c6:31:63:55:07:39:c9:c9:9e:5d:82:3f:1e:ad:2a:
4d:38:e0:15:c9:7e:39:c2:a9:33:ff:1f:22:b6:e2:
a6:26:ed:2f:26:b4:9d:fe:a7:09:7c:81:be:0b:d0:
ce:69:ee:83:36:7e:ff:c4:02:a1:cf:59:c8:08:05:
16:8a:5a:83:d6:b7:6f:db:fb:12:04:d3:db:c6:20:
29:47:ab:51:8c:fa:ff:c6:55:f7:5c:23:f4:3e:bc:
82:88:3d:b9:19:3f:74:5a:b6:b7:e6:90:a1:a4:3c:
56:50:bf:de:38:42:9e:64:27:ca:99:31:22:f0:64:
48:a2:3f:f1:0c:90:65:66:fc:17:62:5b:23:1b:87:
f1:75:bf:b0:bd:2b:d6:91:2f:0c:6d:5a:2a:34:c7:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A2:A1:FD:71:1B:BE:12:DD:5E:FB:23:40:1D:44:66:C1:D5:C7:7C
X509v3 Authority Key Identifier:
keyid:40:43:E3:F7:02:45:89:B9:62:AD:E8:1C:F4:45:63:06:F4:D3:5E:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEPj9wJFibliregc9EVjBvTTXmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ce1537-3892-4684-a65e-8ef8887e2d1c/1/QEPj9wJFibliregc9EVjBvTTXmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7b:7e:85:f8:1e:08:e8:61:75:3e:f2:a4:29:a8:c2:90:14:
38:da:ec:b4:dc:04:a4:7d:4b:74:a0:8a:1b:79:7e:5d:76:db:
fd:ca:49:6d:c4:e3:84:24:84:f0:fc:48:eb:a6:52:29:66:cb:
a0:03:ac:c4:25:65:91:f4:44:e3:52:2c:a6:96:ca:57:92:2c:
29:93:11:f8:38:e6:44:af:8e:fe:d0:14:07:dc:a1:07:a1:18:
e8:78:f8:97:4a:f4:9d:89:c3:32:b7:1b:f9:1f:d8:1f:d2:9c:
e5:cc:f7:58:ce:aa:fd:03:8f:1d:b9:77:d9:b7:72:ce:3e:5b:
2d:2e:5f:59:0e:a0:ab:b3:69:a2:61:81:5c:9a:06:1e:06:90:
c4:3b:20:a0:6b:4e:6b:0e:b0:36:0c:b6:f2:f9:fd:c0:c2:e0:
8f:d5:d9:2d:6d:19:e7:f4:87:e9:78:90:2c:e8:6b:6b:93:b8:
77:ec:f0:f7:ff:d4:ef:86:0e:33:2a:b9:b4:a0:eb:9e:56:57:
40:01:3d:dd:d7:2f:ce:ef:25:42:4d:49:db:80:d6:84:79:e9:
19:cb:42:15:92:27:52:63:3c:ac:56:d2:cf:44:cf:82:8e:c8:
57:ec:70:90:d9:be:1a:61:09:60:32:35:0f:bc:31:30:3e:90:
de:c5:ba:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:09:11 2026 by rpki-client