Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
File: QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft (raw, json)
Hash identifier: ivrb/zNLHPHmkIr/B+lY14NhD7kGfdvgRRtlkQFb4TU=
Subject key identifier: 05:80:D5:09:36:4F:52:4E:66:5F:50:2F:30:5E:C6:48:08:43:39:20
Authority key identifier: 40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
Certificate issuer: /CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Certificate serial: 01A0ECD3DA5337334777881E16715F97D10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
Manifest number: 0E88
Signing time: Tue 29 Sep 2026 11:01:41 +0000
Manifest this update: Tue 29 Sep 2026 11:01:41 +0000
Manifest next update: Wed 30 Sep 2026 11:01:41 +0000
Files and hashes: 1: QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl (hash: PcrUZ2lkwIVuY5VTqXq5vdhZe8RsmbEheaGgiHX+aFY=)
2: YVo8LjxK7TZOHy2e0UtRMc12yMo.roa (hash: y1sW6xShCe5Zkqn/itmgk+RBNdntx91KOyuie9DOHaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 11:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:da:53:37:33:47:77:88:1e:16:71:5f:97:d1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d5591a75bd693e9d3b766834bf074f7b1eee3a
Validity
Not Before: Sep 29 11:01:41 2026 GMT
Not After : Sep 30 11:01:41 2026 GMT
Subject: CN=0580d509364f524e665f502f305ec64808433920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:41:4f:93:e9:92:44:18:05:0a:11:f7:5f:
05:9f:6e:c8:e9:ec:6f:25:0b:80:ce:92:69:09:4c:
fc:47:af:55:cb:7a:52:09:23:56:82:be:ca:0f:41:
b3:b4:3d:d7:00:1b:82:88:1c:11:41:68:8f:82:f9:
31:31:81:cf:ec:0c:86:46:79:40:95:2e:a6:c8:07:
3b:b6:b0:79:57:ef:37:83:ab:1c:03:7d:86:c0:dd:
ec:c2:18:41:1d:85:dd:2e:c2:15:55:ac:9a:53:17:
65:0e:ea:28:ef:53:42:b3:ee:e8:9a:77:32:f4:d0:
01:78:e9:a4:e0:80:2a:87:1b:07:e0:e0:67:80:78:
36:86:ff:5a:cd:fc:1c:9d:8f:57:13:e1:54:f1:e6:
04:6e:ea:69:db:47:f2:06:c8:4d:73:d8:60:58:e0:
18:2b:b2:34:11:9f:a0:45:b5:3a:74:58:5a:33:1c:
b6:55:64:2c:f1:09:96:8d:6f:29:10:d4:e4:52:cd:
61:b3:a7:b4:ae:15:a3:93:c1:cb:a8:4d:f5:cd:76:
42:18:b8:23:da:84:e6:3e:c7:78:9f:2e:d1:32:9c:
bb:8c:19:8c:72:22:b4:b1:51:bf:87:a6:19:8f:0d:
97:5b:7c:1b:61:42:68:91:3a:94:38:8a:b9:f0:2d:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:80:D5:09:36:4F:52:4E:66:5F:50:2F:30:5E:C6:48:08:43:39:20
X509v3 Authority Key Identifier:
keyid:40:D5:59:1A:75:BD:69:3E:9D:3B:76:68:34:BF:07:4F:7B:1E:EE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVZGnW9aT6dO3ZoNL8HT3se7jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/9c9f28-4f41-472d-a63e-a10a3a4963fb/1/QNVZGnW9aT6dO3ZoNL8HT3se7jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:82:1f:d8:af:03:d8:79:5f:4a:f9:f4:6d:c6:a5:8a:51:28:
38:21:5a:f3:3e:51:d5:fe:44:76:fc:71:79:c0:c9:66:21:ef:
25:f5:04:37:ed:6c:fc:67:e8:f5:a6:18:e5:9b:5d:94:97:e3:
4c:65:9b:33:08:5d:5f:7f:f3:b9:c3:b3:a0:01:72:00:7d:c2:
55:d3:cd:1d:c6:94:e1:d1:7f:e8:80:f7:17:b5:5b:d7:bd:2f:
e1:66:70:d2:a3:6b:f2:22:d4:63:27:00:cf:d8:00:74:18:4e:
92:9d:e7:b3:8e:48:09:71:f8:37:f4:f5:33:89:ad:60:be:6e:
99:b2:27:aa:d2:97:0e:e5:08:c7:44:b8:f2:7b:ef:dc:ef:41:
97:db:ab:3f:cd:66:ee:97:df:1e:f0:30:2f:80:02:73:bf:fe:
5a:87:d8:e3:97:17:16:6e:8b:f3:12:74:5d:ec:95:af:b6:9e:
f0:7e:d2:2c:c2:d3:95:88:2d:c9:4c:fe:71:b9:41:24:df:b8:
a3:11:7c:c8:4d:7e:9a:a8:33:1b:ea:f2:cf:ba:7a:f9:ed:ce:
76:13:e9:62:6b:cb:8c:a1:47:14:21:88:f0:d7:bd:45:37:7f:
a9:24:ba:a7:9a:21:7a:49:02:52:79:b1:a7:3e:76:e3:7c:f5:
27:5f:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:59:25 2026 by rpki-client