Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: kLoEYDxg/AmmuqYQWmy5zVQI+wBYN6VqJn3i88bEh4c=
Subject key identifier: 4D:7C:35:78:79:DB:9B:9A:0C:93:9D:21:0F:35:C2:0F:EE:0A:4D:25
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 01A0D3B8509D8FD9C5DA6A57BE067B1E67B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 14:01:06 +0000
Manifest this update: Thu 24 Sep 2026 14:01:06 +0000
Manifest next update: Fri 25 Sep 2026 14:01:06 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: OkOw+FnXCEr0muJZZSjdjgKgwgIiT2OLT6fc2Fr7vCE=)
2: Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa (hash: 1LS6QFZFhpfMUxXS4QP7dupHPq2LjjbAwscSCeUJDT8=)
3: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (hash: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:50:9d:8f:d9:c5:da:6a:57:be:06:7b:1e:67:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Sep 24 14:01:06 2026 GMT
Not After : Sep 25 14:01:06 2026 GMT
Subject: CN=4d7c357879db9b9a0c939d210f35c20fee0a4d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a1:54:d4:65:4c:dd:ca:c7:05:c7:f3:6c:3c:
22:87:20:5e:50:0d:ee:12:c7:f8:b0:e5:7d:b5:af:
ab:cb:3f:e9:3e:f1:e9:fa:b1:15:40:48:2d:b7:1e:
aa:da:5c:3a:24:bf:bd:c3:12:8b:3b:fa:08:a0:93:
46:25:06:15:c0:c9:26:0e:8c:6b:80:20:76:8b:b0:
c4:71:73:09:c1:44:7c:ed:83:9f:23:cf:6a:ef:00:
c3:c4:9a:9e:aa:71:eb:5c:00:3d:7e:6b:40:21:c0:
2b:dd:df:bd:a2:37:ed:89:c2:20:55:5c:5c:14:78:
2b:2d:d4:3f:2e:be:b7:60:ec:c9:be:cb:aa:8e:0d:
78:35:6a:f2:74:a0:99:70:34:75:0b:b2:71:b7:38:
35:d2:5e:d6:49:fb:cc:9d:7a:5e:dc:16:18:be:2a:
7c:80:86:e1:31:4e:7a:12:c1:63:02:13:9f:8e:05:
ae:3c:fd:1e:02:e4:7a:30:06:96:90:d0:90:e8:7e:
1e:5d:c9:14:72:df:57:b0:b0:33:a5:fe:9f:85:19:
e9:f4:46:0a:56:d7:64:22:a9:a6:bd:81:2d:43:d5:
99:53:f0:d2:ed:2c:4e:ba:0d:03:78:7f:4e:f8:af:
cb:3d:67:1d:9e:77:a6:9b:10:56:f6:bc:f6:d4:73:
55:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:7C:35:78:79:DB:9B:9A:0C:93:9D:21:0F:35:C2:0F:EE:0A:4D:25
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4d:0e:66:6b:ca:e7:b5:e8:c8:32:c5:ea:08:34:e4:9d:95:
b9:bc:53:17:85:a0:76:74:91:7f:90:b7:a5:08:69:e0:27:c2:
f0:d3:6b:ea:96:0e:66:e9:58:7d:c9:a1:d3:92:da:6f:1a:ea:
4e:b1:24:a0:45:ec:fc:ed:44:0a:48:fe:65:73:c7:ca:f9:9d:
91:52:ab:95:ae:e0:f4:2d:ab:5c:05:ee:c7:76:76:11:4a:82:
0d:2a:9c:ff:fe:5c:23:66:ff:91:a6:9b:b4:fc:11:2b:99:c2:
28:5b:16:41:eb:66:64:59:9e:1a:93:77:c4:b4:63:a7:af:4c:
76:47:10:d4:d0:a6:97:48:10:0d:76:f6:99:5e:5a:8e:4a:f5:
f8:84:ca:c8:25:75:5b:54:c4:e2:85:fd:d9:46:28:6e:f7:9f:
7f:ea:a6:7e:38:ea:c2:4e:34:46:12:3d:33:e3:02:01:de:dd:
ab:f6:b0:c6:aa:c5:37:48:9a:19:54:d1:14:dd:d0:da:a3:68:
b3:67:5a:e4:75:b0:b2:33:83:53:84:db:ec:4e:f5:51:07:a9:
1b:3c:7a:81:90:57:22:f9:f5:0f:87:60:d0:41:25:db:ba:92:
98:ed:b5:4a:ba:ff:14:9c:70:3d:aa:e8:6a:51:9c:83:96:ff:
00:c4:4b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:23:32 2026 by rpki-client