Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: YcYJMhak3liniuDueyU8hMlDxQb8lZLgOrBOw5lA0ls=
Subject key identifier: 3D:05:70:46:E8:08:50:F9:A2:5B:AE:E2:3C:9D:BB:DB:1B:63:C4:40
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 01A120C11F055D6FB331672DA7BB6888DDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 19EA
Signing time: Fri 09 Oct 2026 13:01:29 +0000
Manifest this update: Fri 09 Oct 2026 13:01:29 +0000
Manifest next update: Sat 10 Oct 2026 13:01:29 +0000
Files and hashes: 1: 4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa (hash: b9MP0rdkmPkjLsxKnX60/w1PVwahqRg3qlsqfmJHgCk=)
2: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: AhkL6O/78SJHtaU4dn9L4YNMe/KkUNlx50USSvAA5ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c1:1f:05:5d:6f:b3:31:67:2d:a7:bb:68:88:dd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Oct 9 13:01:29 2026 GMT
Not After : Oct 10 13:01:29 2026 GMT
Subject: CN=3d057046e80850f9a25baee23c9dbbdb1b63c440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:01:f7:b6:e2:26:8e:6b:e2:30:92:99:a9:12:
6c:52:c7:cf:4e:14:fa:04:55:90:8b:fa:78:d4:4b:
56:a0:9a:fd:77:1f:a4:16:4d:03:7d:e4:1c:ab:76:
8d:64:e1:c0:60:de:99:dc:0f:bd:0e:a2:14:9e:6e:
bb:e0:dc:7c:ac:85:4e:dd:f5:01:30:45:12:62:91:
de:8e:45:88:aa:e6:8f:38:04:75:01:b4:d1:7d:d5:
dd:34:9f:44:65:2b:98:5a:41:8b:96:55:04:6f:4e:
13:2f:09:e5:49:90:11:63:67:cb:f6:03:12:a9:28:
4f:b2:85:5f:6b:1e:c8:c4:29:b9:83:bc:7d:c0:83:
ff:4c:38:fd:73:8c:4d:ab:7c:11:20:95:ee:ff:b2:
5a:33:d4:e4:91:c4:59:45:ef:b9:60:8b:69:70:b0:
4d:5c:f2:0a:07:20:bd:fa:e7:03:18:8c:1f:60:8e:
70:41:ff:47:0e:74:a5:6b:d3:15:ab:5a:39:cd:45:
37:54:50:5d:6f:24:46:ca:64:2d:7f:0e:6d:91:fb:
b3:28:67:66:d4:11:9e:3c:30:c2:40:2a:ca:29:56:
76:5c:f6:c2:aa:23:a7:aa:98:5b:ea:17:2a:45:3c:
29:0e:26:c0:f6:77:a8:78:88:0b:3a:c0:3c:88:ac:
e6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:05:70:46:E8:08:50:F9:A2:5B:AE:E2:3C:9D:BB:DB:1B:63:C4:40
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3d:6e:4a:9a:a1:47:b6:4b:fb:a3:d1:01:e2:37:29:63:4d:
cf:ec:de:b3:73:6d:f5:09:1a:0c:f3:a4:43:ef:36:e5:3f:e5:
c6:b0:2d:26:f3:d4:1a:42:76:d5:75:cc:7d:4b:3a:7d:5a:7c:
00:da:e4:34:a6:ad:82:1a:3d:f8:d4:4f:43:3f:41:41:1a:33:
b4:0b:39:76:7f:25:2d:ee:05:30:2b:85:ce:5e:57:bf:8d:72:
b3:e3:ad:0c:67:ee:d7:4f:ed:5d:e2:f6:35:78:c4:d8:fb:57:
d3:4d:e2:83:ee:94:c8:b2:53:ba:5f:05:ce:ce:b7:24:c6:ee:
43:d6:f2:6a:94:a9:1c:5d:40:f6:41:7b:c5:60:86:ae:cc:83:
de:16:a8:6d:29:c1:8a:3f:3c:32:c4:3d:c5:f9:d6:56:04:64:
c8:8d:ca:92:4c:28:ca:66:8b:35:8f:41:1a:0f:67:48:63:82:
c8:e9:57:df:79:43:a1:27:3e:38:e9:27:f1:b4:0f:4c:aa:13:
23:6b:db:82:bd:ec:c6:9a:19:77:58:45:dd:40:16:bc:e3:9e:
d0:0a:3d:32:cc:3a:28:98:75:47:f1:31:e9:58:dc:66:cd:7b:
91:4c:bd:20:7d:d2:4f:2d:48:b3:82:91:42:d5:ff:dc:be:57:
d0:2d:b4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:08:39 2026 by rpki-client