Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
File: QKljngI9_Ik-xp2nFrhKtdZOpZw.mft (raw, json)
Hash identifier: R8g0qX2CrR5w0ro+QATBamjom6LIPf4q0rgA22RSPUE=
Subject key identifier: FC:10:36:3D:2D:3F:9F:91:B0:0E:AD:3D:78:16:90:4E:D4:3A:44:76
Authority key identifier: 40:A9:63:9E:02:3D:FC:89:3E:C6:9D:A7:16:B8:4A:B5:D6:4E:A5:9C
Certificate issuer: /CN=40a9639e023dfc893ec69da716b84ab5d64ea59c
Certificate serial: 01A0DB3B13CBB5A8C7F3C84055619F22ADB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
Manifest number: DC
Signing time: Sat 26 Sep 2026 01:01:16 +0000
Manifest this update: Sat 26 Sep 2026 01:01:16 +0000
Manifest next update: Sun 27 Sep 2026 01:01:16 +0000
Files and hashes: 1: QKljngI9_Ik-xp2nFrhKtdZOpZw.crl (hash: XwIg2VB7SkqjnQ6XypaJmJlLjgIVKYaeV5eJnupgMLQ=)
2: ou0GbJ1blaoMkgv99wOuI85TEgs.roa (hash: oR49PdheVHE66AKe4AhTIFXe+kYWY/wSYwudCN274ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:13:cb:b5:a8:c7:f3:c8:40:55:61:9f:22:ad:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a9639e023dfc893ec69da716b84ab5d64ea59c
Validity
Not Before: Sep 26 01:01:16 2026 GMT
Not After : Sep 27 01:01:16 2026 GMT
Subject: CN=fc10363d2d3f9f91b00ead3d7816904ed43a4476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:df:57:cf:f5:d8:f2:e0:00:67:58:2c:43:03:
0c:50:05:aa:05:02:a6:c8:a6:1f:93:44:fe:b0:8d:
01:e0:92:ac:d7:cf:72:e3:9f:1a:45:c3:a9:d2:18:
a9:0a:3c:2b:74:38:e3:8b:b3:4e:ae:21:76:78:dc:
89:23:c9:96:ba:69:85:12:21:7e:5a:a0:77:26:31:
17:e8:55:88:74:5c:92:1c:b6:2e:f4:78:e9:00:e8:
12:87:8d:12:12:c1:8a:6e:15:ed:50:ff:fc:59:38:
6f:8f:d7:63:73:88:a6:52:f8:9f:a8:46:5a:04:5a:
1f:ab:4d:57:f7:5b:ac:9c:dd:97:c3:66:bd:6c:1f:
a3:46:c4:90:89:38:af:5a:76:5d:18:ec:e1:57:d0:
29:c4:77:81:93:3c:2a:7a:9a:65:8c:36:68:30:57:
73:c1:49:62:ed:f4:21:46:e7:d0:76:e3:2b:a5:58:
f7:7c:a7:e1:98:60:50:c2:eb:64:d8:08:5c:55:ee:
bb:d8:84:40:3f:7e:6d:a7:cf:86:e5:a6:4c:c9:a2:
9a:1e:bd:82:5e:bb:50:e3:93:b0:f1:5e:14:79:bb:
37:60:35:29:39:4f:28:58:cf:5c:e9:64:d8:e0:77:
30:10:62:b0:2c:39:36:13:78:08:de:8a:73:9e:bd:
88:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:10:36:3D:2D:3F:9F:91:B0:0E:AD:3D:78:16:90:4E:D4:3A:44:76
X509v3 Authority Key Identifier:
keyid:40:A9:63:9E:02:3D:FC:89:3E:C6:9D:A7:16:B8:4A:B5:D6:4E:A5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:88:88:aa:1e:17:2d:9c:6f:f0:4b:fa:49:e3:6d:42:83:f2:
f3:8b:56:b0:40:86:ba:9a:b5:2a:32:df:1f:75:a6:50:05:e0:
30:9b:4e:70:6a:3d:22:94:57:a8:12:bc:96:8b:78:ad:b9:82:
5f:3a:84:1d:84:ff:3b:d9:a1:d3:53:4e:50:50:8a:cf:7a:59:
5c:ae:e3:92:70:cb:33:f1:62:24:3e:57:b5:3f:0e:a5:7f:d5:
17:e7:9c:cd:6d:74:41:d4:6d:ab:87:d3:bb:0b:67:82:24:34:
d1:f2:5d:a5:c4:14:b8:ad:76:5e:cd:9c:3a:6d:d9:a3:49:c4:
0e:fa:f6:1e:72:4e:e9:0c:2a:27:43:ca:19:74:e9:46:43:08:
4d:37:52:3b:87:0c:e6:b4:e8:77:d7:b0:3f:5f:30:d8:32:18:
c4:6a:b8:aa:54:fd:c6:de:80:a4:d6:37:61:66:05:10:8a:33:
ea:91:f2:b4:45:27:2b:ab:9e:6f:9b:1e:8e:51:1a:f4:6f:8b:
a8:e0:0c:64:23:9e:25:e8:79:2c:a5:89:f3:fb:46:80:84:fb:
f2:b0:fc:a4:66:82:5f:55:36:61:ee:21:b5:d8:26:f1:8f:be:
ba:03:ea:e5:ed:d8:f7:43:f4:17:5e:ae:f5:73:15:7e:55:6f:
02:4d:fe:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:55:08 2026 by rpki-client