Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft (raw, json)
Hash identifier: GNvV7SVFQdXBZkqwJ/ZDjP3IAvpv9BsQ7oZqobKoSvI=
Subject key identifier: 02:3E:49:F8:2E:BA:B8:0E:9E:7C:72:D4:62:60:CE:AF:04:1D:F7:72
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 01A139A48A5AFCA3CD0399F4CE1357DB553E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
Manifest number: 1A46
Signing time: Wed 14 Oct 2026 09:00:46 +0000
Manifest this update: Wed 14 Oct 2026 09:00:46 +0000
Manifest next update: Thu 15 Oct 2026 09:00:46 +0000
Files and hashes: 1: 1F0qNclB-ExLPCiSnNcthE_r9_c.roa (hash: QwRMn3gGPVZpUlUuvzTrMdSUvfPfsQVqSl97mHjUskQ=)
2: Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl (hash: cIyXKb9GGYBHgwLPofATzGxwdhMVYpgN+GPSGyu7Aw8=)
3: _s2E7cG2qJT_qVlZ8vFtiTxO8qY.roa (hash: Ywl3/rT3Yvc6PwS517NtDKZMtBFZBCISKDYA9P6DLWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:a4:8a:5a:fc:a3:cd:03:99:f4:ce:13:57:db:55:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Oct 14 09:00:46 2026 GMT
Not After : Oct 15 09:00:46 2026 GMT
Subject: CN=023e49f82ebab80e9e7c72d46260ceaf041df772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:06:7b:ef:49:01:e2:87:8f:8f:50:a5:13:d3:
a7:66:cc:d5:ae:94:c6:9d:b4:f8:24:a1:86:5c:9a:
8d:39:8f:a6:2d:df:97:a2:e7:ca:89:8d:40:bb:ec:
c5:94:e2:6a:48:65:8e:f5:c1:59:6a:07:14:99:ea:
59:8b:dd:1d:03:8f:fa:00:e5:7d:32:96:d7:d7:d5:
7c:4a:07:5c:3d:55:a6:56:a5:a7:87:95:36:4f:c8:
a3:7c:f9:fe:b1:57:d1:3d:57:49:ed:64:39:06:af:
e4:a6:b4:64:55:82:16:10:a5:eb:1e:eb:8c:97:50:
bb:81:6f:45:98:74:53:45:f2:93:40:03:79:d1:20:
54:88:cc:92:09:44:e9:09:bb:57:16:67:94:e9:35:
1e:57:f6:c5:7f:23:cb:76:c1:f5:18:c9:0c:d0:17:
ca:3c:b0:3e:f2:ad:55:07:11:9c:6a:a2:5e:b2:5d:
aa:7c:fe:18:e2:f4:85:32:df:19:d5:9e:a0:df:93:
1b:a8:5a:ef:df:c6:cb:cd:d3:72:a9:90:3e:42:c5:
95:3d:5d:ac:a6:4b:91:fe:7e:61:7b:8a:00:f2:38:
9e:78:2e:41:ff:fa:db:ab:b1:eb:01:f0:78:c4:6d:
e7:1f:37:fe:2b:ec:39:58:f3:14:0c:6a:11:a2:35:
b6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3E:49:F8:2E:BA:B8:0E:9E:7C:72:D4:62:60:CE:AF:04:1D:F7:72
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:16:69:68:02:15:34:a4:07:7c:5e:a7:0d:68:3e:bb:cd:ee:
57:6b:00:7a:c4:13:15:62:a9:47:4a:be:05:98:bc:a7:77:62:
68:a7:33:5b:d1:ea:54:ff:33:01:e1:ab:f5:7e:48:b5:d5:54:
79:32:34:88:8e:19:cb:a8:b3:33:14:5b:91:76:6a:f5:b6:16:
e5:d1:30:7f:5e:c3:11:54:ad:c5:75:8e:e6:04:84:b3:10:08:
4f:80:c0:38:fa:3b:b5:d0:ff:0a:82:0a:1c:af:e4:7b:1e:c6:
95:03:60:cf:7e:db:57:5c:6e:34:10:67:88:a8:8d:0a:a6:39:
9a:24:07:5d:99:ba:5a:0c:27:93:0d:dc:dc:cd:1e:ac:51:f6:
6e:be:cd:97:29:c7:2a:00:4f:6b:d0:23:e2:d1:a6:f1:7f:98:
53:bd:86:46:ca:e1:c5:ea:7c:77:4a:d1:a2:56:58:b5:9a:12:
89:e8:5d:96:7b:0a:02:36:74:c9:f8:9f:5f:02:9c:5d:c9:13:
0f:ac:33:fc:be:5f:b4:04:3b:2c:09:d0:73:5e:59:22:21:1b:
ec:ba:33:d7:d2:96:4d:3f:95:c1:d7:11:65:b1:8f:ce:5d:c1:
53:19:2d:a6:8c:0b:71:c8:04:f0:c4:76:1d:ba:e6:80:7a:3b:
9c:f0:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:07:25 2026 by rpki-client