Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft (raw, json)
Hash identifier: Z/JY+z4d7aDhhOGxhOkNo6fdecIyQuGz/OiMZNxqAEM=
Subject key identifier: D3:BD:17:E9:D2:A8:63:B5:2C:98:65:4F:B9:D8:4B:C8:1E:24:22:58
Authority key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Certificate issuer: /CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Certificate serial: 01A0D011FB93FF6B88DEF212B76E46DDE43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
Manifest number: 0EFE
Signing time: Wed 23 Sep 2026 21:00:34 +0000
Manifest this update: Wed 23 Sep 2026 21:00:34 +0000
Manifest next update: Thu 24 Sep 2026 21:00:34 +0000
Files and hashes: 1: O8zrLW8AWIVEs9iiDW4s5TO_x9A.roa (hash: x7HRiC6WoAyrY0ICRLQbw3hJY8kiQ6r/ahn5rm3lXqw=)
2: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl (hash: lkv+zpPVBjd6EjP4qh/LW0JgOKauwcWF773In765MhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:fb:93:ff:6b:88:de:f2:12:b7:6e:46:dd:e4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Validity
Not Before: Sep 23 21:00:34 2026 GMT
Not After : Sep 24 21:00:34 2026 GMT
Subject: CN=d3bd17e9d2a863b52c98654fb9d84bc81e242258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:67:71:e0:41:86:05:c9:67:12:d4:dc:0c:
62:75:00:e0:ce:c5:6b:d6:57:27:24:ab:24:90:75:
8e:c6:02:c4:1e:08:22:7a:15:8b:a7:82:97:f7:c5:
2c:4b:3d:18:a5:d6:f0:49:11:ad:f8:20:66:9c:f0:
a9:3c:46:6c:11:71:24:02:70:85:d7:f2:5d:61:f4:
d5:ae:ec:ad:19:91:1a:c7:e7:38:df:81:90:52:9e:
28:e5:06:fb:1e:2c:07:03:be:06:05:43:8c:81:de:
3e:f6:7f:8a:a8:b9:c0:b4:76:8c:ec:71:87:8d:34:
af:3e:e7:01:c3:35:d2:aa:ee:96:4f:02:d8:3f:42:
8c:c8:5c:9e:db:7c:f0:d1:5f:8c:2b:18:12:29:0f:
2e:2c:96:3a:30:49:73:eb:0f:7f:ce:b3:26:3e:a1:
0b:71:40:92:22:64:c4:6a:a1:f3:17:ff:8e:c4:53:
89:e5:3d:1c:b1:84:d8:52:a0:73:b3:7b:51:f6:da:
00:65:a3:24:1f:60:a3:17:4a:9e:f5:96:94:7e:ce:
dd:7c:04:ce:bc:ad:3b:34:7f:57:90:63:50:c2:99:
5a:54:d3:b1:81:ae:9d:87:82:d5:12:eb:d5:32:d8:
23:39:c7:15:78:48:ae:ef:fb:b6:57:47:6e:c1:45:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BD:17:E9:D2:A8:63:B5:2C:98:65:4F:B9:D8:4B:C8:1E:24:22:58
X509v3 Authority Key Identifier:
keyid:42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c8:b8:30:fd:05:09:59:04:0a:1f:87:05:66:0a:12:df:7e:
2c:35:29:83:08:ad:27:41:da:b7:1b:dd:f2:6f:51:68:b6:b2:
0a:6d:55:fb:cd:68:44:52:66:78:98:49:db:5e:db:45:12:72:
dc:ae:9c:0c:49:f8:fa:b8:5e:38:da:56:34:6d:f2:41:28:04:
ee:bf:f9:5e:41:eb:ac:da:b5:a8:44:ac:81:8c:a9:fe:43:5e:
b1:cd:a1:e1:30:af:53:10:54:3f:03:bc:31:bc:65:f4:66:65:
1f:18:bc:2a:65:66:dc:c0:39:78:6a:2a:ce:00:51:a1:4b:d0:
2c:12:87:73:3e:24:ac:ae:cd:e1:6e:d2:68:af:5b:f9:9f:b5:
38:5b:4f:cf:e7:cd:00:c8:24:b0:57:28:a0:22:5e:9f:0e:65:
c3:39:e7:26:38:fb:a7:ba:50:cb:d2:c3:73:05:19:6e:55:c9:
54:72:56:4b:dd:52:f2:81:3c:ec:15:e7:f7:8a:68:0f:ce:27:
0b:45:49:73:e5:93:cc:5e:e0:c0:07:91:3b:11:3d:e0:38:0a:
29:df:38:ec:cc:fc:1d:90:0a:2a:e4:11:04:2f:34:c0:c4:51:
37:cc:34:24:7a:3c:b6:ea:07:9b:32:97:a0:84:d6:8c:c3:07:
de:46:b0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:45:31 2026 by rpki-client