Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: 6DHvz6aP9FcJNdQiw9MhJ/BepSejl0HTSUYmtzO9trI=
Subject key identifier: 9E:C6:01:8A:12:C0:B2:18:3A:87:D5:AD:C3:EB:6D:4F:B6:1B:74:6C
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 01A0DBA9003436017D47811D5568965A93A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 0A40
Signing time: Sat 26 Sep 2026 03:01:20 +0000
Manifest this update: Sat 26 Sep 2026 03:01:20 +0000
Manifest next update: Sun 27 Sep 2026 03:01:20 +0000
Files and hashes: 1: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: MXbZBGH/CORtZACiNedHumZBXRME+7vWmBgC9/1U2Oc=)
2: cnMksPM8qHUJS7PE1xwm-IJZIEs.roa (hash: F0Xawui/3p0KQ1PsdF0IPS6D5QX+wIN0HvSrMKPyjOo=)
3: iXKcLuJmGyAb1eHjCTVSp7W3GfM.roa (hash: fKesRGsQOYtr1MHvJTlZYCSawG7ul48aKfBiS+3ImGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:00:34:36:01:7d:47:81:1d:55:68:96:5a:93:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Sep 26 03:01:20 2026 GMT
Not After : Sep 27 03:01:20 2026 GMT
Subject: CN=9ec6018a12c0b2183a87d5adc3eb6d4fb61b746c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2b:bc:74:0c:e5:c9:05:d1:84:89:98:43:f1:
82:44:c2:1e:f9:0b:1c:a5:77:9b:f9:22:30:86:84:
6d:99:29:48:94:d3:72:d4:db:40:48:e5:e9:93:c2:
e3:a6:ef:42:0b:e8:c6:95:c8:5b:ed:5d:e1:f3:d3:
32:46:07:3a:35:48:95:a7:3e:6f:df:c1:30:36:a1:
12:13:9a:b6:d1:32:9e:51:f1:6d:5f:57:86:66:f0:
ea:6f:23:5c:8a:0d:33:c6:18:43:97:5b:63:d0:ba:
d4:16:51:13:4a:1e:87:a1:22:fc:97:54:31:ca:d5:
38:ab:d0:9d:93:e8:67:6f:81:0a:51:82:6c:66:cc:
51:8b:68:b8:ad:52:2f:72:b8:d5:7c:ca:21:ff:a1:
6e:7b:06:0b:66:77:a5:f7:3c:86:e3:a8:cd:03:76:
28:98:3e:40:cc:91:e0:09:ec:64:a3:96:20:df:ad:
85:04:6e:e4:26:98:7a:b3:17:ea:72:4a:4a:a4:49:
bb:b5:93:15:35:3a:42:ea:9a:e1:a0:c4:98:e8:2e:
d2:53:99:ac:52:99:d6:51:58:91:de:29:2c:9e:2e:
b4:e6:7c:55:9d:47:2a:d0:44:29:55:5d:47:2e:93:
f7:b0:32:19:39:ec:62:1e:17:9e:7b:cc:10:d1:c0:
e0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C6:01:8A:12:C0:B2:18:3A:87:D5:AD:C3:EB:6D:4F:B6:1B:74:6C
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7e:78:ac:48:53:de:de:f8:d8:a1:4a:86:9a:b4:04:78:e2:
37:3b:c2:ff:4f:dc:1e:38:03:06:1f:62:09:eb:c0:99:d7:d1:
4f:38:00:c4:a4:e9:53:e9:01:29:07:18:ad:91:57:0e:49:7c:
5d:fe:92:0d:23:83:21:f9:4c:14:13:3a:8f:4a:af:62:65:9e:
0c:b4:7b:ac:61:c7:9b:b7:5f:1d:21:67:52:b2:b4:41:83:75:
6f:ed:76:ae:1b:d6:e1:fd:16:b6:88:91:d6:7d:a6:b0:ec:1e:
29:77:6a:f1:c8:65:06:78:ab:74:4a:26:17:4a:f1:e9:ca:fd:
47:c3:3a:28:da:cb:82:f4:f2:19:56:b8:c8:d6:3c:f2:20:be:
f6:84:84:cc:22:67:83:54:8c:00:53:fa:2e:89:ac:56:94:53:
66:99:83:4c:54:b3:e9:d4:ad:be:81:e7:82:f1:90:2f:4f:d1:
41:75:7f:93:c8:bc:fe:4d:44:c9:f9:58:65:af:80:b8:78:61:
38:41:2a:9d:89:c4:ec:34:17:25:aa:b2:7d:a6:f0:e6:55:cc:
be:88:2c:2c:4f:3d:ff:2b:44:6e:71:b2:c3:8c:a8:e1:2d:d5:
f1:f7:7a:85:71:26:7b:55:b3:b5:3b:6e:18:e8:6d:3e:53:ee:
0f:4d:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:33:09 2026 by rpki-client