Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
File: QGYnM7yHPRPh-fZujf91yCDV0vc.mft (raw, json)
Hash identifier: Q9rPR7oR/xRQb4rmdDnbvls/WeHYmZa1cV7Ti4qnE4U=
Subject key identifier: 42:28:B4:3A:0A:F3:6B:42:90:E1:3C:C5:88:22:81:A4:29:1F:C3:21
Authority key identifier: 40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
Certificate issuer: /CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Certificate serial: 01A13DEEE3801560E0EF0244B42CCA574540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
Manifest number: 12AA
Signing time: Thu 15 Oct 2026 05:00:28 +0000
Manifest this update: Thu 15 Oct 2026 05:00:28 +0000
Manifest next update: Fri 16 Oct 2026 05:00:28 +0000
Files and hashes: 1: 41UHcYawFZ6dwCf_FfKVxB6pAyA.roa (hash: mxz0vZfXkFbrjS45D2R+Mi2lF9MSSxAbkahXO8KfBYc=)
2: QGYnM7yHPRPh-fZujf91yCDV0vc.crl (hash: 0Me+1tfsPHYfcX/pvwTeKTPmvHGAwGMp+wQSHWvZnxw=)
3: gDO3yGlii3vGStP0g8IXSinnODc.asa (hash: 4GKXfRU/6q53CGfLh+IE//Y0yEXtQGF8Ot458LYjOwE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:e3:80:15:60:e0:ef:02:44:b4:2c:ca:57:45:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40662733bc873d13e1f9f66e8dff75c820d5d2f7
Validity
Not Before: Oct 15 05:00:28 2026 GMT
Not After : Oct 16 05:00:28 2026 GMT
Subject: CN=4228b43a0af36b4290e13cc5882281a4291fc321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:fa:fb:5b:b7:57:19:93:f8:de:6c:f7:91:
af:ed:77:f2:be:36:70:7e:74:4b:0e:e8:a2:1e:4d:
05:05:56:ed:99:4e:17:83:d8:7b:58:24:42:be:0d:
a1:c7:7b:2b:cf:11:6d:35:a8:f4:a4:46:43:26:65:
1c:2a:9a:3a:fc:7a:60:08:35:4b:db:6e:27:62:84:
bb:46:0a:79:d7:b9:7b:37:d5:ca:d5:e7:a5:d9:94:
24:57:e3:aa:b5:dd:d4:06:3c:43:05:8b:cd:0f:5c:
a2:28:8c:66:87:db:b0:2e:84:a1:30:73:48:ca:a8:
74:29:91:7e:91:2a:c4:92:f1:87:4b:5e:c9:ef:19:
fc:64:d0:a9:92:a1:8b:53:1e:37:3d:1d:86:77:ed:
94:2f:b1:96:59:cd:9c:bc:8e:de:94:d6:0c:ca:8f:
cc:b9:e9:77:20:d1:34:c7:c9:cd:5b:ac:c0:84:37:
7b:a9:4a:f6:32:45:11:93:4f:f6:c8:ea:1d:dc:65:
cd:4c:e9:57:b0:95:af:af:7b:6b:4d:63:2a:03:5d:
c3:81:61:35:97:65:ab:de:2a:fa:17:62:f6:64:b3:
f0:c0:31:d6:24:d2:eb:c0:db:93:c6:18:9b:24:a7:
82:9d:1d:a2:be:2d:3c:96:6b:5a:8e:ee:cf:97:05:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:28:B4:3A:0A:F3:6B:42:90:E1:3C:C5:88:22:81:A4:29:1F:C3:21
X509v3 Authority Key Identifier:
keyid:40:66:27:33:BC:87:3D:13:E1:F9:F6:6E:8D:FF:75:C8:20:D5:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGYnM7yHPRPh-fZujf91yCDV0vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/d910d1-94c6-4412-8506-9cb51e51ff77/1/QGYnM7yHPRPh-fZujf91yCDV0vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:db:9a:67:fe:2b:c1:cc:5e:b9:81:e6:63:4f:99:9d:f5:64:
7e:e4:66:83:e9:ff:68:b8:6f:ab:0d:08:4b:d6:f3:2e:b2:b6:
73:d9:61:2e:11:8e:81:16:3e:67:c2:3d:7b:31:4f:b3:ef:3c:
3f:f3:b9:81:a6:04:e0:fa:22:87:3c:be:aa:2e:9d:5e:f2:80:
e9:32:58:68:88:f6:31:98:6c:15:fb:e6:2c:e8:56:90:36:6f:
f6:58:1d:4a:f9:f7:8b:1a:14:81:45:d5:d4:85:04:7f:1c:50:
22:2a:d4:ab:8d:3e:c7:11:a0:95:66:28:06:d5:81:d2:ce:eb:
52:99:5c:fd:d7:34:48:9b:36:44:82:fa:1e:67:5b:55:f4:75:
da:b2:2f:82:10:96:a9:f5:5b:07:59:27:11:90:b5:6f:5d:04:
16:07:3b:1a:9b:98:88:a8:d5:43:e5:2f:45:4b:b8:09:cd:b2:
5b:a3:7c:86:8b:b3:88:f2:2a:7a:ff:0b:d3:f1:06:8f:bc:e5:
1e:08:48:2f:7f:b6:72:f7:89:c0:18:8c:85:62:e5:5a:20:f6:
47:1f:5e:eb:ac:b7:27:f1:d7:b8:3e:e9:ee:b4:a0:5b:f1:a9:
6d:de:09:18:6f:7e:62:a3:9b:13:89:88:24:2a:96:49:9d:dc:
ad:28:de:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:02:46 2026 by rpki-client