Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
File: QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft (raw, json)
Hash identifier: u7BWLD7qZzbmjvQEwBQLLAjNAAgPJqLIcHXlVgkppLA=
Subject key identifier: C2:95:3B:FF:E6:48:4A:88:EF:EC:83:C2:A1:29:53:09:71:F7:D3:8A
Authority key identifier: 41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
Certificate issuer: /CN=412add9455bc132b730e727051f0b64ba45fcda4
Certificate serial: 01A0E2F483E7C8E8BFC534DC7D9B05D0F1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
Manifest number: 0767
Signing time: Sun 27 Sep 2026 13:01:10 +0000
Manifest this update: Sun 27 Sep 2026 13:01:10 +0000
Manifest next update: Mon 28 Sep 2026 13:01:10 +0000
Files and hashes: 1: QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl (hash: VI21YPm0DHtvu6Zm+RKFeN+9URfWdVq9KgLPVpqq2Nk=)
2: TCQSeVzJwjEr7_aTg_wyy8uk6RM.roa (hash: QmsaqQhRAEGLEdE3C26cYEAQUOOxk2PCRLum00KwaiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:f4:83:e7:c8:e8:bf:c5:34:dc:7d:9b:05:d0:f1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=412add9455bc132b730e727051f0b64ba45fcda4
Validity
Not Before: Sep 27 13:01:10 2026 GMT
Not After : Sep 28 13:01:10 2026 GMT
Subject: CN=c2953bffe6484a88efec83c2a129530971f7d38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bd:17:b5:be:cd:5e:ab:ae:34:86:ca:6a:28:
e8:83:44:04:93:40:1a:71:8a:3e:2e:2c:0d:ed:62:
37:2b:95:fc:85:f6:4b:9a:ea:6e:5f:24:9b:98:19:
22:f8:ac:87:1d:e2:92:5b:37:51:db:18:c0:56:ef:
6c:f2:42:96:4e:4b:4c:84:9f:c0:2b:59:11:46:67:
67:40:78:22:6f:c3:e2:01:9c:d9:46:0a:f0:c2:8c:
90:36:97:d9:d7:0c:de:b0:d6:8a:dd:6e:0c:60:fe:
b8:a0:0c:30:2e:6b:f4:03:d5:55:05:9e:7b:0c:38:
f3:ba:8a:77:45:c5:f8:4e:3a:b0:4c:5d:c0:53:cd:
aa:51:6c:1a:9c:04:ca:b3:61:23:af:4f:bc:da:1d:
87:02:b1:2a:1c:87:80:70:ab:6b:01:e1:a0:e2:ef:
76:b5:e5:e5:47:1d:db:91:09:14:fb:3b:b0:c4:bd:
a4:fb:b2:40:88:11:a3:4f:62:67:36:f4:f3:41:6d:
e3:17:d7:fa:bb:78:a9:d9:0c:62:87:04:66:d9:c1:
7c:9a:16:15:d6:92:0d:74:ea:cf:a4:11:f6:e4:2a:
aa:56:44:44:c9:3c:d5:c4:62:75:02:22:62:18:6f:
d0:df:60:0b:98:08:f8:89:4a:c1:e7:5b:bc:b8:49:
26:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:95:3B:FF:E6:48:4A:88:EF:EC:83:C2:A1:29:53:09:71:F7:D3:8A
X509v3 Authority Key Identifier:
keyid:41:2A:DD:94:55:BC:13:2B:73:0E:72:70:51:F0:B6:4B:A4:5F:CD:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrdlFW8EytzDnJwUfC2S6RfzaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9c6a6-6bc6-41e2-80e9-bc9887a7b553/1/QSrdlFW8EytzDnJwUfC2S6RfzaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cd:fb:34:a8:9b:35:41:86:b7:2a:53:91:4e:09:28:a5:88:
cd:ef:a5:f0:4c:58:eb:77:4f:c7:47:c9:bd:3c:aa:96:57:5e:
4a:9b:9a:1e:81:df:1c:a6:fa:58:a1:12:f0:fa:63:f5:6c:a5:
aa:27:18:a9:62:d4:a7:5e:da:a6:f6:a1:0f:7a:0e:17:da:26:
1f:2c:e7:17:90:cf:45:55:21:e6:84:14:a5:bd:d5:79:0b:da:
e7:0e:07:b8:10:1b:85:f1:06:a7:4e:e1:69:3a:5c:44:97:ab:
eb:f4:ef:7f:7f:1a:8c:99:3e:b9:75:83:8b:c2:a0:76:1a:99:
c3:55:b4:12:38:13:3d:12:d2:61:96:b1:09:65:84:14:55:62:
d7:f8:de:8a:8f:5e:01:1a:10:e5:96:7b:20:ff:94:07:5d:ff:
54:40:29:6c:84:5b:3a:a4:f5:3a:72:aa:19:e8:45:f1:e6:a7:
d2:11:67:ec:63:a0:41:f4:db:e7:87:f7:75:63:ad:fb:25:6b:
76:f4:08:23:43:11:a0:12:d7:08:42:42:4a:ec:b8:ed:8b:3c:
95:b5:2c:db:1b:f6:90:7d:b7:17:0f:16:98:b5:8b:a1:1a:47:
25:00:2b:cb:54:e9:57:25:2b:93:3d:be:ff:1e:78:2a:b9:1c:
7a:36:55:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:32:56 2026 by rpki-client