Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
File: QNVbeINqk_tvnsn6enntm4vqK6E.mft (raw, json)
Hash identifier: HTqwYlu9YafdENBOv9tPbnVGTpTQEn0i2Tb5+8qwa7c=
Subject key identifier: F0:3A:08:1E:2B:90:B3:6E:8C:A9:79:DD:67:9D:20:14:A6:8E:2C:ED
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 01A0C77CC9B040BD76410A63B3E4CCD916AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
Manifest number: 1A72
Signing time: Tue 22 Sep 2026 05:00:38 +0000
Manifest this update: Tue 22 Sep 2026 05:00:38 +0000
Manifest next update: Wed 23 Sep 2026 05:00:38 +0000
Files and hashes: 1: 5Bwd_XnCpBq4Cag2pu6bO5I9VIA.roa (hash: eytyjkZwAv73scTtka+wDpj6hepaCfnJjuIuqglSirA=)
2: 9wbcMUG4q75E7YjhGVXHnPYT7YM.roa (hash: nEsfQpZm0sg/MSPEMCxg0Fs6SfpSZuGJLTA7MHD7Ovo=)
3: GyN2brNi0SyVzTIfSD630KlULEk.roa (hash: WuqJqU2d7Re2MFRsMAJ/7CUNdgg3R6YAy0ZwMSitoI0=)
4: QNVbeINqk_tvnsn6enntm4vqK6E.crl (hash: B1LSMac4GP0QUL7vGb1eLp3zL2fOZNkIQsND9myEs8E=)
5: iOH1McI9iTFIop-UJ1HA_U9if9E.roa (hash: jGsjtR/lt4692ZMHqph22xA5pSDg/jMmydFaGhjVUKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:c9:b0:40:bd:76:41:0a:63:b3:e4:cc:d9:16:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Sep 22 05:00:38 2026 GMT
Not After : Sep 23 05:00:38 2026 GMT
Subject: CN=f03a081e2b90b36e8ca979dd679d2014a68e2ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:62:05:f8:c2:5e:5a:c3:9a:f7:b9:90:58:65:
e6:b1:e6:6f:36:62:83:a7:cd:f1:8d:9d:d5:59:14:
47:f0:72:9f:ad:74:79:84:6b:18:53:99:2c:5f:9f:
b2:ef:32:d6:55:c4:b4:ab:36:86:eb:ba:c9:6b:73:
29:c7:bb:0d:04:5a:28:cc:5f:5c:d2:86:54:01:7c:
c4:6e:1c:35:55:39:bb:95:a9:6b:9a:f4:8f:c1:b8:
89:d6:dc:29:e6:90:8f:4c:19:62:e8:d2:c0:d5:4b:
b6:2d:ab:d5:54:68:42:fe:55:5a:d8:57:38:e9:84:
84:d1:d5:06:92:77:83:75:2a:8c:00:6d:ba:65:59:
ec:aa:26:6b:10:43:b8:75:83:6a:bc:f8:13:47:86:
d4:5b:c1:93:50:f8:da:73:99:25:b2:41:95:63:40:
83:a2:18:f5:d8:fc:ba:8e:e0:49:1a:bc:0a:12:d0:
f2:21:d0:99:16:5f:f4:5c:d0:0a:8f:7e:f1:da:2d:
89:d1:6c:70:14:dc:dc:c8:a3:0f:1f:fc:84:68:4f:
a6:5e:a7:cb:a0:5b:bd:20:98:9d:f5:17:3a:a9:d8:
d3:0f:2a:c1:17:3f:31:c5:e0:7f:8e:7c:03:56:db:
95:27:36:b1:1c:d7:53:6e:74:81:1a:7e:0f:e2:e6:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:3A:08:1E:2B:90:B3:6E:8C:A9:79:DD:67:9D:20:14:A6:8E:2C:ED
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:85:aa:20:47:7b:ad:4c:f6:50:ba:ef:6b:5b:19:40:8d:2c:
42:7c:e4:4f:50:78:b2:3d:a7:e3:23:5b:66:3e:e0:4b:5d:c8:
25:06:ed:95:5a:93:2e:1a:72:21:ec:5e:80:0a:a6:a9:1d:a9:
26:70:77:02:9f:17:84:5d:fa:5c:c0:b4:ae:d9:a9:a3:96:45:
1d:e1:a3:e9:a4:93:a0:09:47:ff:c7:07:43:80:4f:a2:ac:47:
3c:0d:ca:be:43:2c:30:3d:96:66:6e:30:09:48:10:ea:e5:2b:
54:a6:81:6b:eb:2a:ef:75:de:86:1f:d5:cf:eb:f1:b1:7f:e7:
56:2a:4d:3c:e8:05:2a:f3:f8:74:2d:86:8b:3f:97:fb:60:db:
82:dd:ad:4a:7a:24:61:2a:65:d9:a4:53:e4:ae:8c:55:ad:0d:
2d:2a:36:67:c1:65:2f:b0:92:84:a3:a2:7f:d7:9e:a2:78:27:
14:ef:3f:c1:4a:b4:e2:51:23:09:fd:85:3e:d8:7f:a2:8d:ea:
1b:dc:da:4e:7e:06:cf:6d:97:7e:42:28:b8:1f:5e:38:67:a2:
29:79:5c:2c:35:a6:da:6a:6b:90:58:3b:a4:3f:45:0a:57:6f:
d1:19:8a:95:36:f5:86:a0:8f:6a:2b:35:d6:31:94:ec:37:25:
61:fe:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:42:41 2026 by rpki-client