Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.mft
File: QaKq1CT4s2whxBBOzeTwqUwU6rU.mft (raw, json)
Hash identifier: lmijePWvMnFFvqHd/0OvVNsqYic7xwIl4FaHLUEIL3Y=
Subject key identifier: 3D:3D:B7:AC:0A:8F:4C:08:62:A2:47:C2:88:EF:C6:0B:C4:C4:E5:00
Authority key identifier: 41:A2:AA:D4:24:F8:B3:6C:21:C4:10:4E:CD:E4:F0:A9:4C:14:EA:B5
Certificate issuer: /CN=41a2aad424f8b36c21c4104ecde4f0a94c14eab5
Certificate serial: 01A0D3837D7A24F40A0D8CF5F1150AA3F5FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaKq1CT4s2whxBBOzeTwqUwU6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.mft
Manifest number: 08
Signing time: Thu 24 Sep 2026 13:03:24 +0000
Manifest this update: Thu 24 Sep 2026 13:03:24 +0000
Manifest next update: Fri 25 Sep 2026 13:03:24 +0000
Files and hashes: 1: QaKq1CT4s2whxBBOzeTwqUwU6rU.crl (hash: Wf1HMYH9/sgXJiDwBKCOpo7fnzE2WqWCn1H9k73u5kU=)
2: hmqViEquWUswNU98B0WP5sYANn4.roa (hash: cdtwzuRgZBZSCCSKfbfF5U752ScIvmwq/6SJfzh37Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaKq1CT4s2whxBBOzeTwqUwU6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:7d:7a:24:f4:0a:0d:8c:f5:f1:15:0a:a3:f5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a2aad424f8b36c21c4104ecde4f0a94c14eab5
Validity
Not Before: Sep 24 13:03:24 2026 GMT
Not After : Sep 25 13:03:24 2026 GMT
Subject: CN=3d3db7ac0a8f4c0862a247c288efc60bc4c4e500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2c:71:9a:2f:f3:bf:21:8d:52:03:63:ab:9b:
b9:e7:42:9b:89:e2:60:ea:a0:39:cb:a5:d1:59:fe:
19:f9:3a:b8:4f:1f:f8:7f:63:0f:83:71:3f:bf:20:
28:52:78:12:fc:a2:10:20:25:aa:7d:bb:65:72:40:
53:52:8f:2f:52:af:9f:2a:69:99:f4:33:cf:23:d8:
a3:49:60:6d:dd:6f:6d:24:7f:80:a4:9e:ec:88:63:
46:ac:66:41:3b:04:84:ff:78:4d:b1:22:63:bc:bc:
4e:63:88:7b:44:01:f5:2d:7d:cc:2f:ca:e4:94:8d:
ff:87:b3:66:29:a4:0e:04:2d:66:69:d8:9c:6f:c5:
6d:e5:ff:c5:4b:4d:e3:af:74:5e:01:d6:51:29:a0:
df:15:7c:65:83:f3:40:55:68:6b:8d:a7:d3:47:62:
b1:83:1c:18:c0:2b:3a:01:c8:9b:e5:92:88:28:26:
ba:62:e4:e3:76:ee:fe:98:5b:71:42:06:ac:d3:7f:
db:bc:7e:23:d4:3e:32:02:66:b1:92:2b:00:72:49:
d9:bc:f9:8c:57:10:1a:cf:cb:8d:dc:52:6a:7a:dd:
be:b3:5a:a9:46:18:fa:c0:54:63:8d:15:2b:0f:43:
dd:ef:6c:aa:c4:89:d2:b7:a2:c8:dc:d5:5c:7f:e7:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3D:B7:AC:0A:8F:4C:08:62:A2:47:C2:88:EF:C6:0B:C4:C4:E5:00
X509v3 Authority Key Identifier:
keyid:41:A2:AA:D4:24:F8:B3:6C:21:C4:10:4E:CD:E4:F0:A9:4C:14:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaKq1CT4s2whxBBOzeTwqUwU6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:3f:65:6b:1f:fd:72:14:0b:9c:98:21:d7:b2:e1:c1:f4:91:
05:8e:24:b1:72:b6:63:a4:87:6b:fe:d6:dc:f4:26:ba:c4:d6:
52:be:fc:63:c1:65:03:e4:f5:af:c9:7d:c4:3e:5a:7e:a0:d2:
5f:3f:c5:07:fb:ca:a1:5b:d8:b5:bf:7d:25:32:69:d0:f6:ad:
43:29:40:ed:03:dc:bd:2a:f8:2e:e0:97:80:22:f3:5a:5a:1b:
c3:38:e0:b1:ff:b0:bc:ae:72:08:bd:63:72:e5:c9:32:10:1f:
ee:d9:69:85:ba:af:28:1f:f9:14:fa:a0:de:aa:78:e7:a6:9e:
50:39:4f:d1:94:38:66:e4:41:3b:92:d0:9e:da:b3:f7:be:c4:
63:b6:b6:81:2f:4d:93:83:55:2a:4f:f1:07:c3:24:3f:3a:55:
41:3d:af:92:e5:57:3f:93:b4:b3:61:33:52:81:9f:7f:92:29:
d3:59:ce:24:79:46:d2:2c:a3:05:dd:b3:f0:dc:4c:67:9b:6b:
32:f7:67:7c:d3:6f:86:d2:4a:8b:cb:0d:4a:b8:66:d5:40:75:
5c:b3:d6:bc:95:a3:01:db:f8:0f:17:c3:12:c5:9a:71:0e:fe:
fd:61:46:aa:fe:22:ff:20:75:00:0f:0e:84:c6:79:d9:0f:cb:
36:d8:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:36 2026 by rpki-client