Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
File: QbA1V5NRFBbxRwW15pV14JEgMcE.mft (raw, json)
Hash identifier: JnMbv9hR0j+Uc/T1xCiI425SUV1MzRv260jJFH2RiHE=
Subject key identifier: C6:85:8C:AB:30:41:33:C8:CB:B6:87:55:AD:E0:D1:D8:6A:EA:73:6B
Authority key identifier: 41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
Certificate issuer: /CN=41b0355793511416f14705b5e69575e0912031c1
Certificate serial: 01A12767C5EC94D4C62CACAF48BFEBAB4C55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
Manifest number: 032D
Signing time: Sat 10 Oct 2026 20:01:14 +0000
Manifest this update: Sat 10 Oct 2026 20:01:14 +0000
Manifest next update: Sun 11 Oct 2026 20:01:14 +0000
Files and hashes: 1: QbA1V5NRFBbxRwW15pV14JEgMcE.crl (hash: 4Sq/FCNCtgVHuax7Hv83GLlic24ABJN2SJgNu1unVjk=)
2: jDh_e5jFCb4SZSQr89DNuyR1GmA.roa (hash: OOgQec1GLUpiwLdlG2tPvtCo/oWMRbASwbpSjxC/PqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 19:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:c5:ec:94:d4:c6:2c:ac:af:48:bf:eb:ab:4c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b0355793511416f14705b5e69575e0912031c1
Validity
Not Before: Oct 10 20:01:14 2026 GMT
Not After : Oct 11 20:01:14 2026 GMT
Subject: CN=c6858cab304133c8cbb68755ade0d1d86aea736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:01:5c:c2:27:c4:37:bc:8c:9e:8f:76:4b:34:
1a:90:9b:08:44:54:b8:24:bc:e7:48:2e:ab:28:8d:
fb:5e:5a:7e:18:65:5f:ad:2c:01:9f:e4:e9:ba:dd:
ae:51:80:36:66:01:a8:ee:b1:3c:82:28:0e:3a:2f:
fd:72:3e:a3:44:39:b2:01:71:c2:69:88:b5:4e:4d:
ab:43:a0:40:b1:f5:6b:f3:62:4f:c5:da:50:c3:7b:
49:69:c2:d7:50:e5:46:89:82:1f:f6:34:10:aa:6c:
11:04:e7:db:7c:e7:b9:ac:f3:53:7c:90:63:f2:3e:
73:3a:2d:45:48:ee:91:d6:d1:7d:89:cc:a9:ee:b4:
c3:8c:27:48:cc:1e:e9:7e:d9:04:f6:36:59:d6:77:
33:fc:1f:88:46:54:79:99:c5:72:7d:71:d5:84:9f:
23:79:bd:1a:5c:78:82:dc:85:c6:a5:91:f2:7b:01:
8d:f1:be:5a:1f:1a:1b:e6:47:f1:6a:7d:bf:5d:89:
51:25:78:e1:99:b9:d0:c5:54:9d:21:37:2c:99:3f:
ce:e5:ac:c4:c9:98:a4:1c:9b:36:93:76:3c:15:80:
9c:e9:85:3a:0a:59:1f:67:4f:28:60:94:50:24:eb:
03:47:7d:03:e0:3a:82:8e:13:41:5e:79:98:6c:50:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:85:8C:AB:30:41:33:C8:CB:B6:87:55:AD:E0:D1:D8:6A:EA:73:6B
X509v3 Authority Key Identifier:
keyid:41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:74:05:c6:d7:36:4e:8a:bb:c3:2b:d9:61:10:b9:10:c3:95:
64:1f:70:7e:0d:f9:0a:af:e6:85:59:7f:2f:66:76:3e:29:95:
97:ae:06:86:43:0e:06:c0:b5:c3:ec:dc:a5:59:6b:1d:2b:18:
23:87:bc:ae:b8:6c:0f:a1:8c:b3:96:b1:a0:bd:92:84:b4:a2:
ea:47:d6:d6:6c:34:42:72:1a:77:84:f3:83:01:a2:0f:aa:36:
58:25:1e:c9:37:da:e4:50:26:90:0c:5a:79:36:9e:c6:a1:66:
16:c7:0d:5c:c4:18:9a:11:a9:2e:ff:dd:7f:d5:33:d0:70:be:
a8:c4:9b:7d:96:ec:8a:99:40:f8:e6:78:86:8d:ed:6b:df:9d:
3c:ad:99:80:dc:55:5f:80:a5:da:c9:48:c7:86:67:2f:6a:b7:
5a:df:7f:39:a9:4c:fd:26:40:ec:d2:a1:b5:73:74:f6:d0:cf:
0f:ce:cd:db:43:b6:06:fd:29:79:14:a0:60:96:2d:9a:0d:05:
a2:5c:d7:ac:8f:8b:c3:92:be:ce:d8:c3:e6:39:4a:12:20:9d:
79:87:7c:a2:de:36:99:36:f3:10:1c:37:02:ac:ae:79:1b:d2:
06:01:ef:87:bc:45:15:5e:f8:1a:05:c0:d1:4e:4d:2e:5a:03:
de:47:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:37:08 2026 by rpki-client