Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
File: QnqV1vkbZ2udcauK4RQZQY3jww4.mft (raw, json)
Hash identifier: wDg904sciQhzNkII0g+i8EG5UIqMXFR0icnr7rzAZyU=
Subject key identifier: F4:61:3A:37:C3:29:6A:07:3A:1C:25:3C:FB:1A:3A:6C:A1:6A:B8:35
Authority key identifier: 42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
Certificate issuer: /CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Certificate serial: 01A0FF475F2B106009A47C42DD1F0CB7A35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
Manifest number: 15B3
Signing time: Sat 03 Oct 2026 01:01:02 +0000
Manifest this update: Sat 03 Oct 2026 01:01:02 +0000
Manifest next update: Sun 04 Oct 2026 01:01:02 +0000
Files and hashes: 1: QnqV1vkbZ2udcauK4RQZQY3jww4.crl (hash: KdBetnV1LM1Qz4EdwyHnqeL85tsTFsxyQiFj5s7Bttw=)
2: bgMpMI4WldrMWD31yd0aqnCdNoE.asa (hash: OqNfRNFZs7Vjw9Lnj9jbn6dEae0oyFdssh6TRGhNAw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:47:5f:2b:10:60:09:a4:7c:42:dd:1f:0c:b7:a3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a95d6f91b676b9d71ab8ae11419418de3c30e
Validity
Not Before: Oct 3 01:01:02 2026 GMT
Not After : Oct 4 01:01:02 2026 GMT
Subject: CN=f4613a37c3296a073a1c253cfb1a3a6ca16ab835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:36:35:d2:b0:db:b2:af:99:10:19:3b:54:
68:cd:22:23:0f:d3:f9:2d:7b:5d:3f:2a:d7:7b:00:
35:b6:f8:6a:af:2f:17:5a:b1:12:6a:f6:da:f4:7c:
3a:6f:48:b3:01:80:73:e2:4f:00:57:98:b5:a7:10:
d6:3e:a4:e1:cd:28:83:99:17:82:57:ca:3e:6a:8a:
63:87:35:2a:d4:be:93:2d:d5:01:a6:57:72:26:61:
7b:dd:b6:75:2d:f1:cb:2d:c3:3f:d2:70:4e:96:5f:
cc:60:ac:1f:a6:4e:b0:31:e1:96:25:63:b1:41:08:
8a:6b:d0:ab:62:9a:15:ad:ee:3a:c4:b8:60:a7:8a:
7e:f2:92:fd:5d:fe:80:eb:25:82:4c:17:69:08:4e:
6e:19:a8:d4:87:78:db:84:69:f2:09:93:76:c7:55:
a4:a7:3c:1d:6a:9d:f2:10:c0:e8:a0:21:ec:8f:37:
c8:b2:ff:8f:61:ce:ac:2e:d4:12:ac:3a:fd:29:52:
70:a0:57:85:a2:5d:4b:06:51:16:1b:06:0d:a1:64:
0b:ab:a2:bf:0d:9c:b1:5a:38:17:e2:82:7f:f5:73:
18:5e:2e:1e:27:4b:cc:0d:31:86:93:f1:b3:ce:44:
bb:37:8c:8e:e1:2c:81:36:e1:7c:c3:ea:dd:fd:6f:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:3A:37:C3:29:6A:07:3A:1C:25:3C:FB:1A:3A:6C:A1:6A:B8:35
X509v3 Authority Key Identifier:
keyid:42:7A:95:D6:F9:1B:67:6B:9D:71:AB:8A:E1:14:19:41:8D:E3:C3:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnqV1vkbZ2udcauK4RQZQY3jww4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/64f999-d26f-4606-a326-ce7a51aa3314/1/QnqV1vkbZ2udcauK4RQZQY3jww4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:69:aa:6a:17:9e:c8:04:6e:2f:fc:de:8e:34:c6:65:9a:12:
e7:18:2c:05:53:d2:94:a6:6a:66:be:3b:6c:2c:07:a4:ae:94:
9a:36:58:9b:be:ac:36:90:d9:fc:32:e8:04:56:a0:08:8f:39:
35:f5:c6:34:d5:cb:22:52:e5:ec:8a:f5:df:61:08:a3:5e:d9:
42:0a:1c:e7:63:7a:61:29:78:a8:04:41:b4:98:38:ef:52:e4:
23:c5:54:42:1c:5b:a5:94:d4:ff:83:47:db:47:c3:bc:da:90:
b7:5e:e6:cb:ee:d4:b3:f3:2f:5f:b6:52:be:db:cf:da:62:91:
64:ff:fd:0c:36:1e:40:85:19:19:88:2d:94:cc:31:0a:4b:cd:
3d:4a:6e:4f:76:c9:9e:f2:36:04:1f:76:8e:68:25:f7:f2:ca:
65:e8:4f:58:90:9d:27:95:b4:80:4b:0c:cd:15:75:16:a0:6b:
64:fa:ef:8e:8a:19:f3:52:0a:ef:52:32:1a:71:10:53:15:53:
00:a7:24:04:b2:46:d1:d0:aa:26:c0:2c:c4:df:21:ba:07:25:
6c:e1:27:34:76:b7:49:cd:e2:77:17:fa:2e:74:88:54:cf:d0:
e4:05:6c:de:cc:21:05:cb:46:bd:65:33:f3:b7:60:8e:22:8c:
63:16:ce:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 08:28:03 2026 by rpki-client