Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
File: QtvPm46wNgQ7t_e40zhrziTV3W4.mft (raw, json)
Hash identifier: /dgry+UVm96O8xEuQfo8jMYv3lAWTSoLlgH7mKnAYVc=
Subject key identifier: 05:35:14:D1:9C:14:37:19:5D:AF:04:47:57:CB:57:E4:46:AC:F7:C2
Authority key identifier: 42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
Certificate issuer: /CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Certificate serial: 01A11B62D2AEAD8CCC5C5BEC1A45ED2E4366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
Manifest number: 0D74
Signing time: Thu 08 Oct 2026 12:00:23 +0000
Manifest this update: Thu 08 Oct 2026 12:00:23 +0000
Manifest next update: Fri 09 Oct 2026 12:00:23 +0000
Files and hashes: 1: QtvPm46wNgQ7t_e40zhrziTV3W4.crl (hash: N+dnzegbgGvq6t1fTdBmCsvfw9ZSX6VTZ1UJlNU8yxI=)
2: jS-v8sE_nNDS2wE29fkwjQ61v88.roa (hash: Flk+FfCfxIzDWzTQRWNpdyzzfWx1artWupYvhrPXQYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 12:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:62:d2:ae:ad:8c:cc:5c:5b:ec:1a:45:ed:2e:43:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dbcf9b8eb036043bb7f7b8d3386bce24d5dd6e
Validity
Not Before: Oct 8 12:00:23 2026 GMT
Not After : Oct 9 12:00:23 2026 GMT
Subject: CN=053514d19c1437195daf044757cb57e446acf7c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:92:59:a3:9f:36:8a:ce:06:56:4e:0e:1c:
a7:16:db:73:44:23:8d:f1:03:09:d4:27:95:94:e7:
ef:12:b2:55:28:a1:f2:c8:28:6c:2d:43:df:83:41:
a0:d3:f5:59:a1:2f:cf:1d:73:b5:8f:8b:e5:ef:fb:
55:41:e3:be:8c:82:f3:0d:8a:2a:94:5b:00:e8:05:
7d:b3:31:49:3d:3e:23:d1:9f:05:13:11:20:27:18:
6c:87:cb:61:dc:d9:c7:56:1d:1e:00:b0:1d:3e:0c:
a8:77:99:8d:7e:0c:c0:9c:1a:3b:5d:0c:65:2b:d0:
e7:51:c6:71:3e:38:ce:45:02:68:c1:70:f9:f5:77:
24:95:de:b0:73:4a:36:cc:54:cc:11:3b:78:f9:1b:
6f:0d:52:7a:e6:74:55:a0:26:ae:e5:7e:03:95:f1:
75:70:00:2a:52:32:57:61:d8:5a:8e:8e:b9:93:f5:
9c:88:bd:e7:1b:14:f4:d2:a1:36:28:6d:a4:23:90:
c5:46:c7:b5:3b:00:44:1f:ab:b0:52:23:0f:f6:46:
9a:3b:a2:f8:1a:48:17:9e:d8:81:5b:90:51:61:9a:
66:e2:c5:33:b9:ac:c2:91:c8:23:95:b9:4c:45:db:
74:1a:b8:97:51:ff:0f:69:e5:10:1c:87:99:da:79:
7a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:35:14:D1:9C:14:37:19:5D:AF:04:47:57:CB:57:E4:46:AC:F7:C2
X509v3 Authority Key Identifier:
keyid:42:DB:CF:9B:8E:B0:36:04:3B:B7:F7:B8:D3:38:6B:CE:24:D5:DD:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtvPm46wNgQ7t_e40zhrziTV3W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/80841a-88ae-4b0e-8e25-48ae70161e79/1/QtvPm46wNgQ7t_e40zhrziTV3W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:3a:01:d7:cd:4f:ca:8b:bd:c7:36:e2:6d:5c:89:63:e0:47:
70:3a:92:27:47:bc:83:71:08:b4:fc:ff:ff:b7:35:5d:08:0f:
4a:7f:23:1a:ef:c0:0f:61:fc:ae:92:b2:4a:ab:ca:77:23:4e:
8f:10:fa:a6:e2:5b:db:3f:f0:03:20:38:fa:60:64:82:ad:62:
96:0b:1e:53:3f:b0:b4:d3:c3:ad:26:ce:99:12:7d:22:0c:e0:
08:48:40:36:da:b8:84:2d:0a:78:8e:0c:40:cb:b2:93:62:b1:
c9:51:34:8a:89:b9:5f:60:d1:fe:e5:8a:1b:ad:8a:89:f1:05:
79:83:cb:07:f7:d8:87:06:12:12:0e:f7:27:c7:6c:fb:75:25:
65:bd:ef:40:1d:4d:89:23:88:7b:5a:bc:a8:2a:94:97:1a:1c:
4d:4a:f3:9d:d3:1e:b4:cc:38:15:e5:09:81:62:4f:6b:f4:b2:
dc:68:38:32:20:8e:7e:c4:64:c5:62:da:35:3a:a1:88:fc:8b:
c8:e5:5b:8f:4c:29:41:46:cf:0a:7d:f9:1f:cd:8c:6e:10:c0:
3b:97:8a:5a:06:a1:f1:ee:8a:a8:eb:cf:22:b3:f7:db:a4:d5:
80:f0:ea:b9:1f:4d:dd:55:19:66:4e:6f:62:90:b9:bf:72:8b:
e6:89:1d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:16:15 2026 by rpki-client