Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: 4o7BxH7veZ7cggGyukGRtPQatQBM68BgfWTrej25ju0=
Subject key identifier: 22:6C:26:B8:2C:20:F1:00:8D:46:E4:F4:C5:2A:D8:C4:49:9F:E1:B1
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 01A0DA5FB99951D14A5445A4D793BF247AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 19A2
Signing time: Fri 25 Sep 2026 21:01:41 +0000
Manifest this update: Fri 25 Sep 2026 21:01:41 +0000
Manifest next update: Sat 26 Sep 2026 21:01:41 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: bchjbf+DaqE6ht5JzZ31xT8SzYTJFwJQr1haPf0wc3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 21:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:b9:99:51:d1:4a:54:45:a4:d7:93:bf:24:7a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Sep 25 21:01:41 2026 GMT
Not After : Sep 26 21:01:41 2026 GMT
Subject: CN=226c26b82c20f1008d46e4f4c52ad8c4499fe1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:01:c9:4e:13:6b:fb:7e:61:37:9e:b3:0e:
ce:a4:c1:55:71:f6:ff:f1:d1:84:01:2c:30:e3:77:
b0:1e:63:16:68:f6:a0:57:66:4a:4b:f6:c1:3c:5b:
0c:2a:01:90:a2:72:ef:24:e7:dc:33:c0:b3:9b:25:
53:23:cd:2e:d5:b2:73:17:a1:a4:fa:a4:ba:80:4b:
42:dc:7f:a4:a0:b6:83:e9:8e:27:32:d6:ac:0f:3a:
c3:cd:7e:b1:95:a5:ef:52:ad:da:05:a7:68:39:12:
28:9c:7e:d6:cb:70:8d:4b:8a:68:b2:4e:49:50:43:
bc:7d:a8:7f:97:10:70:74:ad:c2:51:0f:6d:45:18:
c1:93:46:9a:e7:1e:63:d4:23:e3:44:3d:de:4c:48:
54:37:aa:53:45:0c:05:4c:7a:c0:13:e0:d4:ef:c3:
1e:35:59:ae:a0:d6:5d:21:51:32:89:87:8c:65:ee:
d3:58:a6:28:41:47:4c:06:5f:88:17:99:4f:91:34:
dd:71:21:00:f4:d1:60:f1:db:b9:d9:7e:ba:52:16:
08:9c:13:69:6a:d1:d4:a1:56:61:bf:56:07:87:73:
8b:6e:49:44:65:8b:7f:00:80:74:a9:f7:28:35:ac:
cf:9e:47:3f:67:83:ab:38:4b:8d:7d:f0:3a:1b:fc:
53:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6C:26:B8:2C:20:F1:00:8D:46:E4:F4:C5:2A:D8:C4:49:9F:E1:B1
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b8:36:0e:9f:4b:0c:e9:cd:a3:e8:83:c1:a8:6b:e1:26:36:
c2:dc:8e:8e:71:f9:b2:e5:b8:0e:95:1f:1b:26:b4:0e:44:d0:
b9:9e:78:13:b8:55:da:d7:28:d7:95:5c:2c:71:2d:f0:9a:12:
0e:7a:6e:09:46:7d:02:9f:79:94:6c:29:84:0c:7e:f3:e3:09:
8d:0f:2d:6d:19:ac:5a:5d:03:98:10:d2:e9:1b:09:cd:c6:cc:
4d:a1:7d:ca:37:d4:73:0c:0a:c5:05:ee:5d:b4:6a:37:fc:f6:
39:f6:73:82:3a:fb:af:70:67:af:d1:63:86:f8:45:cf:7e:a5:
17:f3:cc:d6:01:66:14:ac:ce:f4:1d:44:55:65:60:56:2d:4f:
c6:9b:a8:40:69:44:67:81:5a:03:5b:34:9f:64:48:e2:64:31:
b7:cd:5e:65:ee:09:35:93:6c:53:d3:33:ad:ef:86:9c:95:43:
bd:7b:ce:97:f6:c4:99:3e:07:aa:20:55:a9:6d:27:4e:6c:24:
5c:49:99:fe:23:cf:de:e2:19:63:3b:ed:ff:84:ae:08:1c:f7:
fc:8f:d8:3e:9c:b3:df:0a:5e:ae:4e:66:9e:da:34:6b:06:fe:
f6:00:93:74:3d:cb:be:44:e5:d7:6a:ed:df:10:00:a5:b4:6a:
4e:22:a4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:37:13 2026 by rpki-client