Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
File: QSkmah4uyYN6UxNE-0zHVcK01Jk.mft (raw, json)
Hash identifier: bdxC8j5Pv8Sut7EH5/Bp1d8xkR74AaCrc65DcfB4SPM=
Subject key identifier: C3:61:C6:37:F3:A1:32:C9:11:EC:DB:02:1D:07:1D:7B:86:EE:69:9D
Authority key identifier: 41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
Certificate issuer: /CN=4129266a1e2ec9837a531344fb4cc755c2b4d499
Certificate serial: 01A0D0B6FF4FA07C22731CAB80D5818BB7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
Manifest number: 69
Signing time: Thu 24 Sep 2026 00:00:48 +0000
Manifest this update: Thu 24 Sep 2026 00:00:48 +0000
Manifest next update: Fri 25 Sep 2026 00:00:48 +0000
Files and hashes: 1: 8fGG8Tv4WNAQ4RCHYBbNJs1eKto.roa (hash: SgO/P537q3vAhj6DO7s9EJP2JmPeHZPclIyQgjWdkQo=)
2: QSkmah4uyYN6UxNE-0zHVcK01Jk.crl (hash: JGk3AEAvmyXiRtnOE8h2fYG4Zr9kfsvu0zazmvheFQQ=)
3: sg6AMDBnEClTk14yZrKH_UdfS-0.roa (hash: uREnj3d/6nKXsYDGOx95oE8DlNkz3JuX/7dowk4t+kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:ff:4f:a0:7c:22:73:1c:ab:80:d5:81:8b:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4129266a1e2ec9837a531344fb4cc755c2b4d499
Validity
Not Before: Sep 24 00:00:48 2026 GMT
Not After : Sep 25 00:00:48 2026 GMT
Subject: CN=c361c637f3a132c911ecdb021d071d7b86ee699d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:d4:98:2d:2c:62:26:e4:2b:66:ac:df:20:
4e:39:fc:44:e7:ef:41:62:d4:86:18:37:3f:5b:03:
b0:e5:33:5a:e4:c9:70:74:f1:bf:cd:52:cc:9b:92:
75:42:03:bc:a2:85:f2:ad:0d:cf:de:00:fb:f8:02:
37:29:06:27:0f:f3:19:17:7b:a7:68:e0:81:51:ac:
48:48:91:71:4e:aa:a6:ae:17:f7:bb:9a:c3:60:3d:
73:31:bd:ae:6e:01:72:38:e1:f5:d0:a3:c5:dc:85:
5f:be:d7:81:5d:8b:b1:dc:c9:e8:0d:15:65:8b:1a:
d6:61:42:2e:eb:ad:ad:ec:c8:3a:be:81:4b:6b:ff:
94:37:33:31:2e:6c:f2:10:97:1a:a1:c0:6c:ea:2e:
01:c5:da:63:79:ab:f3:d6:65:ff:67:69:9c:d0:88:
c5:64:c9:c9:ab:7c:34:c7:6a:46:0f:43:62:01:89:
1b:42:24:a1:e5:a4:8e:41:06:9d:e2:96:32:7e:7d:
53:1f:02:55:34:22:e0:85:6a:4c:8e:26:3c:f7:33:
b7:83:1b:71:8c:95:6f:d3:83:19:18:d5:28:e6:53:
70:3a:00:08:70:43:95:c1:60:77:34:f7:ff:c4:c8:
28:fb:7b:7b:d0:ca:4c:1d:e9:1f:5c:34:06:67:ad:
72:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:61:C6:37:F3:A1:32:C9:11:EC:DB:02:1D:07:1D:7B:86:EE:69:9D
X509v3 Authority Key Identifier:
keyid:41:29:26:6A:1E:2E:C9:83:7A:53:13:44:FB:4C:C7:55:C2:B4:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSkmah4uyYN6UxNE-0zHVcK01Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b39fab-aec9-4e56-a76b-fd4e4075ec87/1/QSkmah4uyYN6UxNE-0zHVcK01Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:14:fd:2e:12:ee:28:8d:ac:4b:3d:a0:d8:51:58:f2:27:03:
b2:9f:9d:0e:ca:d1:f7:da:d0:7f:fc:a5:98:71:ce:d0:b1:bf:
33:e1:ca:6b:af:73:6b:cc:3e:2e:ef:8f:0b:88:ea:9b:ac:45:
4b:85:c9:67:06:b6:1f:30:75:dc:ed:07:4e:f6:94:5e:1e:17:
3c:eb:9a:45:06:2e:d0:aa:e0:ee:8a:84:eb:06:7e:7d:b0:49:
0f:6f:85:a5:5d:cd:14:9f:d0:25:d2:6e:87:01:5e:8d:af:07:
5c:4f:ed:1c:1c:e1:de:b8:3b:5b:1c:9a:53:3f:2a:4a:7a:66:
a5:9d:f5:b1:ce:10:bc:36:f5:95:26:20:08:bd:da:ce:b5:f4:
45:c3:85:1b:32:8e:bb:92:e8:87:49:5e:0b:a3:bc:ce:fa:93:
93:15:ab:d1:89:86:88:31:87:6c:b4:c7:fe:1a:03:1b:ea:bb:
20:4b:83:f9:75:e2:8c:ac:f4:0c:7a:83:06:61:5b:c5:f5:5d:
50:6f:c6:6a:f4:3a:4f:29:b3:ec:08:90:97:ed:6e:d3:c7:41:
6d:aa:25:35:a5:ec:a2:5f:de:01:ad:d4:75:ad:2e:89:30:0c:
9e:04:c4:0d:42:e7:cd:90:37:7d:b0:87:c0:da:41:09:3a:60:
ae:cd:7b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:26:27 2026 by rpki-client