Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
File: QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft (raw, json)
Hash identifier: pEUkURiAlHSaWwWDmBVwmw3SNXc427pRdxrvNKH0/QU=
Subject key identifier: E8:5E:F2:D0:85:15:D2:E2:01:97:88:C2:A2:CC:BE:68:62:C3:FB:C0
Authority key identifier: 40:0B:BC:1C:65:4F:D8:8E:04:0A:0F:A7:94:8C:6C:3F:3D:D9:16:D9
Certificate issuer: /CN=400bbc1c654fd88e040a0fa7948c6c3f3dd916d9
Certificate serial: 01A12B446CC0EE7B80D262B32A7DDF8EB2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
Manifest number: 82
Signing time: Sun 11 Oct 2026 14:01:06 +0000
Manifest this update: Sun 11 Oct 2026 14:01:06 +0000
Manifest next update: Mon 12 Oct 2026 14:01:06 +0000
Files and hashes: 1: QAu8HGVP2I4ECg-nlIxsPz3ZFtk.crl (hash: 2RoN5dNBCByy7t7Du74fM5XS+a3hmCwXAfLdfQmgWu0=)
2: eaoDxQJvrJYu6cYms8T0nP0nQww.roa (hash: pSWhtvDnivm9h8nEKPtzE2ztIFwGkPLz2VOJgQFEu/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:6c:c0:ee:7b:80:d2:62:b3:2a:7d:df:8e:b2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400bbc1c654fd88e040a0fa7948c6c3f3dd916d9
Validity
Not Before: Oct 11 14:01:06 2026 GMT
Not After : Oct 12 14:01:06 2026 GMT
Subject: CN=e85ef2d08515d2e2019788c2a2ccbe6862c3fbc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6f:c1:4c:e4:8e:47:fe:87:f3:1a:3f:20:9c:
fa:6f:16:2b:87:10:66:85:9a:96:bf:b5:bf:25:66:
54:61:8a:b1:74:dd:19:2c:97:a7:af:76:f9:7e:46:
9f:2a:8b:92:e4:e5:17:65:3f:42:eb:90:a4:b4:44:
fa:89:2c:df:b1:b1:09:72:a3:c3:04:3b:53:47:cf:
e0:09:33:2f:1c:23:77:f4:5b:e0:db:dd:13:87:80:
fa:ed:07:98:52:0f:17:f5:e4:84:60:15:30:d6:a0:
bf:e9:f9:20:05:86:c4:7f:92:e5:3d:d6:c0:fa:6f:
bf:e3:ab:b7:c6:ba:18:17:07:7f:5a:ea:6d:d1:39:
5b:c4:66:e7:c1:e0:9b:69:29:87:4b:0f:e4:99:8d:
7a:b0:8d:6e:52:10:28:7a:d8:3d:f0:f6:e7:3c:d7:
e2:58:63:aa:53:8e:67:d7:98:32:59:7d:2c:e4:6c:
bb:0b:96:13:63:04:c9:a5:71:77:79:08:63:75:3f:
ef:49:e2:1d:fa:5c:97:eb:29:dd:b2:fd:8a:c6:27:
3d:b9:3d:c0:d8:58:0a:68:a9:df:a5:cf:fb:0a:02:
56:ba:5c:a4:8d:16:90:59:cb:9c:0f:c7:bd:a7:ac:
7f:9d:ea:37:1c:73:d2:8d:40:64:5b:6e:73:e6:e7:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5E:F2:D0:85:15:D2:E2:01:97:88:C2:A2:CC:BE:68:62:C3:FB:C0
X509v3 Authority Key Identifier:
keyid:40:0B:BC:1C:65:4F:D8:8E:04:0A:0F:A7:94:8C:6C:3F:3D:D9:16:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/165723-824c-47b4-9760-294592488c23/1/QAu8HGVP2I4ECg-nlIxsPz3ZFtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:fc:9b:9d:2b:f6:2c:b9:92:c3:bf:1b:5f:09:ff:54:86:8c:
80:4d:20:3d:61:e0:4f:d6:3f:ef:3b:60:58:e3:5c:f8:81:ee:
98:9a:23:d3:2a:31:ef:8b:28:53:f1:0d:19:c9:e2:a5:1b:b0:
da:1c:ee:d3:4b:85:cd:12:27:e9:d7:db:d1:45:19:79:b6:21:
76:da:a4:58:55:eb:2b:d2:da:cb:3a:6f:e6:29:b7:50:eb:3b:
bc:16:f7:73:fc:ff:bc:71:e8:fa:ed:2b:94:d5:2f:46:cc:82:
f4:db:0a:4f:69:14:70:e3:72:f4:96:ea:17:d1:4c:cd:30:e9:
4d:19:1c:f2:11:88:75:b3:b9:0a:66:44:2a:8f:e8:4c:c0:1b:
e1:e6:1c:ae:b6:47:bc:36:e0:84:0b:df:4c:e6:36:2f:b2:5c:
ca:5c:46:b0:4b:ca:3c:56:05:66:ed:43:9c:2a:20:c9:0f:55:
6b:58:9f:eb:88:bd:cf:52:52:be:ab:90:75:ee:e1:6e:c9:3b:
bb:be:11:42:53:4e:84:0a:23:a2:ce:17:0d:63:27:1d:d7:00:
52:19:92:e7:25:d6:d2:2e:82:40:98:47:a6:27:66:03:54:a4:
8d:b0:95:44:59:fc:ae:81:25:fc:a9:25:a2:84:89:5a:a1:de:
5d:e2:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:47:17 2026 by rpki-client