Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
File: QclkksAECK1U1zDA62KeOgtQ2A8.mft (raw, json)
Hash identifier: JuoR1tRh6ELNRXZ8JI4VdS0jxtfYuAMrTplX9NVeFUM=
Subject key identifier: 62:57:CF:65:47:32:3A:6C:D2:2A:BF:69:9E:D4:92:A4:AD:E5:D9:17
Authority key identifier: 41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
Certificate issuer: /CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Certificate serial: 01A0CCA33AC47FF60E64993BE6639D650CA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
Manifest number: 06F4
Signing time: Wed 23 Sep 2026 05:00:44 +0000
Manifest this update: Wed 23 Sep 2026 05:00:44 +0000
Manifest next update: Thu 24 Sep 2026 05:00:44 +0000
Files and hashes: 1: A06G0jKoVHkOoVsdJmlcMjUtuYg.roa (hash: /ucUBoWCtbDVXH8l3LkIjvANk7l2kl8IZAXTo8qEuVA=)
2: QclkksAECK1U1zDA62KeOgtQ2A8.crl (hash: GqNtp+TEpPjf2R/KmldC/bbXLYpeP8F06u77JL9c92Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:3a:c4:7f:f6:0e:64:99:3b:e6:63:9d:65:0c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c96492c00408ad54d730c0eb629e3a0b50d80f
Validity
Not Before: Sep 23 05:00:44 2026 GMT
Not After : Sep 24 05:00:44 2026 GMT
Subject: CN=6257cf6547323a6cd22abf699ed492a4ade5d917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:57:74:39:52:8a:91:4a:ee:64:15:d6:55:
8b:a7:fb:d0:a7:d8:a7:ae:c3:1f:28:3c:6d:bc:ed:
52:05:8a:04:fc:93:16:44:69:84:a9:d9:e4:05:20:
a1:83:33:d9:ef:4d:eb:24:29:f5:6b:a3:0f:c9:76:
72:cd:a3:c2:5f:2a:9c:d0:d6:30:5c:e9:48:0a:74:
0b:3b:88:7f:b8:4c:9e:14:2b:5d:96:80:a2:34:cf:
f9:ae:b9:31:eb:8b:39:66:c9:cb:11:f4:b2:71:f1:
18:e5:07:61:53:c0:7a:f1:b9:50:70:06:44:12:47:
fb:09:bc:0b:a4:3e:0e:c1:55:08:83:d7:c6:13:1f:
79:67:a3:79:84:6d:37:08:92:84:f0:bd:c9:60:be:
32:85:f1:5d:70:54:14:ba:4b:18:3c:df:0d:24:6b:
29:59:73:84:3b:8c:db:91:44:b6:13:a6:7c:5d:4a:
43:42:b0:63:39:3f:e7:f5:d3:d4:ca:b7:3a:f0:c8:
05:a9:17:91:9d:2c:92:26:24:4f:45:f5:5d:4b:64:
93:f8:06:d3:12:cc:cf:01:53:97:5e:ce:2b:90:9c:
d8:c8:24:ca:f1:c0:8c:74:14:71:9f:8b:cf:03:9c:
5c:2c:2e:f5:34:b3:4d:8e:2e:48:a5:68:2e:f0:41:
fa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:57:CF:65:47:32:3A:6C:D2:2A:BF:69:9E:D4:92:A4:AD:E5:D9:17
X509v3 Authority Key Identifier:
keyid:41:C9:64:92:C0:04:08:AD:54:D7:30:C0:EB:62:9E:3A:0B:50:D8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QclkksAECK1U1zDA62KeOgtQ2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/19d090-103b-43db-b074-a4e37c867b09/1/QclkksAECK1U1zDA62KeOgtQ2A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:10:6c:b8:c5:1e:dd:8f:af:3a:fd:1a:ba:62:58:3a:75:ec:
32:81:29:f0:64:98:95:aa:c6:de:b1:17:fb:d2:44:f5:c8:72:
85:f6:fb:f3:8a:04:24:fd:c7:38:b1:d7:1e:be:d5:a7:49:4e:
c6:be:3d:bd:60:61:34:c7:14:3b:bb:c1:0c:f8:69:4d:ba:52:
17:cb:53:f9:0f:3a:70:7d:f6:75:e5:4d:64:60:7b:e7:f8:1f:
11:f1:c5:85:98:67:e0:4f:73:4b:38:14:58:87:f5:de:f5:e4:
dd:d2:d2:3c:f3:17:aa:41:ba:3b:78:d5:b7:9f:26:42:69:30:
a6:6d:88:78:23:f0:04:64:c6:d4:78:f5:6f:94:87:f8:06:cc:
33:5b:dd:a2:fc:70:a9:5c:db:d9:dc:d6:02:8a:90:46:ab:a2:
d7:5b:d3:91:19:2f:ce:f0:c9:f4:3f:7d:f0:72:b3:f1:2f:7b:
7b:18:3e:66:78:14:17:b7:1c:0a:c2:c1:fe:a1:47:f4:b4:a8:
39:71:1b:fc:85:5e:c5:e0:ec:b4:53:3a:82:c8:9a:29:8b:63:
71:38:6e:d6:60:57:53:3f:14:93:db:d5:21:1e:59:64:07:7a:
41:45:de:02:16:09:0d:bc:68:0c:53:e4:9d:33:9a:31:ed:85:
a8:e6:20:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:28:33 2026 by rpki-client