Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
File: QGuz4srXsQAlbhxKf1VbajjYdSY.mft (raw, json)
Hash identifier: TmmK+bwFamDECJxg/gzVTYMyUMElKapXTCYzCkEjhgg=
Subject key identifier: 56:7F:B6:84:DB:EA:DD:17:B6:03:C7:6A:40:95:34:E1:5F:F3:5E:F6
Authority key identifier: 40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
Certificate issuer: /CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Certificate serial: 01A0DBDFAC01CF53623BA6610D46F7B39A1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
Manifest number: 0233
Signing time: Sat 26 Sep 2026 04:01:03 +0000
Manifest this update: Sat 26 Sep 2026 04:01:03 +0000
Manifest next update: Sun 27 Sep 2026 04:01:03 +0000
Files and hashes: 1: QGuz4srXsQAlbhxKf1VbajjYdSY.crl (hash: akTcus/gB5XBfGWQPlfYsp0r2j5To6DuqYX0cktPyYc=)
2: QuYIuEWfuLxCBh6SczKlvzLc7R0.roa (hash: wq5LtQWkzD1IvS0cRF5e7YpZie3ZK8BoD748nc2SSUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:df:ac:01:cf:53:62:3b:a6:61:0d:46:f7:b3:9a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Validity
Not Before: Sep 26 04:01:03 2026 GMT
Not After : Sep 27 04:01:03 2026 GMT
Subject: CN=567fb684dbeadd17b603c76a409534e15ff35ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:ac:bf:b3:58:d9:d3:a8:0d:ed:57:1f:64:
bb:48:53:c9:55:0d:a7:ed:94:6a:8c:11:9d:aa:d6:
57:00:67:1b:b1:3e:68:b4:79:62:cb:e1:b4:ed:46:
bd:65:0b:b4:02:07:28:36:01:c5:d9:8e:de:96:36:
28:40:e2:7f:76:ac:0b:d7:e8:94:0e:2f:1d:01:be:
e3:80:03:05:dc:10:17:10:dd:1b:b7:96:fc:b5:f2:
4a:44:2e:ab:69:eb:00:f5:b9:e7:cf:dd:08:6d:d9:
f5:5a:16:c7:da:f9:63:63:12:6b:0d:ac:29:86:82:
5b:ab:dd:c1:6f:37:b1:8b:47:03:29:66:65:e5:3f:
46:94:b3:4c:d5:e3:44:6e:36:c1:72:9f:86:b4:c6:
fa:e3:63:b7:52:25:37:bf:37:df:e9:57:14:08:b1:
05:1e:6b:1c:33:13:03:f7:71:07:57:72:1e:4a:86:
ed:a1:74:a0:7a:8f:88:91:dc:22:9e:8c:67:f6:05:
f6:bc:8f:02:97:6b:af:93:c6:5e:15:36:c2:48:71:
f7:20:3c:4f:5d:c5:e9:00:3d:18:48:ab:0f:fa:fb:
42:de:7d:8b:4b:85:9f:eb:9d:01:85:56:43:52:2f:
d3:c1:c1:29:a7:f2:8e:d3:06:23:8e:aa:60:80:f1:
c9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7F:B6:84:DB:EA:DD:17:B6:03:C7:6A:40:95:34:E1:5F:F3:5E:F6
X509v3 Authority Key Identifier:
keyid:40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:5b:30:fc:f7:b7:0e:01:71:c4:53:aa:6a:4b:c5:18:69:
ba:cd:5d:e0:b8:0b:f4:25:6a:78:8d:49:72:08:95:83:03:0a:
08:5d:58:e6:7f:17:39:f1:e4:e1:ab:0e:c3:18:31:69:78:c1:
a0:bd:4a:b8:f2:fb:c1:28:9e:c6:96:b1:30:a3:f7:5d:59:6e:
a5:2c:70:fc:24:85:9a:d5:a5:68:56:9d:5b:de:e4:2a:64:49:
30:25:2c:f6:38:8c:b0:62:7e:6a:d2:f4:6b:9f:75:34:c4:5b:
af:83:91:5c:cf:b3:45:50:1b:69:f5:b6:01:f2:30:c9:e5:f8:
a0:46:b2:4c:f3:a4:7e:01:ad:a5:d9:b2:79:bd:0d:f0:a8:bc:
7b:0d:6f:ca:0b:9c:ca:30:18:9b:ac:7a:82:f7:78:82:58:32:
e6:d9:e5:d4:a6:ee:8e:d0:91:73:50:d0:a3:25:9e:46:81:8e:
80:95:47:2a:21:26:1e:2e:31:02:15:e9:2a:91:f0:96:34:57:
f6:e7:97:92:e1:b1:73:7e:30:9e:85:63:c0:8b:64:00:b8:2d:
fc:5c:7f:17:4f:64:af:83:a5:cb:2e:f3:5f:70:64:d0:39:3c:
0a:b3:f2:63:25:29:a9:10:41:44:92:1d:4f:98:55:c1:50:04:
5f:f9:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:21:33 2026 by rpki-client