Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
File: QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft (raw, json)
Hash identifier: L46AmluorTS39wr/+N9O4wX/MfsIQisBhjP9AlbsTao=
Subject key identifier: 60:C1:79:CC:13:EA:84:13:9C:C4:CF:0F:3D:FB:67:8A:19:E9:ED:52
Authority key identifier: 40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
Certificate issuer: /CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Certificate serial: 01A135911670B11D32CD971646601B3FF111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
Manifest number: 1232
Signing time: Tue 13 Oct 2026 14:01:03 +0000
Manifest this update: Tue 13 Oct 2026 14:01:03 +0000
Manifest next update: Wed 14 Oct 2026 14:01:03 +0000
Files and hashes: 1: 9l35f4vtEnwERy91rSIzMefrFvk.roa (hash: o4NZxjI3TjEffFvPCpSdso698d9KA9gU7jcbU25ovX4=)
2: QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl (hash: wuvYyN66elKySmRUNSeGrAzbwxwCC8p3h8SGH3u1RS8=)
3: _DMWomZ-zw9r2w8AsNSptLxDmfA.roa (hash: 5DRqqMVL9GM/PG8SfYwPRoOqjNYLEPPU5+fO2uX+eWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:91:16:70:b1:1d:32:cd:97:16:46:60:1b:3f:f1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407c7083460e1a4c72c4bc4276313d3a85944a87
Validity
Not Before: Oct 13 14:01:03 2026 GMT
Not After : Oct 14 14:01:03 2026 GMT
Subject: CN=60c179cc13ea84139cc4cf0f3dfb678a19e9ed52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:27:76:d8:61:17:4c:90:95:14:27:57:27:
40:a8:46:d7:c2:c6:25:bf:34:5f:c5:a0:28:fe:56:
5f:16:3f:4d:c5:3b:dc:96:64:ce:df:3a:64:d0:45:
24:d0:5a:80:4b:57:21:2d:cd:2f:69:17:db:db:1a:
2e:97:99:c0:61:da:19:ea:5b:e0:32:4f:6c:ad:7b:
25:c8:b4:a8:bb:35:bd:e8:d3:15:ca:7b:47:59:b3:
66:5a:3a:f5:fd:24:24:bd:2d:a8:e1:bc:fc:a9:92:
df:68:4b:bf:96:b5:16:19:20:26:a4:a9:d6:36:93:
1e:41:35:c3:2b:cf:73:a1:f1:55:97:fb:61:a5:c7:
b4:7c:b1:b2:60:96:58:54:98:2e:b8:c5:e2:b0:b6:
fc:fb:c6:00:63:29:92:13:98:20:8c:ab:a1:2d:4d:
bb:38:8b:0e:d3:a3:d7:a0:f5:eb:01:78:ab:5b:1b:
ac:3e:36:87:90:7a:37:34:cf:ce:44:30:b6:5f:a5:
c9:ca:89:a6:2a:b1:02:42:ab:a6:7b:d0:cb:50:d7:
aa:e3:2f:7b:b2:ce:a6:b0:b3:d6:f0:2e:43:9b:85:
eb:2f:9a:c7:40:75:20:ec:b9:d4:20:06:9e:56:25:
d0:ce:32:8d:ec:cd:85:02:60:6f:f9:b4:c8:93:bb:
4e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C1:79:CC:13:EA:84:13:9C:C4:CF:0F:3D:FB:67:8A:19:E9:ED:52
X509v3 Authority Key Identifier:
keyid:40:7C:70:83:46:0E:1A:4C:72:C4:BC:42:76:31:3D:3A:85:94:4A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHxwg0YOGkxyxLxCdjE9OoWUSoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8a7569-ed74-4a92-8627-985ed15c9aeb/1/QHxwg0YOGkxyxLxCdjE9OoWUSoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f3:3c:41:ef:aa:6b:55:c0:9c:f1:9f:d2:83:5b:5b:cd:a9:
21:83:5c:21:05:e2:83:08:92:92:64:2c:1a:67:36:ea:70:97:
ac:98:48:ca:be:3f:9f:00:fd:9a:3c:50:ac:33:bb:4f:dc:fd:
0c:e5:3e:5b:c2:af:ea:bf:23:c1:2c:89:3b:c5:bc:62:1f:2c:
d3:fc:52:30:8b:56:88:9c:e7:25:69:88:6c:ba:cc:28:3d:03:
a2:66:68:75:e2:15:85:ba:f9:5d:f5:55:a0:5e:79:38:8e:fd:
6c:b2:94:ec:ca:56:d9:bf:e5:3e:6f:6b:90:08:5a:8f:cb:79:
94:b4:f0:ef:bb:85:71:c7:88:2a:07:0c:73:fa:69:28:3d:82:
06:9c:5b:c0:2c:b9:56:0a:9e:36:03:b8:26:e0:13:9a:4c:7d:
29:71:ba:fc:7e:c1:06:22:33:62:40:67:f1:32:42:43:3c:26:
ba:67:ed:5b:74:24:cb:a5:ae:c0:93:6a:14:da:69:89:83:5d:
43:ff:f1:0d:c9:4e:d9:b8:88:0e:00:b0:e3:db:af:4c:fe:74:
d9:c0:16:fe:0c:e3:9a:f8:a8:2a:4a:1c:43:ca:2d:18:a6:7c:
0f:33:ce:19:ba:00:1d:03:3c:f2:81:75:d1:c8:d7:24:0c:91:
f0:62:1c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:40:58 2026 by rpki-client