Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
File: Q94YPxSj8k-bhtBE-HcphoC1Ers.mft (raw, json)
Hash identifier: 13YZ0x88GMQmJ977L4Tjr9XW55t3lr94dCp9ewoyTEQ=
Subject key identifier: 13:08:20:8F:42:06:51:3B:A3:E1:EF:F7:1E:45:B5:7C:88:C6:F2:5C
Authority key identifier: 43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
Certificate issuer: /CN=43de183f14a3f24f9b86d044f877298680b512bb
Certificate serial: 01A12BE941C69E0FF586B5511524BC56B78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
Manifest number: 0906
Signing time: Sun 11 Oct 2026 17:01:09 +0000
Manifest this update: Sun 11 Oct 2026 17:01:09 +0000
Manifest next update: Mon 12 Oct 2026 17:01:09 +0000
Files and hashes: 1: Q94YPxSj8k-bhtBE-HcphoC1Ers.crl (hash: TUTn6GHdvSl3jbuenjNru5oMyGjgNzgRAeXtVqRaeos=)
2: hXKR5zejn3_Hil5KhYu5iVmfXJI.asa (hash: 3GFU2TS4xAC21rEQtTrjdeWRD+az4p5iCI2PhFizOP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:e9:41:c6:9e:0f:f5:86:b5:51:15:24:bc:56:b7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43de183f14a3f24f9b86d044f877298680b512bb
Validity
Not Before: Oct 11 17:01:09 2026 GMT
Not After : Oct 12 17:01:09 2026 GMT
Subject: CN=1308208f4206513ba3e1eff71e45b57c88c6f25c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:92:0c:ff:49:ac:d1:5c:b7:8f:f5:17:db:1e:
b4:3b:05:95:89:a6:aa:f2:9b:0d:9c:d0:b9:1e:81:
4d:30:59:4d:e4:c6:a2:6e:6c:d5:29:52:0d:9a:89:
cc:8c:41:59:2c:63:ec:ba:66:08:a0:b2:4a:b8:e6:
51:93:34:b7:c1:8a:cc:a5:d8:55:80:da:1e:86:9b:
d3:54:0b:1c:99:17:b4:37:fb:28:7d:78:f0:22:ec:
bf:52:ef:cc:ab:5b:e9:a4:66:43:76:2c:5f:51:78:
01:f1:3e:8c:6c:7b:3d:4d:19:d0:b5:de:f1:18:f8:
dd:2c:0f:f6:63:ff:7f:69:77:b4:43:81:11:d2:b0:
c5:f0:2f:70:ac:b0:a1:49:73:86:2e:8e:7e:de:cc:
8e:97:c7:60:b4:17:9e:0b:f2:46:87:64:cf:e5:74:
12:1c:4d:b2:88:80:dc:47:f4:d5:eb:27:92:1b:51:
d4:af:1b:7c:51:38:23:54:f9:2e:5e:85:97:d7:19:
4d:18:1c:1b:80:fb:c2:c9:0e:83:b1:2a:50:41:01:
6b:35:1c:5f:0d:76:ec:16:ea:1b:73:d8:46:4e:c1:
24:00:01:09:e2:29:9c:0c:51:b5:ab:7a:a0:8a:a0:
13:54:f8:96:59:a0:a1:64:ff:fc:ee:3f:22:fd:75:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:08:20:8F:42:06:51:3B:A3:E1:EF:F7:1E:45:B5:7C:88:C6:F2:5C
X509v3 Authority Key Identifier:
keyid:43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e2:65:16:82:33:c4:2a:f1:03:70:83:1a:4a:b5:60:31:7e:
e5:c2:e5:72:4d:33:7f:cc:1c:55:75:1b:6e:9e:e8:64:ae:62:
22:2e:1f:05:9b:47:9c:ee:87:56:46:c1:ad:92:78:ce:44:1e:
f0:94:72:cb:55:d1:d0:c5:3a:a2:3e:5a:fd:e9:45:1a:10:ba:
33:41:a2:a4:aa:de:43:75:a2:59:ae:db:2c:88:d0:5a:d0:2e:
c6:b3:39:15:ca:cf:85:ed:24:97:de:1d:95:31:08:92:b4:b5:
50:1a:d3:12:14:44:5a:95:70:4e:ba:a7:8d:0f:d3:6d:d7:f4:
22:7a:b8:34:b2:61:b8:73:ac:a4:70:44:1d:cd:a1:a3:64:c6:
02:a2:85:95:32:8f:25:0b:26:0a:e2:3b:0b:8f:5d:09:c3:4e:
b3:b8:d1:fd:15:57:4d:d2:5c:3d:f4:6b:41:0a:ad:e5:a3:49:
3d:ff:40:86:98:87:cb:83:e5:04:66:cf:84:2f:a5:68:f5:50:
ab:fc:79:78:be:db:be:46:75:4f:fa:1d:da:e5:91:72:1b:8e:
80:7f:ab:b4:82:30:87:59:37:cb:84:79:c6:b5:b2:4a:c6:06:
9c:a9:bd:20:ed:b9:5d:d5:de:41:e4:80:c0:be:7f:23:0a:c2:
01:aa:08:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:57:36 2026 by rpki-client