Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
File: QBY91EFO8-eS4AUB80786UQKnE4.mft (raw, json)
Hash identifier: +M+O2DB4jdH2iEveXJv3E24LrGGJOxHGIzABkX9ZvAo=
Subject key identifier: 50:96:15:12:E4:DE:F4:15:F1:41:1E:4A:41:1B:9C:7A:69:70:8B:09
Authority key identifier: 40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
Certificate issuer: /CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Certificate serial: 01A0E475C37811539BDF58CA39DD26B8DB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
Manifest number: 1A78
Signing time: Sun 27 Sep 2026 20:01:57 +0000
Manifest this update: Sun 27 Sep 2026 20:01:57 +0000
Manifest next update: Mon 28 Sep 2026 20:01:57 +0000
Files and hashes: 1: QBY91EFO8-eS4AUB80786UQKnE4.crl (hash: oyRuZAnZBc6/lGmfkZtt2d76eGILKie/Q9dlPKrrGEk=)
2: XVQmZyZgIfyuS-i9_dYYU_5CGT0.roa (hash: BPYDVshqMOmc9U1pef4+DfyaziPWsnfi+uZonkxHf4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:75:c3:78:11:53:9b:df:58:ca:39:dd:26:b8:db:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40163dd4414ef3e792e00501f34efce9440a9c4e
Validity
Not Before: Sep 27 20:01:57 2026 GMT
Not After : Sep 28 20:01:57 2026 GMT
Subject: CN=50961512e4def415f1411e4a411b9c7a69708b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:bf:6b:68:c7:fc:a9:1f:3e:43:10:17:38:
27:61:1f:f8:41:86:80:d3:83:50:7c:a9:cb:b8:ae:
80:ac:ef:03:01:71:68:44:4b:72:36:74:3d:ff:03:
ea:4d:ad:9b:ab:9a:4d:4d:75:5a:72:c5:5f:20:ac:
32:65:2b:42:83:10:b2:43:24:3d:87:32:b6:a4:89:
75:19:29:6b:b1:c6:2d:ad:72:62:42:73:20:0e:17:
d3:1e:09:23:8a:c7:9a:9e:55:dc:ec:71:c6:bc:d0:
46:39:88:87:ad:0c:fb:54:dc:c1:3b:a0:73:c9:d3:
2f:59:07:31:22:d3:33:4c:fe:8b:63:f8:5f:4c:f3:
cf:a2:18:26:71:3a:b1:82:66:42:bd:08:66:40:99:
0f:47:82:0f:cf:b6:6d:67:59:70:6a:fa:67:12:15:
0e:dc:f4:5a:2f:2d:91:1a:2c:93:35:c5:28:b8:07:
04:ed:34:21:4e:57:e6:e5:98:cd:ce:73:50:07:1b:
f1:4c:27:e3:3a:ac:14:ab:c2:56:f1:f2:49:c8:06:
b5:d2:5b:88:f5:e2:af:09:55:25:e6:eb:49:48:93:
fc:4e:25:21:29:3b:7b:dc:da:3a:56:40:b3:be:ca:
4d:95:9b:ff:2d:09:85:91:4e:71:66:da:50:16:d1:
76:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:96:15:12:E4:DE:F4:15:F1:41:1E:4A:41:1B:9C:7A:69:70:8B:09
X509v3 Authority Key Identifier:
keyid:40:16:3D:D4:41:4E:F3:E7:92:E0:05:01:F3:4E:FC:E9:44:0A:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBY91EFO8-eS4AUB80786UQKnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/521438-3e04-4d72-88de-3622ac7d65cc/1/QBY91EFO8-eS4AUB80786UQKnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:03:b8:c9:71:09:2d:8a:19:dd:07:68:88:3e:8b:ec:ed:fc:
88:da:fa:ff:36:aa:7c:05:ee:a6:56:a0:ff:ca:74:47:10:13:
04:ef:1d:bb:56:7a:d0:0b:02:0b:e6:25:94:b1:3f:9d:0a:57:
e7:ae:16:2e:fb:18:bc:41:26:c0:7d:f9:6b:79:6f:4c:6b:10:
96:c9:ba:7a:f1:a6:d1:e6:be:8d:6a:8d:b5:8a:99:3b:c0:a0:
b7:ac:1b:d9:f1:1c:7b:74:14:d9:06:db:e4:e2:9a:8f:0c:8d:
2b:fc:3a:36:00:03:8e:d5:dd:ff:5b:88:60:ab:48:7c:b7:c9:
1e:27:3e:76:8e:4a:a0:8a:c0:b1:6a:23:17:cf:03:43:c2:38:
74:c3:87:16:7c:a8:fa:71:8a:2b:1d:bf:2d:37:39:1c:13:13:
a7:09:13:70:d5:14:cd:35:cd:81:c9:1f:c8:5a:f4:c6:39:62:
32:55:3f:6b:5a:0a:cf:d9:a8:3d:fe:c8:f1:82:b3:da:73:40:
c6:c2:e5:bf:7c:07:d4:4a:43:56:7d:e5:1d:dd:f0:4d:d6:30:
21:28:ca:94:ce:41:28:c0:af:41:29:04:c3:76:34:ac:57:4b:
f7:05:43:b5:a1:58:cc:8f:f5:e5:31:ab:64:ba:1d:b3:f1:94:
8f:e4:c9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:06:56 2026 by rpki-client