Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
File: Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft (raw, json)
Hash identifier: mLnk1HzMDIohejKLxEmkizbxxVTPv454LKNuGkJd0Gk=
Subject key identifier: 34:41:45:E5:DD:13:15:C2:77:86:6E:54:15:55:5C:B4:66:87:65:3E
Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56
Certificate serial: 01A0E286CFA53402627BE829129C442F508C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
Manifest number: 1A7D
Signing time: Sun 27 Sep 2026 11:01:20 +0000
Manifest this update: Sun 27 Sep 2026 11:01:20 +0000
Manifest next update: Mon 28 Sep 2026 11:01:20 +0000
Files and hashes: 1: Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl (hash: Q/kqfmpgJNbRl0pHVelm5zMkuyFWZluEjTIF6wYPqeM=)
2: ksaatSaKxA-y0WXvpifwAI5WkmY.roa (hash: FBqVdV7XXAfAEJJwTss1e7NjG8kEmROWtZrVwbWVdUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:86:cf:a5:34:02:62:7b:e8:29:12:9c:44:2f:50:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56
Validity
Not Before: Sep 27 11:01:20 2026 GMT
Not After : Sep 28 11:01:20 2026 GMT
Subject: CN=344145e5dd1315c277866e5415555cb46687653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:6f:3a:de:5a:88:e2:dc:93:ce:6e:bc:5c:
f4:b0:df:5f:0f:94:fd:d3:8b:37:93:42:67:94:b2:
f4:2a:77:ab:ba:ef:24:69:b5:94:1d:ff:39:65:9f:
f8:30:dd:3b:b1:1c:eb:03:81:99:6d:38:d3:4a:4e:
af:c2:77:96:af:50:b5:ea:36:1a:c4:e9:f3:f5:0e:
58:89:7f:29:59:63:a4:7f:49:b5:89:02:ac:1c:52:
2e:3d:9a:1b:fe:a5:e9:7f:51:50:01:ea:5a:ac:a0:
9a:96:78:71:80:04:07:e3:c9:84:55:08:95:f4:38:
d6:b3:b2:a5:62:09:c7:1a:d8:f2:52:2a:13:06:17:
b6:dc:cb:0f:10:7a:18:69:c9:df:2a:bd:cd:17:72:
a0:c9:51:e4:5d:eb:45:e2:18:bd:ea:40:c8:68:19:
bd:90:08:a6:6c:5b:f0:3c:d5:e0:07:7f:21:36:21:
4c:f4:18:68:5f:27:ce:7a:c9:92:79:20:87:f2:3b:
b3:bc:df:cf:c1:2e:44:c3:d8:da:75:6b:89:59:a7:
df:32:7d:41:40:aa:b1:bc:80:81:ca:44:e1:48:b6:
42:99:10:2c:df:03:8b:b1:4c:54:45:89:6d:a4:5e:
e0:7e:bd:eb:a4:76:df:05:24:42:ab:88:ed:12:9d:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:41:45:E5:DD:13:15:C2:77:86:6E:54:15:55:5C:B4:66:87:65:3E
X509v3 Authority Key Identifier:
keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4a:f9:9c:ca:26:dd:89:24:2f:03:73:f7:5b:aa:34:7f:fc:
58:47:d6:54:7d:85:5c:23:e3:75:94:bd:32:b5:b4:bd:c8:19:
eb:4d:90:bd:5b:8f:b8:ec:00:43:5a:1a:f6:3d:20:24:df:d4:
d2:fb:84:b8:51:48:35:b7:ab:ad:34:0a:22:0c:ea:c3:25:ad:
90:3d:ec:58:58:d3:ca:ae:90:87:d3:ce:2f:5b:18:ca:66:39:
af:40:21:32:3d:da:ed:7c:53:f9:d1:d6:74:87:e1:7d:a7:ab:
b3:88:6b:8a:a7:a0:79:60:bc:62:bc:c3:b2:6a:c1:29:23:25:
8c:aa:31:df:79:92:39:cf:cf:60:ff:d2:e7:18:fe:ac:12:3d:
f7:44:c0:2f:91:90:73:64:24:dd:54:7f:e1:9c:53:18:ef:5a:
39:87:d9:a0:58:b1:24:20:f9:00:84:4b:54:05:1a:b3:f2:d0:
bb:90:69:fb:49:c2:4e:3b:59:0c:8f:d7:de:6d:28:7a:5d:e5:
01:e8:ef:ee:8e:fd:9a:42:63:86:a5:31:9b:2e:0b:c5:d6:6b:
24:f3:b1:40:e2:59:21:cd:b5:27:6d:88:fe:ea:75:0c:df:7e:
5f:8c:75:63:25:ad:86:1b:ee:35:28:c0:1c:cb:59:46:cc:a4:
33:0e:c7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:21:01 2026 by rpki-client