Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: 4nsm7OGeIK9ovb1ijZ4dmRY5CSvWxTbY7YPIr+drbgI=
Subject key identifier: 90:0A:2E:49:B2:82:EF:B7:1E:10:0B:C1:2E:42:7B:86:D3:AE:36:74
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 01A0D7CD589A64488975D834BC9C81228BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 1804
Signing time: Fri 25 Sep 2026 09:02:34 +0000
Manifest this update: Fri 25 Sep 2026 09:02:34 +0000
Manifest next update: Sat 26 Sep 2026 09:02:34 +0000
Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: djO+xGh2RQs6ye6yfQoLZNNZbawqkKndlZonR+cVXjU=)
3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:58:9a:64:48:89:75:d8:34:bc:9c:81:22:8b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Sep 25 09:02:34 2026 GMT
Not After : Sep 26 09:02:34 2026 GMT
Subject: CN=900a2e49b282efb71e100bc12e427b86d3ae3674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:3c:f5:f7:12:ba:5b:c9:84:2d:05:6b:2b:
c4:d0:ea:ad:4d:e0:7e:b7:27:1f:a9:4b:2b:55:74:
b2:ff:93:fc:67:bd:98:e1:9c:85:58:d2:51:8a:98:
0e:3d:11:84:7f:ef:0b:bc:05:c2:c0:4c:2d:77:04:
5f:cd:f7:dc:68:c0:eb:84:3e:82:c6:7c:10:ea:42:
ac:82:90:e3:44:b3:52:9e:0b:c4:38:18:f3:a2:db:
00:53:c7:07:31:83:70:4f:8b:6a:78:a1:fc:d3:6b:
6d:cd:7a:a4:87:11:93:49:92:74:e0:74:a7:85:d9:
38:48:20:03:6e:80:37:89:8f:93:42:f2:62:9c:c0:
7a:02:61:41:47:a1:fe:d6:fb:d9:f4:01:fc:eb:56:
20:21:c6:71:85:c3:49:d8:a1:43:9c:0c:c0:a4:ef:
c9:d1:24:37:69:67:45:81:c8:64:8b:8f:ae:b0:99:
bb:56:3c:01:04:53:56:8c:06:56:4d:cd:72:26:1d:
d9:78:af:21:3f:6f:9d:37:ee:72:f9:cf:83:04:5a:
27:4f:9c:30:81:08:e4:35:b6:7f:fe:17:67:f0:37:
b6:08:fb:10:e5:b2:26:ee:e2:5d:05:c0:4f:90:6e:
91:44:24:27:f4:09:dd:54:75:63:51:51:1a:97:9d:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0A:2E:49:B2:82:EF:B7:1E:10:0B:C1:2E:42:7B:86:D3:AE:36:74
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ef:3c:e1:ac:a6:2c:3c:05:e7:d6:db:5b:7f:6e:b9:7c:de:
10:66:ae:be:c6:41:88:b7:b1:66:b8:6b:7d:e8:51:06:8b:1c:
0f:89:7b:55:d2:88:99:b5:95:43:5e:b0:da:7a:73:6a:ed:c6:
b9:03:13:44:8e:ab:e5:ff:45:e7:d6:01:f4:ed:c8:8b:cd:ac:
f1:e0:22:64:70:e3:67:da:06:ba:05:e6:b6:5b:5d:57:c3:9e:
b4:03:a6:8f:3e:02:76:87:d6:ac:2e:e3:3a:5b:b8:2d:cb:7a:
7d:5a:05:72:cd:c1:4a:4e:ec:b8:ba:97:ca:ed:b1:02:38:f9:
58:3c:24:84:bd:41:5e:d3:1f:0d:35:b8:7c:95:e4:7d:42:bf:
56:d3:c4:9a:0a:a1:85:b4:e7:8b:c3:5f:8d:af:93:17:4b:f1:
36:fc:33:6b:f2:42:99:cd:9e:56:ba:94:bf:a0:b6:7b:e8:6d:
76:bd:54:f5:3a:98:b1:1c:53:e8:e8:81:17:1a:ee:50:d7:24:
8e:21:b0:9f:8a:d4:06:17:6e:4c:c6:11:c4:4e:f1:36:e6:4a:
e9:37:ba:ae:64:99:26:a1:cb:81:3e:a9:92:e1:bd:9e:69:31:
fe:d7:4d:0e:d5:9d:11:e3:2a:68:58:66:64:0c:88:56:f9:ea:
c8:20:b9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:16:53 2026 by rpki-client