Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
File: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft (raw, json)
Hash identifier: RSNulZwYMU+KR34pCDNufQQoYHzddrI0NSJ2IwvJbJo=
Subject key identifier: D4:07:1A:DD:5E:14:5C:E8:00:5C:4D:1E:BA:73:03:02:6D:BE:71:AF
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 01A0D4CB5DB0B387AF067752EA6457F1082F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
Manifest number: 08F1
Signing time: Thu 24 Sep 2026 19:01:32 +0000
Manifest this update: Thu 24 Sep 2026 19:01:32 +0000
Manifest next update: Fri 25 Sep 2026 19:01:32 +0000
Files and hashes: 1: Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl (hash: YQJw8Uhkehc/1MMXnPRRVEPfhJ2WzgXSf28krbBbia8=)
2: fX5QoYhC7oWQVw3vDSbjr3GlOMs.roa (hash: glhB4Xck9+EeTURBJmeIzyghgm1Xn7IH7ZSK9Lk029k=)
3: uhmE3at76dYLrtDiQbzMepv_16I.roa (hash: /LKq8mUsMWaHICUc9KVgvqVuRJ8efqGttlCEBaJ+7kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:5d:b0:b3:87:af:06:77:52:ea:64:57:f1:08:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Sep 24 19:01:32 2026 GMT
Not After : Sep 25 19:01:32 2026 GMT
Subject: CN=d4071add5e145ce8005c4d1eba7303026dbe71af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:ad:51:0b:15:23:9d:41:10:96:42:df:50:
27:62:ce:e3:c7:76:80:ae:04:e8:74:bf:7d:bc:4d:
ec:75:71:ba:6a:ca:96:0a:f3:ca:38:fa:17:d3:08:
78:6c:56:25:3c:ef:e2:02:f8:24:41:a9:f3:59:28:
f8:4f:66:71:df:99:39:67:a0:49:fc:56:90:48:01:
e0:cf:6d:d3:06:ca:47:41:13:33:86:1f:4c:52:a0:
96:57:d3:bb:84:7e:ae:8c:71:91:3d:ab:d8:53:3d:
94:2a:0c:ff:2f:07:10:21:36:7e:60:b3:31:b7:d7:
8e:14:51:f8:7d:83:91:ff:d0:84:ef:70:0b:7c:9c:
b1:41:5d:5a:63:3d:9d:01:2c:f6:01:a5:dd:a4:aa:
54:57:80:e2:0d:d1:da:4f:83:0a:1e:30:0e:1c:8d:
fb:6f:ac:2b:6a:d7:8b:47:7e:ba:94:60:ba:c7:1f:
9d:8e:60:32:88:17:08:bc:59:97:05:4d:c5:70:88:
79:35:5b:fb:d6:8c:b0:79:ae:de:4d:38:a4:67:b3:
a7:76:e5:10:9d:31:fd:e6:8f:c2:09:58:9d:b7:f7:
ad:20:6c:2c:74:6c:f5:ca:89:aa:1c:ac:7c:38:d4:
3f:9c:cb:3d:7e:d4:74:a7:57:33:27:9b:8d:72:20:
66:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:07:1A:DD:5E:14:5C:E8:00:5C:4D:1E:BA:73:03:02:6D:BE:71:AF
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:04:1d:57:49:e6:e4:8b:98:ff:f0:f7:3e:73:b9:b8:12:9c:
0d:53:e1:76:66:43:e2:8e:f4:ac:46:b5:be:11:20:c2:84:11:
e8:f9:e0:9a:22:08:44:a9:73:a7:39:4a:32:66:64:2b:f6:15:
41:d5:fe:50:5f:e8:b0:c4:ed:2b:5b:c1:30:bc:e3:41:72:02:
19:44:6a:ab:7a:d7:c1:55:58:18:f2:48:44:bd:ec:13:bc:e0:
50:10:42:62:7e:84:8c:24:aa:fb:8c:cd:eb:f0:9c:7e:c4:a2:
1a:56:57:97:18:f4:49:2f:d1:71:8f:0f:74:f9:84:2a:31:a5:
df:d3:00:ef:54:63:20:17:25:29:13:da:02:5a:73:76:8e:85:
9d:49:e1:88:b4:b6:e0:36:df:bf:c6:fb:14:54:74:f1:7e:6a:
39:22:c7:b4:fb:57:22:79:3a:0d:16:bc:a9:cd:46:43:da:f1:
fc:50:3e:a2:50:f7:86:76:a6:37:c7:57:7e:a8:99:23:bf:42:
84:c8:20:f0:1e:da:18:28:46:10:d5:01:40:a7:98:19:78:8d:
f8:7d:5b:36:a6:64:a7:fc:6e:d0:b5:1b:2e:e7:8b:20:58:87:
5a:b3:8d:2b:f6:02:7a:9e:80:b8:d9:ec:7a:60:a2:87:58:db:
74:f7:51:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:17:03 2026 by rpki-client