Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
File: QF1kV0EhVne3dI0f3v1BYgetsS0.mft (raw, json)
Hash identifier: KDoF3wUQLR0U6KXXQmAaFRRHLXzFC+XWOZx9kUdoTzI=
Subject key identifier: AD:9C:60:DB:4F:89:C6:55:EE:ED:D7:4F:F0:CF:49:69:F3:8F:DF:D4
Authority key identifier: 40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
Certificate issuer: /CN=405d645741215677b7748d1fdefd416207adb12d
Certificate serial: 01A0EAAE57CDF68C82A52E4FFDB2907668D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
Manifest number: 0E62
Signing time: Tue 29 Sep 2026 01:01:29 +0000
Manifest this update: Tue 29 Sep 2026 01:01:29 +0000
Manifest next update: Wed 30 Sep 2026 01:01:29 +0000
Files and hashes: 1: QF1kV0EhVne3dI0f3v1BYgetsS0.crl (hash: Rn/1bvTX9CekC6XYrhLZFWePGc7adCw4vdcoGy1r0GA=)
2: bgTj1AVpGOJ4PVrdSMxeLKpik_E.roa (hash: PA5QdaiNGx0nBgpS5K3tHFIeNRXLUOzm0Y2JaVTpock=)
3: lePQo6wZD_Sk6G9yXvisbl2Tsao.roa (hash: 4hQP72BMPYOrYdBAheaaMbRjYFT184+eQqEoi9pvU4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:57:cd:f6:8c:82:a5:2e:4f:fd:b2:90:76:68:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405d645741215677b7748d1fdefd416207adb12d
Validity
Not Before: Sep 29 01:01:29 2026 GMT
Not After : Sep 30 01:01:29 2026 GMT
Subject: CN=ad9c60db4f89c655eeedd74ff0cf4969f38fdfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:c1:6e:be:75:7e:65:55:d6:b0:af:e1:2c:
3c:61:d9:ba:8e:8d:d4:86:0b:9c:d0:2c:dc:03:01:
ce:fd:f1:f4:8d:cc:24:f0:99:90:f7:4a:53:31:dd:
db:2d:f2:a7:8b:46:99:03:fa:9e:20:75:1d:fe:f2:
54:12:2a:9a:3f:df:51:13:bb:71:99:e6:cf:aa:da:
b8:c6:d1:94:23:aa:93:e4:43:b0:e8:21:c5:8c:3c:
d7:bd:d2:ff:b7:2e:0f:42:d3:a3:a2:a0:db:4e:c0:
58:ed:7d:23:fe:65:72:e6:fd:ce:c8:ff:55:1d:1f:
ce:73:53:91:62:c7:9e:18:8e:b2:3a:36:13:d6:d3:
5f:1c:b2:e6:34:52:9b:1f:c0:bf:2d:2a:24:f4:9d:
c7:71:13:bc:84:9f:95:ec:75:a8:39:34:20:42:dc:
6d:9f:37:93:19:4b:59:23:29:78:1a:28:08:8e:d1:
0a:f5:99:31:64:d7:17:e9:cf:ba:1e:1b:7a:33:3c:
dc:11:77:26:62:da:3f:11:78:4b:98:e8:35:7c:6b:
85:04:b0:9c:56:0d:56:df:97:56:7a:63:b8:7a:e1:
29:02:cf:48:0a:6e:6c:43:ad:fc:12:43:b8:f7:86:
34:1d:35:63:91:dd:fe:fe:a9:ae:14:2c:a5:ec:6f:
10:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9C:60:DB:4F:89:C6:55:EE:ED:D7:4F:F0:CF:49:69:F3:8F:DF:D4
X509v3 Authority Key Identifier:
keyid:40:5D:64:57:41:21:56:77:B7:74:8D:1F:DE:FD:41:62:07:AD:B1:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QF1kV0EhVne3dI0f3v1BYgetsS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/43d830-9811-4599-8349-440dd012b141/1/QF1kV0EhVne3dI0f3v1BYgetsS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:38:f8:d6:16:81:33:a6:82:d5:dd:62:75:6f:9f:ff:ba:66:
5f:2f:81:5c:be:64:c6:7a:2d:1c:13:78:c4:06:93:12:94:2b:
a0:00:14:7c:75:30:7e:41:ea:06:ac:dc:b1:bd:d4:1d:a2:50:
7d:88:4b:88:c6:52:d2:b1:1f:61:af:3f:ce:60:9c:5a:17:73:
19:e9:4f:73:aa:36:b7:c3:ea:72:e2:1d:4d:8f:ce:98:51:af:
98:a4:11:75:1c:8f:fc:c3:6d:4c:e2:d1:0c:47:74:41:72:00:
1a:90:e2:11:8d:a6:1d:93:77:73:63:6e:19:11:61:90:2c:46:
01:4f:1b:55:32:c3:3f:27:15:71:09:54:87:67:69:77:87:35:
94:69:df:f3:e5:f2:3e:10:3e:01:7c:2b:85:ba:d2:c0:ef:e0:
2c:c5:2d:2b:56:cf:73:89:ad:c3:8f:f0:1a:98:86:bc:33:a6:
c0:54:31:a6:8d:d9:97:b8:a6:d1:36:e6:37:a8:b8:43:e1:6c:
f3:64:2b:53:ba:86:1f:fb:fb:fb:cb:14:13:50:44:3f:df:74:
91:ef:f4:1b:9e:0e:26:f5:5e:73:53:45:59:83:1e:a6:fe:7d:
b4:f6:e1:0f:4f:54:bc:be:b2:dc:97:bc:da:94:92:3e:2e:69:
7e:a5:f6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:30:59 2026 by rpki-client