Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: nxxUno4rqj4/34SpJdYOp6my8pB01T8RwZjV8ZvaPj4=
Subject key identifier: AF:60:8A:CC:81:55:E4:BA:C9:FB:9E:AC:14:F3:9A:D8:49:2B:5B:05
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 01A13221D58AA4E5A0C836E2DCA48F38BA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 0C6B
Signing time: Mon 12 Oct 2026 22:00:40 +0000
Manifest this update: Mon 12 Oct 2026 22:00:40 +0000
Manifest next update: Tue 13 Oct 2026 22:00:40 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: DW5v9MwIyTOF5WBRCqoEOvWk/ENbSlAazLbvawHdFbc=)
2: RhhybVhgxehJpyQFfu1dQiF3RZc.roa (hash: vTXKPtYUm1UxDqfrm9GUHJ6eZM3EZfiTITZU7YFaPA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:21:d5:8a:a4:e5:a0:c8:36:e2:dc:a4:8f:38:ba:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Oct 12 22:00:40 2026 GMT
Not After : Oct 13 22:00:40 2026 GMT
Subject: CN=af608acc8155e4bac9fb9eac14f39ad8492b5b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1e:86:d2:87:7e:f7:b2:5b:0d:15:5b:22:df:
6a:ee:43:76:57:4c:4b:fc:97:2a:76:c7:39:26:64:
81:e9:cd:05:78:99:d5:99:83:62:4a:94:de:e0:ae:
01:7d:40:d6:ed:5e:3c:21:59:cc:d2:e3:1d:08:8f:
d1:f0:82:8b:21:11:e2:b0:bd:9e:c8:18:7b:41:c4:
c6:be:f7:c0:04:2a:eb:ee:a8:ab:44:80:97:e9:c2:
4b:21:38:de:2c:02:6c:2f:7b:3e:19:28:99:30:e8:
63:2c:0d:17:ba:61:30:86:a2:b3:4b:31:de:6c:d4:
8f:8e:49:72:60:fd:42:ca:ff:e5:e3:2d:6d:96:c1:
c3:16:b5:6c:11:db:51:ee:1d:1a:60:25:9e:30:15:
b5:08:c4:d0:fb:47:f3:e5:f9:8d:4d:63:90:26:98:
e5:cc:74:ff:8f:cd:32:b8:a1:4b:79:8d:a3:a6:3c:
87:c4:5b:e0:43:77:51:f4:f9:74:df:6d:aa:ed:cc:
1e:8d:df:8c:b7:2b:8a:c0:d2:a9:bb:c1:96:e8:25:
99:d2:a1:f0:18:18:47:0d:bd:a1:fe:95:21:f7:e8:
24:66:d0:3b:16:6e:a7:81:0c:e6:59:2c:d6:d7:63:
89:b8:f9:1f:f4:0e:f6:52:b6:27:c2:e2:54:19:14:
be:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:60:8A:CC:81:55:E4:BA:C9:FB:9E:AC:14:F3:9A:D8:49:2B:5B:05
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ab:ad:84:9f:c7:b5:52:86:6f:cb:53:4b:01:09:9d:d6:3f:
17:ca:9a:18:9b:1f:cb:bd:3d:55:f0:1e:4a:6d:8b:95:32:13:
df:d9:47:b5:f8:c4:ef:3e:0d:bd:a2:f9:f4:ae:c8:47:8b:10:
38:4a:1d:f9:80:98:ed:64:9f:e7:22:24:eb:d0:62:8d:26:8d:
42:69:0d:15:aa:55:35:a9:15:22:d9:1c:3b:6e:06:ff:af:87:
ae:48:84:27:f6:57:8a:a7:33:53:73:e4:5a:62:35:c8:b8:4f:
a6:fc:c4:e1:cb:47:6c:43:75:1b:41:74:f1:71:29:2e:64:de:
39:45:62:8a:88:f8:a6:d8:81:56:d4:44:37:0f:58:0e:b5:cb:
2f:a5:b0:30:36:09:ce:64:f5:3c:6f:e6:c5:f3:b4:26:44:d4:
65:dd:06:57:76:76:74:d6:1e:90:f9:4f:5f:b4:1c:95:ec:2f:
96:42:87:ca:10:a1:72:ac:81:1b:85:2f:21:8b:f7:63:12:67:
9f:0f:62:00:a8:74:6f:1e:d2:9e:e4:d8:ad:f0:09:a5:5b:0c:
83:a8:f2:de:32:44:5b:a8:b8:15:7c:0a:67:77:15:64:7e:dc:
cb:69:d6:72:cd:5a:7a:04:63:2d:48:e4:34:75:97:e4:32:7b:
f5:e2:07:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:59:48 2026 by rpki-client