Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
File: QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft (raw, json)
Hash identifier: l7GJdRINXeBN6r8PcEYaN+35GT51PWrwhalttv2bHec=
Subject key identifier: 2D:AC:A5:2C:C5:6F:9B:2C:8A:1D:F0:F9:DB:FC:FD:F2:71:E5:B9:0C
Authority key identifier: 40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
Certificate issuer: /CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Certificate serial: 01A0CD7F0EB1E05A352C22077D73293F447B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
Manifest number: 1745
Signing time: Wed 23 Sep 2026 09:00:51 +0000
Manifest this update: Wed 23 Sep 2026 09:00:51 +0000
Manifest next update: Thu 24 Sep 2026 09:00:51 +0000
Files and hashes: 1: QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl (hash: OlwCyvoxnNVBg4Tsd0pFSN4q1ddCn4RtY1cV9d68gRM=)
2: ZSUWbthBvo_6Zw6kb1ckbu5J7oc.roa (hash: ZaGSqNYJnPVTZ9+srIwf9B+6TSy2n8Z/jE8FtxeWX2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7f:0e:b1:e0:5a:35:2c:22:07:7d:73:29:3f:44:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407bc1dc2e11d491b9b85e08d01c222f9776c3cc
Validity
Not Before: Sep 23 09:00:51 2026 GMT
Not After : Sep 24 09:00:51 2026 GMT
Subject: CN=2daca52cc56f9b2c8a1df0f9dbfcfdf271e5b90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:b6:2e:79:3d:62:89:f3:f0:d8:87:1c:e2:
57:17:27:02:3b:d7:33:c7:33:4f:8f:d8:c0:3f:4a:
94:d3:ce:c7:dd:aa:31:64:3b:ac:43:fd:44:21:cd:
f4:a5:97:77:44:2f:ce:ca:bd:4e:4a:84:24:e8:20:
9b:b3:90:b3:94:86:59:c6:a0:70:85:09:77:c8:35:
9c:88:c6:94:97:ae:6e:ed:f9:10:c0:e3:55:f3:07:
9a:90:ca:c9:f4:f6:03:c6:b1:82:c9:54:f8:ab:2c:
d2:c7:99:56:19:b3:73:85:44:67:70:84:7c:d2:06:
b6:ae:f5:36:75:84:96:51:43:ff:3a:a6:9d:f2:43:
23:aa:3f:9c:84:67:ec:27:fe:c2:7d:62:9f:12:78:
b7:93:14:59:1e:53:bb:bd:87:f2:a5:dd:47:c0:54:
33:c3:5b:22:d3:bf:22:8a:86:23:90:f7:0a:2f:2b:
0d:fa:64:da:41:c7:a3:ee:64:81:49:67:a5:61:d8:
eb:95:25:88:e0:49:9a:a8:26:6a:a5:88:66:a0:40:
a7:b0:4c:9b:e9:19:15:43:37:b1:af:33:80:b5:eb:
37:ec:a7:dd:72:a4:88:b6:7f:a9:f3:87:d5:16:ad:
b4:14:ca:0c:70:a0:4f:82:9f:e6:37:2f:24:57:f7:
d5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AC:A5:2C:C5:6F:9B:2C:8A:1D:F0:F9:DB:FC:FD:F2:71:E5:B9:0C
X509v3 Authority Key Identifier:
keyid:40:7B:C1:DC:2E:11:D4:91:B9:B8:5E:08:D0:1C:22:2F:97:76:C3:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHvB3C4R1JG5uF4I0BwiL5d2w8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f10bc7-7c9e-4d98-8d7b-7af0a15f40b5/1/QHvB3C4R1JG5uF4I0BwiL5d2w8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c4:e0:cd:e1:a6:e7:69:35:d2:20:9c:a8:10:d9:15:6b:fc:
f6:e5:33:53:12:41:e1:d0:eb:d6:51:46:28:24:4d:31:65:0b:
e1:a9:5e:15:19:f1:d3:4b:03:5e:22:ce:23:c4:f1:e7:6b:4f:
96:a0:87:29:a1:0a:93:3d:39:1a:b5:1d:15:49:3a:4b:f0:53:
fb:d8:bc:a7:af:3a:1e:bc:cd:8c:32:ff:fe:fa:c6:3f:eb:1c:
62:d2:8e:57:10:14:00:4f:8c:89:47:e6:56:fb:ff:a1:0f:e7:
16:98:ba:bc:1b:a2:f4:46:b9:10:75:25:6e:4f:62:a0:64:c8:
23:25:65:4c:4c:8d:92:be:91:35:61:32:30:9a:33:3c:71:af:
18:ea:14:bc:79:82:5f:ea:d9:4e:8c:b4:09:b5:bd:12:30:96:
44:c2:4a:c8:bd:91:2d:ff:37:f0:2f:08:80:99:23:3e:a8:4a:
29:4c:73:3c:56:06:3b:b2:f0:78:2a:30:bf:2f:c1:75:3a:a4:
cd:30:40:c6:36:cb:18:32:ef:08:99:09:20:f8:22:f1:82:15:
b7:26:85:ec:29:eb:20:95:42:8d:50:b9:41:01:82:05:f6:65:
c7:8b:8b:73:15:4a:c9:ca:e6:cd:07:46:64:bf:a7:cf:c0:38:
49:d4:b0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:51:13 2026 by rpki-client