Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: MJ/Oj9Y0oFYY4HawqZOraiZUVg4Z8fAiAaNieN246rU=
Subject key identifier: 1D:9B:47:DB:A9:9D:70:6A:DE:AF:AF:83:1B:A1:0B:5B:C9:DF:46:CB
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 01A0E06230343411E89D6BCBC8A2191467C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1A7C
Signing time: Sun 27 Sep 2026 01:02:06 +0000
Manifest this update: Sun 27 Sep 2026 01:02:06 +0000
Manifest next update: Mon 28 Sep 2026 01:02:06 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: 8de8n8fIycQBSKiVp7eTJOyHDrGAxfSUpSyGHPoXFVA=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:62:30:34:34:11:e8:9d:6b:cb:c8:a2:19:14:67:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Sep 27 01:02:06 2026 GMT
Not After : Sep 28 01:02:06 2026 GMT
Subject: CN=1d9b47dba99d706adeafaf831ba10b5bc9df46cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:50:89:db:9b:8c:15:ab:48:90:c0:73:04:
26:33:d8:0d:95:09:d2:df:a6:dd:75:14:5b:5e:80:
c5:53:e0:2d:d8:18:02:8a:5a:0f:b0:00:b7:66:49:
aa:2c:ab:5a:d1:72:6a:7a:4f:ae:de:f4:e1:d0:23:
52:a6:d8:e1:c2:c3:b5:c7:58:2a:74:84:36:ba:44:
f7:19:f2:a6:92:18:53:c1:2a:8a:07:e3:4d:98:1c:
e1:6f:ab:98:e6:a9:05:a5:6b:ff:76:4f:7c:42:87:
94:c9:48:28:d4:da:cf:03:dc:4e:22:cd:3d:d2:2d:
1a:17:58:c5:d8:32:b1:6f:bd:d5:60:b4:7a:97:57:
78:1c:16:df:bb:8d:84:d7:d2:cc:39:8b:81:a8:5d:
6c:0e:13:8c:ce:0c:6f:30:74:d0:34:c5:d7:a3:43:
d5:4f:14:fb:75:0c:41:01:3e:5e:5e:72:60:e6:9e:
af:5f:7a:74:9c:d2:a1:25:ad:3d:b2:b7:ec:df:0a:
a5:94:bd:1d:d3:45:76:89:11:ae:e2:ca:7a:a8:11:
6d:33:ba:5d:fd:b8:d6:a3:d2:9c:9b:4f:de:8c:88:
dc:0b:36:b6:2f:0e:e7:b1:54:40:06:15:d5:b2:c6:
a6:54:fd:2e:8a:bf:e2:77:d2:0f:66:21:e9:3c:06:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:47:DB:A9:9D:70:6A:DE:AF:AF:83:1B:A1:0B:5B:C9:DF:46:CB
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e5:e2:3f:b8:8f:3d:d6:a3:e2:d7:4a:46:c4:f0:46:e5:f3:
ec:3b:28:b9:90:f4:1b:98:48:f6:7e:e4:84:79:e0:53:cb:c0:
ab:cf:9c:f7:f7:55:f7:77:7b:57:bb:6a:0c:5b:6b:15:02:72:
20:bb:c1:46:19:18:3d:48:17:70:12:d5:02:ed:ff:75:42:18:
c0:7d:5a:a3:f9:3c:ce:e9:98:a5:54:2c:ba:2b:0f:d7:18:ac:
b4:bf:ed:77:7d:89:a5:e2:b0:1e:0e:5d:08:b0:3d:ed:de:39:
07:b2:e6:4a:7f:09:f8:77:cd:35:6c:c2:51:c1:19:6b:79:19:
35:24:b9:c6:6b:2f:24:34:31:47:87:1b:46:99:1c:64:64:d5:
51:82:d7:cc:a7:08:2c:2c:f1:8b:21:7b:d5:73:43:06:7a:b3:
f1:e2:4d:39:b8:2e:0d:27:e6:08:a3:d2:95:bd:83:85:bc:04:
e6:6c:2f:bd:f7:59:c8:ea:ea:45:18:63:4c:c8:7e:44:78:65:
46:bd:4f:c3:3f:b8:19:2a:48:55:35:97:cd:05:32:9b:c3:f4:
7b:b1:41:8c:6b:eb:69:d4:96:94:7b:c0:ea:14:ba:55:7f:fc:
b4:3f:dd:f5:21:89:57:59:f5:f0:c8:d4:e6:21:fa:6d:ff:3d:
95:d9:be:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:07 2026 by rpki-client