
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: 8tk5CPm9IhHIIPz0U5JXH6DFDBvdFGP3tqy4XagPbwc=
Subject key identifier: 8D:34:30:1B:D8:5A:E2:3C:C8:FA:67:87:D7:75:84:56:24:C3:4F:E3
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 01A10091781D338EF54714402D2F529F4181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 1A84
Signing time: Sat 03 Oct 2026 07:01:35 +0000
Manifest this update: Sat 03 Oct 2026 07:01:35 +0000
Manifest next update: Sun 04 Oct 2026 07:01:35 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: tlUR8jK42DeJz+gCvx2IlGsoM5ZB7GDbu26f/ntFG10=)
2: ugMrWtr-AgbWpTxdCrlYjC4RyWA.roa (hash: 5ukMlR12Rye0g+suC8BFsAQhk/pWlg5h05IGSX13iYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:91:78:1d:33:8e:f5:47:14:40:2d:2f:52:9f:41:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Oct 3 07:01:35 2026 GMT
Not After : Oct 4 07:01:35 2026 GMT
Subject: CN=8d34301bd85ae23cc8fa6787d775845624c34fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:fd:ae:3c:2c:af:16:62:e9:dd:4c:0b:71:
f8:ff:a4:31:c9:68:4e:00:ad:81:ca:4b:12:74:2d:
7d:d2:79:4c:74:36:93:91:90:7e:f0:70:af:f6:de:
96:c4:4f:17:10:c7:02:55:79:2c:28:e0:ba:be:cb:
5e:8a:3b:eb:fb:67:20:6d:f0:ec:80:95:e3:0b:04:
f5:fe:51:87:b4:29:29:da:91:1d:5c:ee:3d:97:b1:
eb:aa:c0:ce:3c:4a:9e:54:a7:1d:6f:6e:c7:23:e6:
7e:d7:81:0c:36:02:d5:e3:77:bd:d1:f1:8d:7a:27:
93:6a:39:e0:5e:74:19:5f:b3:9b:34:87:77:15:c3:
51:31:25:1e:cd:8b:48:cf:75:b1:e8:7e:44:81:2a:
d1:18:1b:2e:ef:96:c2:83:31:f6:2d:8b:29:28:d6:
40:20:59:40:e3:d6:11:9b:09:a0:24:a2:f4:95:c5:
49:20:54:75:c9:e1:cd:23:ac:83:d9:76:05:33:a2:
c9:d1:6e:df:03:db:93:b9:11:50:cb:9b:db:bb:9d:
20:68:94:cd:15:d6:7c:76:27:3d:94:2e:d3:1b:39:
d2:2c:da:57:e6:5c:86:10:0f:1b:e1:c8:ae:94:61:
27:26:15:04:b2:46:9e:e5:1c:fb:c5:28:9b:fa:0a:
65:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:34:30:1B:D8:5A:E2:3C:C8:FA:67:87:D7:75:84:56:24:C3:4F:E3
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:18:8c:6d:06:79:e9:dc:0d:c8:02:ed:3c:e3:c3:61:c9:46:
b2:9b:f5:af:e3:fa:74:7d:9f:ad:14:95:83:ff:87:37:22:e2:
6e:36:19:10:6e:d5:02:96:04:e4:2b:a0:57:a3:88:bf:06:33:
28:f9:0a:24:e9:40:39:36:14:2c:66:2d:df:a0:f9:17:11:fd:
d9:a1:b9:66:04:c1:18:9f:fd:f0:fa:59:40:6b:67:10:87:20:
02:32:7b:b9:22:3b:e8:15:a8:fb:40:e9:de:da:b1:39:69:22:
9c:bb:20:82:88:58:56:f4:3b:67:3e:28:8f:29:0d:24:19:5d:
e6:c5:72:08:ae:c9:23:d3:f6:bb:71:a3:46:6d:de:0d:9f:f2:
7a:6f:4f:ff:c1:92:6f:81:d7:76:a2:86:5d:11:79:ca:7a:7f:
70:28:fa:8e:13:bc:a3:24:11:e7:49:f4:a4:3d:92:84:f3:9c:
31:c7:ef:50:a3:30:d4:ad:1c:d6:b7:6f:02:ec:ff:42:bf:c2:
59:c5:bc:5a:83:7a:eb:c7:48:86:0d:12:19:82:fa:d0:73:08:
88:e9:b2:cf:97:be:eb:09:8f:6c:91:8c:9c:bf:eb:c6:84:7a:
d3:72:6e:21:5b:53:c1:60:39:20:fc:0d:e3:a5:40:3a:5f:b3:
fb:71:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:50:49 2026 by rpki-client