Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
File: QSrIOifKhyPGGxRGw-Z4EQxlBok.mft (raw, json)
Hash identifier: umlV8FCvpamx94G19lFhqxgzcLAxKSrrCGs8JLdCD40=
Subject key identifier: 06:E4:55:BB:BD:E0:12:14:22:FD:65:C3:81:C0:3E:AE:CF:F7:2B:F2
Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689
Certificate serial: 01A14616CC295E376764263796E1DB2BE3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
Manifest number: 1AAD
Signing time: Fri 16 Oct 2026 19:01:01 +0000
Manifest this update: Fri 16 Oct 2026 19:01:01 +0000
Manifest next update: Sat 17 Oct 2026 19:01:01 +0000
Files and hashes: 1: 4646eK1Tkwjccpu4DCzx2JumzS8.roa (hash: lg2Dl0touPmWfPjJx+g7bMR8N5f9QX+NTtoNaXQCBJU=)
2: EnY8i1h7IIOiJBNf7SVRYwOzSLw.roa (hash: X80Gqz0nE+6UFtGApp5Wktmc8Oc2CPQtKl4rwvAFscI=)
3: QSrIOifKhyPGGxRGw-Z4EQxlBok.crl (hash: mpCMMd/saag2FI0ELa5lUlA3n9zHdiTUVkks/j6XMBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:16:cc:29:5e:37:67:64:26:37:96:e1:db:2b:e3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689
Validity
Not Before: Oct 16 19:01:01 2026 GMT
Not After : Oct 17 19:01:01 2026 GMT
Subject: CN=06e455bbbde0121422fd65c381c03eaecff72bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:b9:02:68:d3:be:f7:85:5a:32:d4:b0:01:
58:a6:56:7f:6a:79:a9:40:15:f7:47:57:44:db:d9:
bd:11:f5:1c:a0:e2:fe:63:ea:6a:62:90:d3:45:16:
33:0c:c9:5a:9d:ef:19:74:17:2b:e8:da:6e:46:3d:
bd:ce:6e:bc:f8:18:72:c9:e7:60:85:74:a5:82:7c:
a8:e9:8e:d1:0e:e4:36:ed:18:be:8e:48:df:79:45:
1e:c5:9e:5d:f5:d1:73:22:7a:c0:12:56:e6:f0:18:
64:51:01:22:99:cf:af:bd:29:02:7b:6d:fd:01:45:
7f:3b:ad:32:b9:d5:58:24:8a:d6:d8:4e:b2:9c:d3:
db:bf:47:08:99:9b:c8:2e:81:30:2f:fc:ea:fb:b7:
a0:d3:62:9d:2c:5d:c8:c2:11:f3:e4:27:5d:4d:47:
a6:34:f2:4c:e8:3b:89:ed:55:3e:95:1d:50:42:fc:
7c:fa:49:c2:63:97:7c:9a:0a:48:74:01:83:64:a2:
e2:47:f9:9f:80:8a:b6:42:ce:31:ef:35:df:6b:a5:
7d:4a:80:f1:3e:1b:e2:bb:52:04:fb:2f:e2:c4:3f:
dc:ed:6d:61:6f:67:00:6c:c3:1a:e2:a7:37:48:28:
d7:e4:15:c2:8e:ce:b2:99:2e:be:26:ff:26:ec:9d:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E4:55:BB:BD:E0:12:14:22:FD:65:C3:81:C0:3E:AE:CF:F7:2B:F2
X509v3 Authority Key Identifier:
keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a8:53:16:39:0b:78:fe:ea:03:cc:66:04:99:d7:41:3a:2e:
da:be:0d:f0:da:a5:2a:a2:65:8f:43:b5:a8:5e:fe:74:95:ce:
6c:12:e9:50:25:ba:92:06:cf:4c:60:6a:29:bc:cc:34:ff:5e:
29:e0:2d:a1:62:5c:4d:dc:bf:45:33:93:07:3f:f2:e2:50:07:
75:4e:4e:68:20:3c:66:02:bd:50:f0:f7:9b:10:a9:42:8e:c5:
40:55:86:91:eb:52:a6:19:f5:0b:26:79:28:15:81:43:be:e7:
b5:61:be:c4:78:ac:72:15:99:2c:e8:21:e5:7f:d7:05:41:02:
9b:8c:fb:f3:d1:13:11:3a:16:8b:b7:ef:7c:2a:71:29:ef:87:
65:f1:be:2e:77:fb:1d:80:27:6b:6b:1c:92:a5:dc:ff:89:98:
ae:14:4b:8e:ba:65:f5:bf:2f:9d:40:43:79:f1:48:ec:ae:05:
e4:52:5d:19:f9:e2:5d:b7:9c:8e:6c:fa:24:c6:67:cc:27:ac:
eb:a3:3b:a7:3f:95:b9:98:40:74:61:71:05:cc:b9:42:27:59:
36:81:59:3b:2e:16:9c:8c:0c:47:27:e3:e3:f1:96:47:c3:14:
80:e9:4c:21:1b:04:db:5d:74:92:c4:d9:21:bf:e0:ae:a0:05:
b9:a9:04:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 22:43:22 2026 by rpki-client