Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
File: qbfYAH71qCdsSk6cQgfQRU_xhVI.mft (raw, json)
Hash identifier: DmqgDW2uK8Y7OBzwqXoPyvVtXUWQcA2prBNjfGLpBlg=
Subject key identifier: 20:01:90:CA:DA:A1:13:A5:B0:42:E8:81:17:8B:6B:A1:C3:B9:BB:C3
Authority key identifier: A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52
Certificate issuer: /CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
Certificate serial: 01A126FA568443EDE041CADE7405EBFDE898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
Manifest number: 0112
Signing time: Sat 10 Oct 2026 18:01:42 +0000
Manifest this update: Sat 10 Oct 2026 18:01:42 +0000
Manifest next update: Sun 11 Oct 2026 18:01:42 +0000
Files and hashes: 1: HQkCijMV9_xz1pxlMVTKYL1q5Lc.asa (hash: PxM/0EfV3k77iXpSKK4QS8zmHHDp3CSagYFz+PFhCsg=)
2: q9si30G3Z4SCm8CWscBg7k7qW-o.roa (hash: hQIS9g3ceAT84twsdrq5NBtYX97qQ4HwbcAX1yCehDk=)
3: qbfYAH71qCdsSk6cQgfQRU_xhVI.crl (hash: LkgyQVFeV1wXeWJ9MPqnPQ4FRlLkZ1WFvqWDx/MQlO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 18:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:fa:56:84:43:ed:e0:41:ca:de:74:05:eb:fd:e8:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
Validity
Not Before: Oct 10 18:01:42 2026 GMT
Not After : Oct 11 18:01:42 2026 GMT
Subject: CN=200190cadaa113a5b042e881178b6ba1c3b9bbc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:88:ea:68:9b:21:fa:8c:7c:09:bc:f0:68:27:
17:22:a0:7e:1b:34:24:0c:23:05:b2:c3:20:c6:84:
3d:18:e6:2c:f0:9d:de:70:a0:ed:d6:b1:af:5c:06:
6c:9e:81:33:bf:de:72:da:e1:46:81:9d:91:b2:6d:
26:cd:57:0f:e7:c2:bf:94:b3:e7:64:bf:01:a1:0b:
0f:a4:ce:f1:02:1e:5d:99:a1:2c:9a:56:05:81:6a:
4b:ea:69:c3:a5:47:0a:ca:49:fe:14:13:f2:cc:3f:
90:35:64:b3:97:71:26:d8:ba:a6:cc:44:cc:36:73:
eb:79:4a:cf:eb:62:32:e8:55:fc:c3:68:49:e8:eb:
33:00:37:c1:9d:0c:2b:8c:45:e0:50:e1:bc:41:f0:
3d:7b:1d:ec:66:9f:45:74:c5:12:70:e3:ad:24:22:
63:8e:a1:cc:cb:48:7a:08:40:76:ab:1b:20:1e:06:
52:fd:ca:98:59:49:ee:94:cf:2f:6f:a5:c6:d4:86:
25:f3:4a:fb:46:56:72:1e:ec:f2:e1:5f:1a:6d:75:
d0:f1:ba:eb:59:17:a6:2c:6f:50:41:b0:20:00:ec:
f2:19:c4:87:21:11:62:af:19:e3:74:a9:e1:e4:82:
19:a2:20:ac:0c:bd:e3:f7:da:84:51:ef:03:b9:c9:
9e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:01:90:CA:DA:A1:13:A5:B0:42:E8:81:17:8B:6B:A1:C3:B9:BB:C3
X509v3 Authority Key Identifier:
keyid:A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d7:e8:d4:d4:f6:10:38:b6:81:13:c7:f9:69:9a:c3:75:31:
15:35:c4:f0:84:e5:2f:08:be:38:ec:a9:6f:db:3a:77:6c:fc:
dc:27:29:a7:66:67:07:f1:c5:17:40:82:84:09:54:14:a2:ea:
06:5e:9c:b3:62:f1:34:d0:1e:3c:d2:3b:2f:d2:1a:c4:dc:63:
4f:ba:d9:db:83:99:e2:00:ed:fd:0c:8c:5d:d4:b9:5b:71:70:
76:de:68:9c:0c:c3:9e:93:35:07:ea:97:ec:84:ae:a0:c6:a4:
bd:f1:6a:41:28:e5:79:29:dd:4c:82:b3:bf:8c:c6:ce:74:30:
da:5b:55:9c:5b:c7:d6:a6:94:83:ee:12:95:f3:16:94:4b:98:
d6:8d:e6:fe:23:6d:1c:1c:98:0d:fe:0e:9d:ea:05:a2:0a:88:
33:45:0e:3d:25:10:73:71:d4:5c:24:a5:c2:07:75:fc:06:39:
d0:2a:7f:85:98:67:26:8e:18:c7:ab:44:7a:f2:d2:84:23:84:
ad:55:4b:7d:31:c9:13:5b:65:17:e0:74:d1:1e:2a:ec:e5:7d:
7f:1f:6b:fe:4d:30:e0:1d:1f:80:8d:7d:ab:92:ee:d5:99:54:
d4:1b:ff:da:2e:a9:cc:c8:4e:6c:dd:66:75:52:55:ec:5a:74:
87:76:24:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:17:06 2026 by rpki-client