Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
File: Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft (raw, json)
Hash identifier: aXm+TEkQgIiGvfI0SIJ3eZIsXYXfWnskwvxqRn9PsMU=
Subject key identifier: DF:49:A7:EC:44:AB:5E:AA:71:62:3F:A7:A1:EC:EE:FA:AD:40:36:BF
Authority key identifier: 43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
Certificate issuer: /CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Certificate serial: 01A0E73EE8C69492EDC4D755BA23F7A5521A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
Manifest number: 1551
Signing time: Mon 28 Sep 2026 09:00:54 +0000
Manifest this update: Mon 28 Sep 2026 09:00:54 +0000
Manifest next update: Tue 29 Sep 2026 09:00:54 +0000
Files and hashes: 1: AOYNyLogCuZgfBQZ_rhFiasTEas.roa (hash: zOItC91i7X4F3quOK9yoQD+KspwFkw26V76frNAHPSc=)
2: Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl (hash: 1MyqJwqBu7rVB+YnQlKhCJ5QvUxSgBYxE7hui5Nsmuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 08:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3e:e8:c6:94:92:ed:c4:d7:55:ba:23:f7:a5:52:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437a5c7e7c7eab2392372fc38d48c7a977b24abd
Validity
Not Before: Sep 28 09:00:54 2026 GMT
Not After : Sep 29 09:00:54 2026 GMT
Subject: CN=df49a7ec44ab5eaa71623fa7a1eceefaad4036bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:39:83:b0:c7:70:63:61:92:ed:b5:04:5e:
7e:53:4a:88:af:fb:9c:2f:a4:a0:7f:6f:2b:40:dd:
e1:3c:bd:a8:d3:e4:49:3c:d6:48:86:2a:27:80:56:
58:d7:4b:b5:44:70:4a:bd:9e:2d:6d:44:43:08:f3:
a9:f1:b3:ec:dd:62:ea:b8:ed:b3:03:0e:5d:23:d0:
3e:19:fd:04:6f:00:80:d5:94:cc:f3:f8:08:74:2f:
29:0d:d5:da:1b:e4:a8:ae:17:96:73:3d:69:fb:33:
53:26:4a:ea:29:fd:4d:df:d8:f0:f7:8a:e9:f1:3a:
a7:ed:50:03:61:ea:75:0f:62:1f:f8:53:6b:a9:30:
3c:0b:78:ab:0f:88:39:b2:7d:9d:59:3b:9c:63:c4:
85:5e:17:d4:78:69:7a:e0:21:b3:54:71:cc:40:a5:
e1:3c:a8:7a:8f:9e:49:26:a6:73:00:9a:c1:66:f3:
ba:e3:28:15:fe:35:91:b1:02:53:70:22:8f:aa:bf:
dc:be:13:11:01:b9:d7:73:2b:03:9f:91:22:9f:f9:
d3:0e:bd:c6:14:d7:d1:60:d8:6a:92:42:d1:0d:0e:
2c:29:82:4a:80:73:c6:1b:32:df:ea:d2:36:5f:1b:
95:ac:94:d0:8c:4e:0f:a6:95:cc:77:29:a2:96:dd:
b0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:49:A7:EC:44:AB:5E:AA:71:62:3F:A7:A1:EC:EE:FA:AD:40:36:BF
X509v3 Authority Key Identifier:
keyid:43:7A:5C:7E:7C:7E:AB:23:92:37:2F:C3:8D:48:C7:A9:77:B2:4A:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3pcfnx-qyOSNy_DjUjHqXeySr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7faae6-9f30-42ed-b375-55a43aab8f73/1/Q3pcfnx-qyOSNy_DjUjHqXeySr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:d3:c7:f1:b7:4c:4f:52:1d:fc:2c:08:54:8d:b9:18:58:1c:
29:45:f4:9d:87:b5:6f:13:34:fe:41:ba:0e:09:f5:0e:f0:6d:
88:b7:c8:7e:79:7d:c4:07:04:ca:43:7e:b5:ce:fd:85:9f:d0:
b2:13:85:8e:ad:ed:c0:1a:4f:52:d1:18:00:e8:3d:f6:cf:c0:
82:41:52:39:7c:fa:15:c5:ef:fa:cd:b1:59:f1:36:c9:a7:13:
75:fa:9c:31:af:f7:d2:c2:e8:ca:b7:f8:7d:6a:37:07:59:bd:
96:6a:d1:ee:35:e3:67:ef:0c:a2:0f:57:22:74:d5:91:0f:b2:
73:84:a9:4e:9b:c5:3f:e8:c0:30:a2:61:b4:c3:22:70:2f:b7:
a4:ec:da:0a:91:22:44:c0:95:b6:0e:1c:fc:46:75:34:4f:3f:
cf:77:3b:bb:be:b6:d0:98:a8:61:d4:ed:51:51:6c:dc:74:4d:
ef:99:f0:e0:26:01:d8:4d:ed:3f:28:66:96:25:6b:c4:ce:bc:
9b:cb:72:bb:e6:a6:e9:51:84:2d:26:b9:27:e2:e7:f2:41:f5:
00:d9:77:6f:52:79:f5:46:4c:3a:1e:78:bc:08:10:c7:8d:eb:
ca:92:4a:82:6b:03:10:82:0d:48:34:4f:b0:7f:03:0d:21:13:
e1:56:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:03:54 2026 by rpki-client