Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: VsmjcETJmgQTteEVxniOyDBb3MYR1dlxflkqW0z4PQU=
Subject key identifier: E2:76:C2:71:8F:EC:32:C8:E2:B2:D6:47:69:BC:95:A8:4C:EE:9E:19
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 01A0D383D21A12ED2DB4F8845141C4A2F59F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 13:03:46 +0000
Manifest this update: Thu 24 Sep 2026 13:03:46 +0000
Manifest next update: Fri 25 Sep 2026 13:03:46 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: ack+ap/FQrN+Lm9yblhruQgrCG/Df8EZq3lqg05cBZc=)
2: RMmBnfd1TCGUmEC2O6JokpnQVQ8.roa (hash: wPMgtMcsG/KMNrN9/altEtQua2Hm0vaKQpeGiiY5B3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:d2:1a:12:ed:2d:b4:f8:84:51:41:c4:a2:f5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Sep 24 13:03:46 2026 GMT
Not After : Sep 25 13:03:46 2026 GMT
Subject: CN=e276c2718fec32c8e2b2d64769bc95a84cee9e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:32:b6:2a:00:45:01:2d:2d:0e:28:96:e3:
da:97:07:d2:9f:0c:dc:0d:63:4c:ca:db:2a:3b:7b:
bb:f4:67:ee:58:8a:97:3e:a8:00:d0:91:d2:ae:a7:
64:56:6b:d0:f3:b8:11:d0:9c:80:68:20:28:e5:56:
b7:45:a4:7d:fc:5d:d0:9c:15:66:f6:75:a3:6a:1e:
1f:75:d6:9e:9b:fc:e3:55:82:bd:f6:52:b8:f3:c4:
cd:71:51:2c:c4:a2:86:09:73:c1:0e:96:8e:cd:4c:
13:ec:61:49:0b:a9:73:bf:13:ea:7d:e6:d7:da:04:
99:8e:27:16:7b:02:70:ee:57:15:4f:20:9f:8c:62:
47:a7:51:9a:23:ec:ee:cf:fe:52:cd:62:89:ab:e6:
5f:69:02:d3:e3:3b:02:43:8a:f1:a9:8a:78:80:4c:
5e:be:0f:32:c4:69:a0:7c:6f:f6:c7:75:3f:48:a2:
2f:00:1c:64:75:d2:0e:c4:3e:df:a0:5c:e1:29:0d:
69:d6:e9:88:f2:e8:5b:34:be:69:76:b3:2c:06:d4:
82:ce:80:a4:95:17:6b:17:7c:de:91:49:da:4a:5f:
f7:7f:c9:ae:f7:70:f2:4c:3c:2d:c9:53:96:aa:65:
a5:75:7f:45:20:3e:ab:94:9d:12:e2:86:36:9a:b2:
b4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:76:C2:71:8F:EC:32:C8:E2:B2:D6:47:69:BC:95:A8:4C:EE:9E:19
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:93:1b:13:94:d0:56:4d:98:e7:c9:e8:ae:c4:83:3e:ab:c9:
96:f7:37:d1:2d:8f:c3:91:f2:ec:b4:9b:8d:0a:fb:66:a7:ff:
d6:bb:cc:f5:d3:41:ff:67:25:aa:50:75:50:15:67:de:65:6e:
5a:97:25:c0:04:76:d3:b0:9d:f1:c6:fc:f3:06:67:fe:2c:c1:
11:7d:15:d7:90:b0:a0:f5:37:17:9f:ef:51:82:dd:c0:3a:4f:
6f:64:ca:d8:07:ef:d8:0b:25:ad:4f:b9:80:a7:c7:27:c1:58:
9a:2b:c6:54:85:79:39:c8:21:46:65:c3:3a:b7:f5:c7:41:72:
ad:14:f9:6a:36:6e:c6:72:6a:e2:dc:ad:2e:e3:b6:60:d9:f0:
32:e9:a4:7e:35:3e:18:3b:c6:78:2b:c7:2a:93:a4:b8:d2:3d:
ef:24:dd:fc:5e:28:e7:d5:ee:e1:a3:4f:94:29:c2:5a:38:28:
36:05:7e:57:2e:d2:ba:6d:7f:aa:58:1f:f2:ef:62:5a:2f:a9:
f1:2f:fe:07:fe:fa:ba:bf:07:c9:60:4a:d6:f5:e4:4b:02:1d:
98:dd:88:0c:36:e2:cb:ed:2d:1c:3e:2c:6c:0f:90:39:ee:1b:
2f:9b:bc:9b:8b:f1:e7:10:38:0f:74:7e:82:4c:f0:d3:a4:9b:
97:a3:55:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:36:58 2026 by rpki-client