Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
File: QvUa6vd0tjOkf5YKcImxWzWxpMs.mft (raw, json)
Hash identifier: I4DuhNgsL3Z5e0K5BSsalsLx8E2JnZ+ghFvIYOD35Ok=
Subject key identifier: B9:77:26:11:9F:4B:CA:A5:74:74:19:60:92:09:27:B8:A0:FD:B7:B7
Authority key identifier: 42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
Certificate issuer: /CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Certificate serial: 01A0E8F6BC1DCED27A35CFBC9F0421EDC351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
Manifest number: 0B3F
Signing time: Mon 28 Sep 2026 17:01:19 +0000
Manifest this update: Mon 28 Sep 2026 17:01:19 +0000
Manifest next update: Tue 29 Sep 2026 17:01:19 +0000
Files and hashes: 1: QvUa6vd0tjOkf5YKcImxWzWxpMs.crl (hash: JdR1V+5KEe8Vq1CuHtsChcldaMmEGfBDTrUAez865t8=)
2: R9Y6GrgbgpdjEIL15ST3hGQBv8A.roa (hash: ScvlNZwo3odOWYF4CC8lvyezDpeI3+SX0JX8xZyPseo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 17:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:bc:1d:ce:d2:7a:35:cf:bc:9f:04:21:ed:c3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42f51aeaf774b633a47f960a7089b15b35b1a4cb
Validity
Not Before: Sep 28 17:01:19 2026 GMT
Not After : Sep 29 17:01:19 2026 GMT
Subject: CN=b97726119f4bcaa574741960920927b8a0fdb7b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:b8:c0:35:29:ea:cb:e8:2c:86:0f:f6:f0:24:
3d:4b:57:fb:5a:30:77:c1:7d:f3:c7:ee:dd:f2:9a:
93:e0:94:e2:d7:b5:6e:91:f9:e0:83:3f:24:f0:e1:
17:29:c1:28:1f:52:a6:19:1d:a2:2c:61:be:ff:c7:
d1:1a:60:0d:5c:01:12:ef:53:d9:be:b4:c3:97:09:
53:6d:37:b7:91:6e:e9:e4:ee:ea:39:63:2a:45:86:
6c:bc:f6:42:4d:49:29:7f:4c:cc:37:10:86:ba:9c:
b4:00:30:07:9d:a9:06:86:6f:c8:d3:6f:06:26:43:
e9:de:c6:2a:af:4b:0b:91:62:c9:5c:4d:9b:0a:73:
9b:30:b7:73:7f:2f:e3:09:e7:9d:05:e5:b7:cf:81:
46:1e:b3:92:05:17:06:92:c0:28:71:55:3d:09:68:
07:e5:54:f0:d1:42:dd:93:2f:8b:20:49:da:12:b7:
d1:ca:26:e9:e4:b7:ea:94:2e:2c:2f:37:84:a1:d1:
50:fc:6b:02:f4:5d:5f:60:85:06:48:aa:66:e6:6a:
b5:99:44:b9:ad:91:41:ba:7c:2e:f0:86:3b:83:16:
18:e7:92:49:56:36:f6:44:75:96:b0:74:b6:7e:21:
25:5c:72:0c:c4:39:6b:ba:5f:25:64:ba:58:bf:27:
0a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:77:26:11:9F:4B:CA:A5:74:74:19:60:92:09:27:B8:A0:FD:B7:B7
X509v3 Authority Key Identifier:
keyid:42:F5:1A:EA:F7:74:B6:33:A4:7F:96:0A:70:89:B1:5B:35:B1:A4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvUa6vd0tjOkf5YKcImxWzWxpMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a3311a-aa9a-4904-88e5-1ba65174bd1d/1/QvUa6vd0tjOkf5YKcImxWzWxpMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0d:5e:9d:9a:56:a8:fa:d2:47:10:67:a5:bc:7f:1c:cd:0c:
17:68:bc:ea:27:2a:59:6a:6d:06:71:9b:b4:d7:5b:bc:a3:11:
cb:86:62:7f:69:c3:16:bf:80:9d:52:fe:90:7d:1f:43:bb:7e:
34:b2:7d:16:af:d9:fc:de:2a:39:3d:b5:fa:69:03:0a:e0:ba:
52:3f:c2:5f:42:a7:13:de:b6:20:2f:cd:2a:d1:60:2c:fb:d6:
6c:fb:7e:24:a1:80:26:30:24:58:51:3d:a5:f3:26:f5:d6:62:
5a:24:32:91:93:33:38:b3:c6:88:b9:bd:de:5e:af:37:23:90:
e7:cf:42:a6:95:21:76:4c:5c:a8:3e:d2:ac:d0:e4:1d:74:81:
a4:38:ae:9b:ec:06:df:9a:db:dd:f6:14:fc:48:f2:c4:27:19:
c7:30:14:85:0f:b7:03:98:6e:ab:42:fa:11:f0:96:40:1a:b0:
f6:cd:e6:ec:23:4a:6f:1c:d5:9c:af:2d:f7:c0:68:30:52:df:
01:aa:18:fb:d8:22:6e:57:d4:c1:fe:01:83:9a:d2:3a:53:02:
8d:16:86:bf:ea:12:f5:ed:70:f0:80:93:d1:f4:58:6b:ed:10:
f0:ac:83:de:1a:23:ba:ed:28:40:9a:e9:b3:01:34:3e:81:91:
d2:ba:d8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:22:12 2026 by rpki-client