Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: XTev4Zk29Z1pXr7469kN0mm4ewCRgKMscX4hhiy4o0U=
Subject key identifier: 83:4D:70:13:64:19:A4:D5:CF:C4:4F:1B:D4:46:04:EE:3E:9D:C5:75
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 01A0FA8FBD3B0711EDB28B2A1476DF5AAEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 1A84
Signing time: Fri 02 Oct 2026 03:01:59 +0000
Manifest this update: Fri 02 Oct 2026 03:01:59 +0000
Manifest next update: Sat 03 Oct 2026 03:01:59 +0000
Files and hashes: 1: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: t3w4CheykQGcbKkKND3GmtgEYY0Y3WG5JJ9Chuwl8Xk=)
2: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (hash: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM=)
3: zXqwVcwlXpQqAoueTVMdXtH7SG0.roa (hash: jcregEqkWYaC2zgOmhpk2TEJDFYrMRRaV054ziFvW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 03:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:8f:bd:3b:07:11:ed:b2:8b:2a:14:76:df:5a:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Oct 2 03:01:59 2026 GMT
Not After : Oct 3 03:01:59 2026 GMT
Subject: CN=834d70136419a4d5cfc44f1bd44604ee3e9dc575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:98:d8:8e:65:11:f6:4c:8a:8b:29:6c:16:
11:63:cd:07:cc:36:1a:07:6f:fe:23:ca:57:a7:73:
6b:23:ad:1a:71:8a:be:88:d3:46:17:41:88:e5:b5:
45:25:a4:5c:dd:ca:9d:bb:d3:11:bf:83:8d:8f:31:
64:ae:b0:d6:b6:5e:17:72:42:f6:d7:f3:73:5d:c0:
61:05:24:9f:8b:df:0f:8e:97:52:3a:32:5a:4c:4e:
19:40:ea:4f:b0:1e:87:db:14:87:60:1b:a4:24:0c:
5e:3f:ef:1a:6b:4e:21:c0:ac:be:fc:da:d7:76:93:
94:68:f1:64:f5:ac:58:88:13:f5:cb:4e:ea:45:c6:
60:27:2f:07:4a:d7:48:46:d0:b2:03:79:19:9d:f6:
23:1f:d3:3d:da:4a:c9:1a:06:b6:2f:2d:8d:92:20:
00:a4:c9:08:67:58:1f:a2:45:ff:7a:4d:22:01:04:
4d:c6:f7:80:3c:7d:d7:20:5c:ff:6b:c6:04:5a:8b:
a5:12:84:b4:5a:3d:71:90:47:c0:ee:f4:92:e0:3b:
eb:df:a3:94:30:16:a4:35:ab:28:2b:0d:89:18:a7:
fa:d1:60:57:7f:1a:04:78:14:c0:14:26:35:f4:50:
8e:a8:c5:c6:18:f8:e5:9f:7c:37:31:5b:67:93:04:
15:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4D:70:13:64:19:A4:D5:CF:C4:4F:1B:D4:46:04:EE:3E:9D:C5:75
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6d:2f:95:3a:50:4d:05:dc:b5:07:6d:c5:52:f6:66:7d:fd:
21:45:aa:e7:da:c6:69:f4:0d:34:94:08:8d:15:10:b9:b2:ff:
06:4e:d2:7e:36:07:87:cb:e9:22:5f:d4:63:99:05:1c:c7:90:
f1:f4:11:4a:c9:55:e9:58:08:e1:29:9b:0f:f3:f8:82:49:6d:
92:33:e6:57:d2:3e:6f:d7:51:7c:9c:8a:7d:5a:f8:c6:a7:28:
83:0e:7a:0c:ee:65:c7:e3:13:b9:26:87:ac:ff:c5:12:3a:74:
d0:7c:b9:6a:a6:11:b8:7f:59:4d:df:5e:71:07:e3:ff:f6:a5:
d0:f0:3e:17:e1:b2:03:fd:b4:a9:e9:d7:a8:11:41:c2:45:94:
64:89:da:d6:aa:fb:43:a5:c7:94:84:43:53:69:70:ae:f3:0b:
3b:f2:98:7d:53:af:63:d9:60:78:8b:1a:fe:c5:5f:e3:4b:80:
00:e3:36:eb:87:8c:83:5d:68:23:ba:9b:90:ce:96:2e:86:bd:
af:fe:58:26:d7:13:dc:ac:fc:e6:f0:29:63:15:1c:ad:47:d4:
23:20:17:9d:f4:29:9f:6f:f4:72:71:1b:ca:e3:17:64:80:7d:
0a:a6:42:09:a0:eb:a5:9d:49:85:aa:17:91:24:f2:72:c2:c5:
e6:f3:49:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 15:41:48 2026 by rpki-client