Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
File: QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft (raw, json)
Hash identifier: 5cfCg0liiLT8QBxtMEKVrI0l7qoh+KIXJTdJAliz9Gw=
Subject key identifier: 66:A9:FB:8B:78:F0:F9:5D:62:C4:0F:6F:B9:4D:AC:B2:33:31:1D:2D
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 01A113AAD61FFA6AFACF4EFD1F7CD2FEA08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
Manifest number: 1A91
Signing time: Wed 07 Oct 2026 00:02:05 +0000
Manifest this update: Wed 07 Oct 2026 00:02:05 +0000
Manifest next update: Thu 08 Oct 2026 00:02:05 +0000
Files and hashes: 1: MQeTf0MYRPYw_402BYO3IY08ZTI.roa (hash: ubuWvtB27a2rNunPzQvBhMbVlyiCsPYMuMsDZ/GM8W0=)
2: QC24amafYIiFlBtdr2WUg2xACfs.roa (hash: Ng0ihtKKcM9kRDb9fajNLLNxzOWsbpbjqi/vEHQuY0M=)
3: QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl (hash: nsP9aOr4zGwuobvEt+jSIHt4yJxjArXN2e3jDp5w6bU=)
4: sJsFgScidYmjw0Gax5q7KoaUiTs.roa (hash: eLBSlnZ6dXYnxuPFk8J5TGTFkRXIwmeZVoqCZXfPffQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:d6:1f:fa:6a:fa:cf:4e:fd:1f:7c:d2:fe:a0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Oct 7 00:02:05 2026 GMT
Not After : Oct 8 00:02:05 2026 GMT
Subject: CN=66a9fb8b78f0f95d62c40f6fb94dacb233311d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c0:d5:a5:7f:68:d2:7e:5e:22:e0:fe:85:ce:
36:32:30:34:26:ae:41:f4:71:c2:df:d0:0f:84:04:
13:38:1f:5e:3f:ba:e7:a4:92:14:32:65:4c:98:cc:
44:37:ba:9e:db:18:5b:96:46:14:f6:56:d3:8f:55:
26:95:1b:14:b3:56:5d:7c:2f:00:4e:7f:d8:49:f0:
22:a3:04:b6:c2:dd:4a:20:42:ca:e8:3f:3b:c6:71:
0b:e2:1f:d6:36:fa:f3:33:51:67:6c:a2:e2:28:49:
c1:10:2a:65:40:eb:81:84:85:ec:f1:4e:b1:55:90:
82:a4:55:13:80:49:8e:ed:ac:4d:d6:b7:e5:c2:98:
49:56:cc:19:b8:f1:ed:84:f7:3d:6d:46:e7:7b:61:
62:ed:b6:5a:c4:5e:5c:81:b0:9f:7e:f5:5f:93:8a:
02:23:9f:45:df:e1:92:9f:2e:bd:62:35:54:c7:f9:
9f:76:fe:aa:d0:99:a4:9e:ec:0d:d3:cd:7b:97:59:
c0:4b:d5:01:14:e7:c7:db:c6:2b:dc:79:51:2a:d5:
64:0a:69:67:a6:41:db:ab:97:2b:58:f1:5d:3e:9a:
4b:97:0a:4f:be:d8:ba:7d:f9:2c:b3:9b:7d:4d:35:
74:6b:87:55:e0:02:48:4b:3c:92:2f:50:91:ce:ce:
a7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A9:FB:8B:78:F0:F9:5D:62:C4:0F:6F:B9:4D:AC:B2:33:31:1D:2D
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:00:52:32:16:5e:4d:4e:94:50:e6:be:d3:2e:cc:6f:6c:a7:
0a:5b:81:b5:26:ca:c1:07:84:1a:fd:7a:a5:10:3a:c3:64:af:
2f:e6:4e:b2:81:0e:b5:96:8e:84:4c:1c:87:c8:b1:6e:53:f1:
26:df:8a:21:f0:53:dc:00:e3:02:c1:9f:1a:bd:26:8c:f0:da:
96:f1:d8:60:6b:6c:85:1e:d8:ff:82:f3:2c:b8:2c:ea:ba:66:
c0:d6:7b:01:12:7d:d6:ef:43:fb:23:ef:9f:fb:54:7f:4d:99:
8f:06:13:f3:22:fa:15:3e:fc:15:c6:53:49:fb:9f:14:08:d7:
8c:84:2c:61:52:ce:40:82:f9:e7:51:69:7b:44:b6:7a:74:98:
16:29:e9:26:33:6e:0d:41:8c:1d:67:2a:74:de:43:3e:e4:cd:
4c:c3:9b:d7:a4:39:48:8a:61:e0:69:41:ef:5a:47:f4:30:71:
10:4a:e0:d7:67:18:e5:6f:4e:40:27:41:41:24:bc:9c:34:93:
e1:6d:df:6c:a7:35:79:c4:df:08:16:05:e2:8d:0f:f6:3b:43:
df:c9:63:91:8c:1f:9c:0d:7c:31:b4:0b:a7:ff:b0:8c:7d:35:
68:ad:cf:ac:24:27:84:f5:40:72:58:48:70:b8:a7:e8:89:f8:
30:23:93:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:22:03 2026 by rpki-client