Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: lGGyNOkuD1W7ll+gXdqX8ZFr29kl3B+pSRmrfTClRas=
Subject key identifier: 44:41:08:2E:11:AC:6B:DD:12:AF:28:41:BD:81:9A:65:7A:8A:A4:8F
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 01A0D1929BB09D5CD29969903E0C4889EDB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 04:00:41 +0000
Manifest this update: Thu 24 Sep 2026 04:00:41 +0000
Manifest next update: Fri 25 Sep 2026 04:00:41 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: D2z912fnRKmUHctQvb0RlsdMM935UdPabOPN7yaDzCQ=)
2: RMmBnfd1TCGUmEC2O6JokpnQVQ8.roa (hash: wPMgtMcsG/KMNrN9/altEtQua2Hm0vaKQpeGiiY5B3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:9b:b0:9d:5c:d2:99:69:90:3e:0c:48:89:ed:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Sep 24 04:00:41 2026 GMT
Not After : Sep 25 04:00:41 2026 GMT
Subject: CN=4441082e11ac6bdd12af2841bd819a657a8aa48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:98:5f:dd:42:68:27:35:3f:3d:e3:62:ee:b1:
94:e6:9a:ed:5e:ae:70:3a:2d:37:57:1f:5a:fe:15:
bd:59:26:1a:68:09:3f:50:46:5b:2d:49:0a:87:ab:
6e:ca:8d:9f:54:a3:76:74:cf:3b:5f:ec:8a:27:0b:
9b:52:4e:1c:d6:9d:47:ba:8c:1e:31:1e:bb:29:05:
e1:ec:1a:1e:bc:f8:3f:5a:f5:59:c9:dc:8b:95:be:
07:a3:5d:8a:af:33:44:28:7e:e7:21:71:e5:a1:60:
84:85:de:e1:cc:5e:03:38:ce:54:d9:93:0b:69:e5:
3c:0f:04:44:6f:d1:d6:a3:18:53:1e:08:37:7b:2f:
a0:4d:f2:32:8a:bd:7e:d3:05:6c:a0:6c:b9:b7:f5:
75:3b:71:bd:3e:d6:22:d3:c6:50:08:e0:25:c9:72:
03:b9:cb:ea:fa:c7:09:e1:58:8d:a6:04:e8:3d:93:
73:2d:82:de:bd:9a:59:0c:95:61:76:2c:b2:9e:9c:
a6:11:86:be:d9:1c:5c:bc:9a:6f:4f:8a:c4:dd:ba:
6e:77:e3:e3:b2:50:1d:a0:8c:9f:6f:c8:fd:52:1c:
5a:45:04:0b:e0:67:0b:b9:a0:2d:7c:6a:c8:9c:c2:
c1:7d:32:a3:06:b0:85:18:5c:59:8c:c3:d3:90:45:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:41:08:2E:11:AC:6B:DD:12:AF:28:41:BD:81:9A:65:7A:8A:A4:8F
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:74:18:fa:27:1b:ea:6d:e6:ea:49:a2:a9:1e:95:84:d4:84:
a9:69:08:93:b8:ee:29:64:bc:60:54:13:ab:bd:6c:af:e6:f9:
d9:3d:20:33:29:07:f8:a2:38:77:cb:b7:dd:0e:77:1c:95:62:
bc:33:f6:70:a9:2d:9d:09:0e:2a:89:64:59:e4:b9:c8:7e:80:
ac:df:72:0d:c3:25:15:b2:78:37:61:1a:30:8e:00:ed:98:f6:
c7:f5:2c:88:e5:e4:09:68:b6:da:57:8f:cd:03:a9:37:0d:66:
ec:c0:04:c0:8b:5a:b1:87:9c:c8:18:db:81:1e:0e:c5:90:7d:
26:7e:28:bc:6a:af:2f:1e:b5:93:35:4b:16:c4:1f:31:dc:a2:
21:35:55:51:ce:6d:76:b0:ee:c1:9d:99:ce:f9:5d:6a:1d:66:
64:60:33:34:68:55:a8:66:08:c8:e3:14:17:2b:64:52:4d:af:
6e:5b:1a:30:f7:a6:b7:4e:d5:cc:7b:7a:1c:98:cb:ed:cc:fe:
45:ce:4c:57:dd:70:5e:e1:22:41:e7:d9:45:e2:51:4f:01:2c:
bb:47:60:31:f6:f1:ec:8a:54:b3:63:e1:0a:b4:80:91:70:1b:
0e:e8:38:31:7f:b7:3e:82:cc:61:7f:0a:52:af:2c:87:82:69:
64:43:87:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRkpuwnVzSmWmQPgxIie25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyYzA5NTkwMTE2MjdkZGQwZDA1N2Q3MzFlOGZhNWE1MTAy
OTY1OTIwHhcNMjYwOTI0MDQwMDQxWhcNMjYwOTI1MDQwMDQxWjAzMTEwLwYDVQQD
Eyg0NDQxMDgyZTExYWM2YmRkMTJhZjI4NDFiZDgxOWE2NTdhOGFhNDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJhf3UJoJzU/PeNi7rGU5prtXq5w
Oi03Vx9a/hW9WSYaaAk/UEZbLUkKh6tuyo2fVKN2dM87X+yKJwubUk4c1p1Huowe
MR67KQXh7BoevPg/WvVZydyLlb4Ho12KrzNEKH7nIXHloWCEhd7hzF4DOM5U2ZML
aeU8DwREb9HWoxhTHgg3ey+gTfIyir1+0wVsoGy5t/V1O3G9PtYi08ZQCOAlyXID
ucvq+scJ4ViNpgToPZNzLYLevZpZDJVhdiyynpymEYa+2RxcvJpvT4rE3bpud+Pj
slAdoIyfb8j9UhxaRQQL4GcLuaAtfGrInMLBfTKjBrCFGFxZjMPTkEWmawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERBCC4RrGvdEq8oQb2BmmV6iqSPMB8GA1UdIwQY
MBaAFELAlZARYn3dDQV9cx6PpaUQKWWSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iYTEyY2QtMmU3ZS00MGRjLWFlODgt
MjQ4YjU5YzM2OTZiLzEvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iYTEyY2QtMmU3ZS00MGRjLWFlODgtMjQ4YjU5YzM2OTZi
LzEvUXNDVmtCRmlmZDBOQlgxekhvLWxwUkFwWlpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXQY+icb
6m3m6kmiqR6VhNSEqWkIk7juKWS8YFQTq71sr+b52T0gMykH+KI4d8u33Q53HJVi
vDP2cKktnQkOKolkWeS5yH6ArN9yDcMlFbJ4N2EaMI4A7Zj2x/UsiOXkCWi22leP
zQOpNw1m7MAEwItasYecyBjbgR4OxZB9Jn4ovGqvLx61kzVLFsQfMdyiITVVUc5t
drDuwZ2Zzvldah1mZGAzNGhVqGYIyOMUFytkUk2vblsaMPemt07VzHt6HJjL7cz+
Rc5MV91wXuEiQefZReJRTwEsu0dgMfbx7IpUs2PhCrSAkXAbDug4MX+3PoLMYX8K
Uq8sh4JpZEOHgg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:13:07 2026 by rpki-client