Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
File: QGuz4srXsQAlbhxKf1VbajjYdSY.mft (raw, json)
Hash identifier: KYrmyFP4wvHI2BHmzKxX8lCmrDdXR/MROLk6y9mz3KI=
Subject key identifier: 73:18:61:CD:70:CE:03:86:A8:12:AB:4E:B9:14:E5:9A:22:D6:FA:FE
Authority key identifier: 40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
Certificate issuer: /CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Certificate serial: 01A0C6A1264DADDA83499CFFA4953E08EBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
Manifest number: 0228
Signing time: Tue 22 Sep 2026 01:00:44 +0000
Manifest this update: Tue 22 Sep 2026 01:00:44 +0000
Manifest next update: Wed 23 Sep 2026 01:00:44 +0000
Files and hashes: 1: QGuz4srXsQAlbhxKf1VbajjYdSY.crl (hash: qRZEeE6V5MPMykIB+zTqZaeoZD8LlZmcvxVm3ywYvMQ=)
2: QuYIuEWfuLxCBh6SczKlvzLc7R0.roa (hash: wq5LtQWkzD1IvS0cRF5e7YpZie3ZK8BoD748nc2SSUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:26:4d:ad:da:83:49:9c:ff:a4:95:3e:08:eb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Validity
Not Before: Sep 22 01:00:44 2026 GMT
Not After : Sep 23 01:00:44 2026 GMT
Subject: CN=731861cd70ce0386a812ab4eb914e59a22d6fafe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:79:3c:77:ce:53:d7:57:05:cc:62:e7:f9:23:
fd:cc:6c:2c:d9:e7:86:34:a2:bd:e9:9f:c7:c9:bb:
23:81:6a:42:8c:6b:61:5b:5f:d0:2c:a9:91:ab:63:
fb:e2:50:bd:fb:48:4a:7f:bf:40:51:0a:fc:f2:f3:
e9:b0:06:d5:c5:bd:8b:d0:68:16:87:84:15:91:f0:
4e:87:36:41:57:70:8b:e2:77:3e:65:56:3b:69:82:
b0:fe:9f:34:eb:89:8e:80:45:d5:41:fe:86:cf:ae:
18:84:3f:d9:fe:b7:cd:2e:d6:47:87:80:1e:61:d6:
e7:89:d5:83:7d:2f:23:2b:76:bb:ad:2b:fa:55:29:
d3:37:23:80:dd:92:3e:e5:01:28:c1:d7:14:65:3c:
f9:88:6d:bd:57:dd:8d:64:16:3e:9e:a4:8d:72:0f:
c0:9a:e3:86:39:2e:aa:b7:04:d1:0d:9d:cf:1b:70:
0f:31:68:74:6a:aa:7c:7c:bf:b8:17:42:87:e0:d7:
a8:fc:05:7e:17:43:87:e3:95:76:fd:bb:74:8e:bd:
19:9f:76:79:bd:67:22:13:f6:62:97:23:66:e3:ee:
73:15:e7:f5:15:c0:31:bb:8b:2f:6d:7f:59:3b:4c:
f6:1d:c9:94:60:54:e6:b4:b4:9e:de:ef:b8:37:13:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:18:61:CD:70:CE:03:86:A8:12:AB:4E:B9:14:E5:9A:22:D6:FA:FE
X509v3 Authority Key Identifier:
keyid:40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f3:df:c7:69:8f:db:da:70:c5:d1:3c:08:ea:60:53:2c:80:
29:df:bc:ec:d4:b5:b1:7f:ff:39:0f:24:4c:d8:64:3b:0f:ef:
e8:20:40:e1:c8:58:ee:23:7d:a1:35:a7:7d:ba:1d:30:90:a2:
01:8c:2a:0c:69:ba:08:df:67:d5:91:44:1d:7b:68:c0:04:77:
27:f9:67:4e:10:e3:3e:fc:0c:a2:8b:d7:b1:4f:43:da:24:b9:
01:7b:04:92:11:90:63:9a:f3:08:5b:2d:31:25:3c:8e:b0:31:
b5:b9:c0:32:cd:63:cd:7e:82:3e:c2:5b:8b:7e:24:68:e5:3e:
01:f7:f6:8d:99:d7:14:69:2a:b7:00:43:db:35:52:75:67:cc:
b9:8b:b0:7f:4b:21:82:0b:98:03:e2:7a:e7:37:35:13:6f:87:
7d:93:be:3e:2d:0a:be:64:3f:48:af:c0:37:e9:b8:ec:7e:7b:
e1:b2:f0:e6:a0:43:b4:00:69:36:e6:ad:42:b2:a9:98:29:b4:
9f:73:3d:36:48:d7:a7:5b:6e:dd:7a:a8:56:46:f2:e1:17:30:
e5:08:f8:96:9f:84:d5:8e:f3:b2:4c:09:8d:39:7a:f1:0b:a6:
70:25:c4:42:88:93:78:c6:39:0e:cc:31:0d:e8:91:52:0c:ea:
56:18:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:06:46 2026 by rpki-client