Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
File: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft (raw, json)
Hash identifier: QVT1WajckUzNiuByx1j4S5WHyUr6Htfsm+kX+etoKLY=
Subject key identifier: DD:BA:62:E9:3C:FB:21:E7:34:CE:BF:E4:80:21:99:12:D4:9A:D9:C3
Authority key identifier: 40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
Certificate issuer: /CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Certificate serial: 01A12CFBB6B441DF1F7A0F7A785046AB89C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
Manifest number: 1AA7
Signing time: Sun 11 Oct 2026 22:00:56 +0000
Manifest this update: Sun 11 Oct 2026 22:00:56 +0000
Manifest next update: Mon 12 Oct 2026 22:00:56 +0000
Files and hashes: 1: 1-ojtBFfG2H1rWqjbXk4N7WD3PpY.roa (hash: 33NVVlGbTWQg3lb1uDpxYt5Pr6SGR6CWL3Kw3mH/dfw=)
2: QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl (hash: 8fYTB3TR9UK4hJgrxJew9eq3g8ki0ztiMrrtKrB5nIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:fb:b6:b4:41:df:1f:7a:0f:7a:78:50:46:ab:89:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d933e82474650c6aa3e9cbf0574d27286592e7
Validity
Not Before: Oct 11 22:00:56 2026 GMT
Not After : Oct 12 22:00:56 2026 GMT
Subject: CN=ddba62e93cfb21e734cebfe480219912d49ad9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1d:10:f4:2e:0e:55:a1:2b:00:c9:65:f7:23:
8d:82:8d:49:25:ab:88:e0:a1:58:c5:cc:c3:b8:10:
cf:95:43:59:93:06:c5:9d:b6:d1:3f:85:d5:69:3a:
0a:0f:12:95:ae:aa:ef:d0:60:24:7b:0e:41:82:3c:
a3:cb:ed:67:4d:93:e5:d9:42:8b:04:bc:b1:3e:f4:
b5:02:47:43:cf:5a:1c:0c:9c:c5:7c:3e:2b:d9:03:
d9:60:99:f6:ea:d5:c7:ba:38:a2:aa:42:66:2e:c0:
65:aa:60:c1:d2:fe:62:75:b6:56:a1:4d:d3:24:bb:
c4:45:f7:27:c4:41:c8:c1:f1:fc:07:54:04:ea:37:
d7:ea:af:18:d7:ec:c5:d0:0d:18:7c:86:18:4b:4e:
d1:53:94:df:e0:f0:a7:0f:6b:85:d7:fe:d4:2b:76:
56:bc:cb:d4:f6:6d:2c:17:0d:c8:6e:b0:19:fb:a0:
9e:75:9c:9f:18:32:7d:43:03:3f:b7:59:68:a8:bd:
14:1a:5a:59:06:90:02:29:ae:b6:f0:4e:77:c9:46:
cf:f3:4c:85:43:43:3d:ee:d9:70:03:5c:eb:3e:6b:
d0:3e:de:ee:21:54:27:ac:73:6a:3c:4a:b2:18:01:
39:cb:17:ff:06:8e:6d:e2:37:51:5a:ed:07:70:3d:
14:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BA:62:E9:3C:FB:21:E7:34:CE:BF:E4:80:21:99:12:D4:9A:D9:C3
X509v3 Authority Key Identifier:
keyid:40:D9:33:E8:24:74:65:0C:6A:A3:E9:CB:F0:57:4D:27:28:65:92:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3879dd-ef95-45e6-8767-e681ebba4a4a/1/QNkz6CR0ZQxqo-nL8FdNJyhlkuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:47:8c:66:36:cc:ea:13:51:86:f0:2a:36:6f:09:84:32:a9:
65:0c:31:a3:d2:22:29:7f:ca:ff:4e:ec:25:ba:28:0f:73:ff:
c1:34:7e:a0:52:21:5e:45:57:2b:13:8b:41:e2:ff:88:8f:57:
6f:11:85:99:f9:43:2c:aa:65:c7:87:c3:a2:3f:a9:52:de:ee:
08:76:77:3e:00:a3:16:86:f0:f6:f8:34:04:08:b9:9a:82:69:
f7:aa:8a:b8:77:f6:02:0c:23:91:d3:9b:3a:8d:10:a7:cc:8b:
81:6f:89:6b:a7:ed:94:e7:f5:ac:4c:c9:b0:37:5c:54:a7:3a:
07:ec:43:65:8a:50:d0:4d:b0:e6:ea:e4:ad:3e:c0:49:63:a0:
f0:a9:88:d8:a9:51:67:47:0a:40:22:ba:6d:8a:7f:8b:81:0b:
54:c9:25:9f:c3:e8:c6:5d:6a:ce:06:72:0f:f8:15:f8:b8:25:
35:ac:7a:ce:96:4c:97:1a:4e:06:c5:78:c7:6b:93:02:f2:36:
c6:6e:60:3d:eb:29:17:17:f6:91:e1:41:25:60:2f:f4:e4:ec:
97:02:b0:9b:b1:5e:d7:f5:ae:c6:e4:4c:ee:9b:fe:bf:b7:20:
34:95:80:64:25:f9:fd:7d:ee:3f:f2:f9:e5:a1:44:e8:59:74:
dc:7a:28:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:04:12 2026 by rpki-client