Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: b8WeXeRSiy+zmAMUuiMZviY8etxvpmcJkd5DFWd1IJc=
Subject key identifier: 43:3C:FE:75:F1:2E:28:E4:A7:80:AF:4D:C4:0B:BB:24:C3:3E:26:AF
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 01A123C18643167C8CE82AD998FB5CAF77B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 19C8
Signing time: Sat 10 Oct 2026 03:00:47 +0000
Manifest this update: Sat 10 Oct 2026 03:00:47 +0000
Manifest next update: Sun 11 Oct 2026 03:00:47 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: haHNoWXVuWaOt7pY0H6IGXod/Gn/dW332zqz0ykx/9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:c1:86:43:16:7c:8c:e8:2a:d9:98:fb:5c:af:77:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Oct 10 03:00:47 2026 GMT
Not After : Oct 11 03:00:47 2026 GMT
Subject: CN=433cfe75f12e28e4a780af4dc40bbb24c33e26af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:b7:d0:e1:2f:65:4e:7b:d7:2a:1d:c3:0b:
57:24:38:6b:3c:aa:a4:12:61:43:03:57:3d:40:d6:
b7:3e:4b:16:b2:80:15:9a:82:d1:d6:27:38:b0:d8:
aa:79:e0:8b:8b:82:80:e9:c1:e8:d4:8c:b8:95:c7:
82:e4:11:ae:e0:a4:11:f6:7d:c5:67:39:4d:cc:7f:
1c:f9:06:b2:9b:e9:e2:0e:c9:a3:48:ce:39:46:ca:
a5:05:a8:cc:f3:f8:d3:ea:61:58:44:c7:db:65:c5:
5e:49:3c:7d:17:4a:a6:c2:35:bb:04:36:91:84:9d:
6b:94:8d:02:b4:1f:7c:08:85:50:00:1f:cf:7a:d9:
a1:c2:a2:7a:42:b3:0f:b6:92:9b:ef:ef:34:c4:e9:
50:64:98:b2:a0:4b:67:ba:8d:1a:13:b0:aa:66:48:
17:09:8a:ef:a0:2d:24:32:17:d2:db:bc:4c:c3:06:
5b:53:05:c8:ca:f0:96:f9:d1:60:30:f8:11:ec:b7:
7b:47:52:c8:8d:3c:97:40:85:ba:79:8c:d4:64:f0:
36:ce:ce:ca:6f:17:79:06:f7:2f:6f:eb:ac:43:7a:
5a:2b:7c:14:b1:ee:98:e1:23:0a:50:f0:6c:25:cc:
70:e4:32:60:dc:15:0c:96:74:f4:90:f8:38:f2:00:
ca:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3C:FE:75:F1:2E:28:E4:A7:80:AF:4D:C4:0B:BB:24:C3:3E:26:AF
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ec:e1:3c:d9:56:7e:df:62:b5:e4:2b:43:7f:44:46:69:5c:
3f:c3:a7:31:0f:d0:37:08:37:03:14:9c:89:8c:ec:0f:b4:19:
ae:57:ac:2e:cc:1d:38:d4:a8:3c:e9:f2:71:c4:f6:2f:ac:b4:
14:6c:d8:0f:cd:d2:e6:c5:74:a8:76:8a:82:55:19:56:92:7a:
18:a5:60:b9:62:19:ff:95:b0:a7:be:5e:7a:37:4b:f7:39:0f:
7e:b9:9f:4c:fc:d0:cb:78:ed:2b:ca:9d:b2:09:92:fb:f8:d7:
f8:ef:4d:14:7d:8e:09:08:b2:5b:62:6a:07:19:07:43:a3:97:
56:3e:1c:00:1b:92:28:85:15:eb:3d:0b:c5:69:24:78:43:36:
b2:1a:92:47:b3:b8:db:e6:34:75:b7:2c:d1:4d:3d:15:f9:15:
0a:ae:75:ad:59:60:72:91:9f:f6:a5:9d:fb:e4:af:ea:14:9c:
ca:ee:c8:dc:c9:d7:2d:83:4f:44:83:82:71:69:7d:e5:33:95:
68:ba:d2:11:ad:db:03:a5:c8:f8:52:d1:b1:a7:be:4f:54:c2:
9f:12:72:fb:c5:8b:15:3b:98:f0:1e:41:c1:08:af:fd:e7:3a:
cc:43:f4:9a:72:3a:ed:d7:1c:ed:da:c3:dc:76:e3:a3:3c:01:
50:e4:33:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:35:48 2026 by rpki-client