Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: LAQDTsiwDdkUBgam9yc2KJ3PJtFSrK+I02pteQ5KvwY=
Subject key identifier: 49:28:6A:52:1E:3E:88:C3:80:44:CC:8D:C1:E8:76:28:08:DC:BD:66
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 01A10693491806CF2306C4E0F2F15014A79E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0E83
Signing time: Sun 04 Oct 2026 11:01:18 +0000
Manifest this update: Sun 04 Oct 2026 11:01:18 +0000
Manifest next update: Mon 05 Oct 2026 11:01:18 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: 4yx7QQ0Q6Emj7RIYWghzvhwgzhsjPoJADQlEcTuu22g=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:49:18:06:cf:23:06:c4:e0:f2:f1:50:14:a7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Oct 4 11:01:18 2026 GMT
Not After : Oct 5 11:01:18 2026 GMT
Subject: CN=49286a521e3e88c38044cc8dc1e8762808dcbd66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:9f:7a:ed:b5:34:41:3e:8d:46:d3:ce:2b:
d0:d8:90:5b:9d:f6:5b:27:7b:cf:1e:ca:d9:fd:61:
a2:10:83:8c:79:c4:65:90:9a:8c:35:c9:16:28:01:
29:d8:6d:b2:2c:81:07:fe:71:ab:a2:89:27:e7:70:
63:43:92:20:86:c2:19:70:27:2f:52:ba:c7:58:2d:
0c:55:ce:ca:1c:92:fa:de:bc:5d:f6:63:5d:20:25:
49:5a:db:58:46:66:ed:c7:35:fd:39:2e:71:e3:fc:
41:68:94:08:a7:7c:22:87:97:ba:b9:ce:c7:ff:0c:
c1:e5:95:3f:ae:22:2f:38:28:08:65:df:39:0e:9b:
1b:74:81:de:8c:bd:16:58:73:e4:de:a2:c0:98:3a:
93:68:20:29:fa:df:15:e8:fa:63:d1:dc:3b:2c:0c:
3c:17:25:43:a6:a6:29:ab:ad:35:78:2c:9d:16:32:
31:84:9c:11:91:37:30:81:0c:50:79:11:aa:c3:c2:
18:dc:44:0e:53:4d:dc:e7:94:01:74:b9:71:83:10:
9c:c0:34:2d:af:b7:e3:40:f6:97:22:ad:f1:6c:1e:
5b:dd:be:19:aa:82:83:46:ad:16:7d:11:81:97:7d:
5c:00:9b:c8:2a:88:29:08:79:fe:ac:14:90:de:ed:
de:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:28:6A:52:1E:3E:88:C3:80:44:CC:8D:C1:E8:76:28:08:DC:BD:66
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:58:b3:9a:d4:7c:be:80:84:2f:8b:6c:d9:98:1b:34:6c:69:
9f:c9:35:f4:20:e0:cf:de:47:54:2a:b2:2b:3f:dc:28:6b:d4:
c6:f2:b2:c0:9e:b8:91:b8:75:14:a5:e8:af:83:f4:86:4b:8f:
9f:e0:f4:3a:f1:ee:7a:6d:1d:3c:dc:6b:27:f1:ba:38:fb:87:
16:43:28:c6:f2:bf:41:a8:a3:18:59:ac:a2:46:d2:da:5b:33:
59:0c:81:79:4f:44:63:6e:b4:e6:f7:59:4f:05:d8:cc:91:bd:
b0:43:35:e9:68:4c:b0:e4:3f:85:12:e6:be:54:ca:55:e1:c2:
02:b9:23:36:a8:2e:dc:f7:fb:cc:9b:e3:0e:39:a3:42:bc:a6:
b4:0d:c7:21:0d:a2:68:1a:6e:92:6d:19:30:31:f3:93:0d:78:
c1:ba:cd:54:67:d9:78:0e:8a:cd:57:ed:58:89:cc:7b:ad:76:
9a:e4:c9:0f:d4:f2:21:a7:2d:62:ec:40:e7:2a:c6:85:b3:14:
ee:c9:ef:e1:8d:2b:a8:45:a8:d1:28:c1:fa:27:8b:5a:3e:e2:
e5:51:12:8f:ef:6c:12:fa:db:13:dd:32:90:9c:2d:8f:1f:25:
bf:71:ae:2f:a1:29:c6:95:70:c8:ed:06:6e:5c:73:93:0e:38:
2d:b2:bb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:40:37 2026 by rpki-client