Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
File: QxfdFbYr3XESWZuBQjNg7uegEpY.mft (raw, json)
Hash identifier: znujQ94hCVNhWsNc58enMTnlJ2cTF3bukoJ9HTPWiuU=
Subject key identifier: 3E:FD:94:FF:76:22:E2:12:4C:AD:21:70:CC:BB:8A:E3:B3:2D:4D:17
Authority key identifier: 43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
Certificate issuer: /CN=4317dd15b62bdd7112599b81423360eee7a01296
Certificate serial: 01A119ABB7B8E89044A0431D214B77E7D583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
Manifest number: 0BF7
Signing time: Thu 08 Oct 2026 04:00:46 +0000
Manifest this update: Thu 08 Oct 2026 04:00:46 +0000
Manifest next update: Fri 09 Oct 2026 04:00:46 +0000
Files and hashes: 1: QxfdFbYr3XESWZuBQjNg7uegEpY.crl (hash: eCJ267fT6KqU7XmwbvOAAfMVKpzyPvVpCi96kVwRRe4=)
2: aPWLJM6IziuoIQ-9dg15aPOtRRI.roa (hash: nW9Lbvb0zK8UkUgMG6xc5L/WUYzGO8kQcti52apyWJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:ab:b7:b8:e8:90:44:a0:43:1d:21:4b:77:e7:d5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4317dd15b62bdd7112599b81423360eee7a01296
Validity
Not Before: Oct 8 04:00:46 2026 GMT
Not After : Oct 9 04:00:46 2026 GMT
Subject: CN=3efd94ff7622e2124cad2170ccbb8ae3b32d4d17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4f:eb:8d:66:79:6c:2c:de:11:f7:5c:d8:9a:
7e:13:a1:16:11:bd:7e:06:01:32:94:c4:52:49:e1:
69:3a:c1:03:0e:bf:b9:fb:91:8f:89:78:9d:2d:fe:
a1:8c:ac:62:64:21:9a:92:e9:99:11:ff:ac:91:37:
d4:60:92:06:a2:17:50:6c:a9:a5:34:6e:5a:de:73:
f9:61:ae:6f:74:dc:e5:f7:65:00:0b:ae:be:e2:b6:
de:36:84:cf:de:94:4d:e7:38:80:6a:9b:e5:a0:3e:
99:32:d3:cf:67:35:1c:cf:59:f9:c0:11:78:9a:d8:
f7:99:d9:ad:bf:42:14:68:94:d6:aa:0f:ce:5d:af:
76:5d:35:67:bc:a3:f5:4b:64:22:d4:bc:bd:17:d1:
ec:70:3f:12:b0:b1:54:c0:6e:2b:91:1c:91:42:9e:
a9:59:32:b6:ee:9a:ea:fc:4e:80:fb:df:ec:a2:10:
86:91:a2:d1:09:e3:e0:08:cc:17:23:e7:b4:5b:89:
b2:ca:95:b9:2f:1f:8b:d1:5d:22:42:9f:f6:6b:43:
30:00:b2:3c:45:f4:2c:8e:f7:80:2e:46:9b:45:85:
a3:bb:46:3f:58:76:83:b1:fc:bb:53:92:14:e9:aa:
af:1d:e4:b0:d8:70:07:b2:54:d4:a4:a3:e6:58:44:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FD:94:FF:76:22:E2:12:4C:AD:21:70:CC:BB:8A:E3:B3:2D:4D:17
X509v3 Authority Key Identifier:
keyid:43:17:DD:15:B6:2B:DD:71:12:59:9B:81:42:33:60:EE:E7:A0:12:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxfdFbYr3XESWZuBQjNg7uegEpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/654b89-37c1-4061-90b3-6b95500da23b/1/QxfdFbYr3XESWZuBQjNg7uegEpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b3:43:4b:5a:40:c3:69:cc:e5:ae:0b:f6:f7:c6:3c:ef:f5:
6e:98:6d:79:90:30:09:0a:ae:53:d3:34:ba:1b:8e:0e:35:c8:
8b:cf:47:63:24:04:db:bb:17:ff:f7:a8:22:1e:f5:b2:9e:fa:
22:26:7e:a5:39:d1:98:ec:30:38:6e:b1:8e:eb:37:1a:a1:70:
44:a9:d6:b7:31:e3:ba:5e:14:24:be:75:cc:a7:db:fe:75:7b:
06:74:aa:74:51:a4:92:af:3f:4a:1a:a9:01:ff:14:96:c4:ce:
9a:0c:84:17:46:71:f7:e7:72:87:8e:19:23:0c:be:af:39:66:
68:eb:cf:e6:df:46:f3:ed:80:cb:a2:f3:9f:f8:a2:20:44:bb:
1a:1b:60:8c:b4:e3:7a:52:15:ac:db:c9:12:8f:3c:9a:e7:a9:
3c:46:62:c5:06:f6:65:f3:fc:3d:a7:49:c3:40:ca:8b:fa:b6:
37:46:0e:66:8f:8f:1e:1a:8c:9a:ad:12:fb:e3:4e:03:c0:07:
04:ed:a0:c4:f7:d0:17:9d:cd:55:0f:f7:23:dc:76:20:5c:ed:
78:6a:0b:ca:3c:c8:bb:89:f2:a6:c4:cd:d6:19:9a:57:b2:5e:
1e:37:a3:fc:cb:4d:d0:f4:0d:e6:33:31:5f:bc:f8:f1:26:02:
7a:24:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:43:17 2026 by rpki-client