Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
File: QHSniVh1zyxnhUT2zm9LI59JKfs.mft (raw, json)
Hash identifier: b53xseBwvePlOweKJckf7YRp04JpWFbbdnN2yc+MiUs=
Subject key identifier: DC:CE:23:11:E1:CE:87:C9:36:BD:B4:4E:75:E3:23:CB:E5:FF:D6:B0
Authority key identifier: 40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
Certificate issuer: /CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Certificate serial: 01A1291ECB5C56A34FD177312E9AA99A14E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
Manifest number: 1A99
Signing time: Sun 11 Oct 2026 04:00:46 +0000
Manifest this update: Sun 11 Oct 2026 04:00:46 +0000
Manifest next update: Mon 12 Oct 2026 04:00:46 +0000
Files and hashes: 1: QHSniVh1zyxnhUT2zm9LI59JKfs.crl (hash: Q/wDRpzkB6fG7naZaNJxS6WJBWeyRREIWovTv3J5yTk=)
2: ugMrWtr-AgbWpTxdCrlYjC4RyWA.roa (hash: 5ukMlR12Rye0g+suC8BFsAQhk/pWlg5h05IGSX13iYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1e:cb:5c:56:a3:4f:d1:77:31:2e:9a:a9:9a:14:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a7895875cf2c678544f6ce6f4b239f4929fb
Validity
Not Before: Oct 11 04:00:46 2026 GMT
Not After : Oct 12 04:00:46 2026 GMT
Subject: CN=dcce2311e1ce87c936bdb44e75e323cbe5ffd6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:72:f7:f7:07:b2:d3:e3:fc:65:bf:93:39:e1:
11:78:21:30:af:5f:6c:12:32:b2:9b:60:3a:5d:0d:
ed:80:22:92:6f:cd:de:64:7c:0e:87:52:60:32:55:
c2:24:23:7c:15:81:b9:8c:8b:94:33:02:ec:ca:54:
5e:6b:0d:15:bc:e8:44:4a:a5:e6:d8:7a:a7:69:49:
6e:1b:13:30:ab:3c:9e:8b:b1:87:d3:71:47:bc:49:
84:f7:f5:7d:c0:a6:af:05:bd:a1:55:47:9f:4a:55:
6a:b5:24:55:17:d9:d1:eb:fd:f3:a5:96:22:ce:a9:
e5:25:72:a9:d9:bf:f9:e3:80:3f:6f:d3:9c:a5:99:
86:e9:57:bd:71:86:81:55:40:29:09:46:91:fb:b1:
52:53:b1:62:fb:b7:cd:ea:37:7b:6a:0b:98:80:a4:
29:8e:bd:65:65:9a:e4:6b:c7:a6:16:54:b8:01:64:
a5:2b:24:e3:e1:20:28:9e:86:19:e3:9d:8e:b9:2b:
6f:f3:90:be:04:9d:f7:ab:eb:33:38:c9:a9:df:82:
c9:e1:11:31:06:c8:92:17:3b:69:75:ca:be:84:79:
2d:e6:91:b5:24:58:26:fe:01:42:71:be:f6:2f:b2:
9a:82:5c:f2:5b:83:ed:0d:d8:a1:b9:46:b7:0a:3a:
32:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:23:11:E1:CE:87:C9:36:BD:B4:4E:75:E3:23:CB:E5:FF:D6:B0
X509v3 Authority Key Identifier:
keyid:40:74:A7:89:58:75:CF:2C:67:85:44:F6:CE:6F:4B:23:9F:49:29:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHSniVh1zyxnhUT2zm9LI59JKfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d177dc-43b3-4bdd-8bf5-f52d6064dd8b/1/QHSniVh1zyxnhUT2zm9LI59JKfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:80:5e:8a:be:32:4e:f7:24:b3:e7:62:28:ea:de:3e:93:23:
d0:cc:95:84:91:d3:16:4d:87:0e:5d:20:c0:37:c6:b0:3c:ee:
5b:9f:47:50:a1:25:ec:b9:58:8f:69:23:18:77:3f:8a:3d:37:
61:fd:0f:19:ed:6c:a0:4b:c4:1f:f1:d9:e4:13:5d:35:d4:7d:
45:49:08:cc:8f:6f:a9:34:24:5d:f4:1b:e6:39:44:e9:33:eb:
02:4a:63:d3:be:eb:74:22:ad:ad:42:6b:35:59:85:2a:cf:a0:
1b:e7:2a:26:f4:74:83:71:aa:64:d3:0b:6b:09:af:34:db:15:
c7:bd:b6:9b:0e:a1:3b:4d:9e:7b:91:89:49:1b:8f:e3:8f:3b:
a7:8a:c0:47:b8:3f:c4:37:b8:96:3b:b3:97:b4:e7:8a:b4:a8:
38:b9:6e:49:e2:bb:05:f8:8a:6b:8b:7e:92:ea:79:61:5c:22:
b0:76:b3:64:90:96:b5:80:e6:17:a5:19:8f:08:75:6c:f5:3e:
37:db:3f:55:7f:03:45:a3:a0:83:ef:97:0a:4f:a5:02:01:b4:
7a:ab:e9:cb:24:24:7d:2b:a4:b2:62:ec:9f:82:e1:53:0c:42:
94:58:c9:2d:f8:53:df:2b:5a:b4:a9:5e:f2:93:28:9f:72:6c:
8d:b4:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:05:54 2026 by rpki-client