Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
File: QHShwDg61esPBYjkwzlLo0AQpiE.mft (raw, json)
Hash identifier: sFH9/Ixo+Wh8goyiEsHb1drodq8mlTKQpZCTaFWIOwE=
Subject key identifier: D6:B1:0B:A3:F2:6F:C4:BF:BF:0A:17:B9:82:EC:D9:44:BE:79:5B:AA
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 01A0D6B957CB0D31564608E83F689C77FD61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 04:01:05 +0000
Manifest this update: Fri 25 Sep 2026 04:01:05 +0000
Manifest next update: Sat 26 Sep 2026 04:01:05 +0000
Files and hashes: 1: QHShwDg61esPBYjkwzlLo0AQpiE.crl (hash: NrORvK2aous/4e1q3HCfuQkqk7D5sosf84+yj6GQZqM=)
2: UuOnxKKINXGrGno4BgqG1wRiVJE.roa (hash: qOk1balDAYueDzPokwNkuPz8mml9IxTXWfQ4Usp7bxE=)
3: lWaDtpARbUJ2WwQgVuDOZ2ytV1Q.roa (hash: jLR4Kee9nPopi72xWjqK7/G5TtGJxgI8fqStb9xXKYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:57:cb:0d:31:56:46:08:e8:3f:68:9c:77:fd:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: Sep 25 04:01:05 2026 GMT
Not After : Sep 26 04:01:05 2026 GMT
Subject: CN=d6b10ba3f26fc4bfbf0a17b982ecd944be795baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:60:30:8f:0f:2e:63:2f:a8:07:5c:20:b8:
38:4f:de:1d:3b:d1:4f:50:09:05:ba:31:94:a8:40:
7e:a0:e3:d3:f6:73:dc:68:a2:47:b6:76:71:55:3c:
73:af:3e:06:ce:91:7c:7d:75:70:14:6e:f7:eb:00:
fb:da:63:ea:23:a0:a8:87:0b:10:82:70:84:fc:16:
49:f7:a4:50:8e:a0:48:96:07:4f:09:42:0f:16:d6:
97:fd:d4:b8:c1:51:b0:36:57:1e:f9:a3:90:99:3b:
f1:f1:59:82:fd:1f:9d:71:34:d5:52:83:9c:38:3a:
02:0a:2c:e3:22:c4:2c:19:1d:3d:c9:94:a9:ac:9b:
0c:d2:c2:75:97:0b:d9:60:0a:2a:e6:b7:a3:44:0c:
e2:d1:6c:74:aa:ea:5b:07:75:e6:c1:c3:6f:68:db:
89:4a:6e:53:f9:76:b3:39:ed:5c:f8:6e:75:05:05:
55:d7:df:42:af:ee:46:77:7c:bc:dd:e7:46:c5:24:
58:5a:9f:d5:08:b5:65:7d:20:8c:94:45:9b:73:cc:
a9:c1:cd:c8:ea:df:59:43:33:55:b7:b4:e4:43:3c:
4d:31:4a:4f:1a:26:ab:c9:5e:89:10:17:56:7a:89:
b6:87:8b:7d:6e:f0:de:59:16:42:13:01:e3:fa:58:
fa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B1:0B:A3:F2:6F:C4:BF:BF:0A:17:B9:82:EC:D9:44:BE:79:5B:AA
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:40:89:12:11:d4:e0:03:eb:16:43:93:5d:1b:54:33:0c:80:
6c:3a:6d:4a:86:d1:10:6c:da:bc:f0:4b:30:2e:b8:e9:97:4b:
27:00:4e:ab:45:6f:40:c1:df:60:6c:d6:62:12:95:bb:8e:46:
d4:96:70:1b:6d:59:35:da:c4:73:4a:b5:76:9e:54:64:35:d9:
07:b5:ef:9d:44:32:3f:0d:fd:4e:54:13:b0:fd:83:4e:ec:6e:
db:23:f2:82:9e:8f:85:10:32:9a:d4:7b:d5:8d:b7:10:fc:70:
ea:97:50:81:19:9e:b8:42:e0:e4:ba:f7:10:d7:40:a6:47:cf:
f6:8e:ff:52:00:c8:77:2c:8d:5f:01:a3:a8:ee:3b:04:35:72:
a7:85:ac:8f:13:61:21:dd:4b:a3:70:17:3e:3d:e5:cc:94:7f:
28:3f:51:1e:95:c6:6e:0c:d3:fa:17:3e:15:3e:3f:f9:37:6c:
71:f0:2d:d2:65:8b:b5:00:12:64:44:13:f4:76:f3:bf:b2:f3:
e6:cc:01:91:fd:65:ce:3e:eb:d0:4f:7b:76:0b:20:04:59:09:
61:f3:85:d5:ae:78:92:23:10:83:f9:57:e1:c7:49:18:9a:ea:
65:8c:e8:d4:fc:b3:d5:53:5a:09:e8:89:a1:bc:68:62:3f:99:
b9:0b:4b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:01:14 2026 by rpki-client