Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
File: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft (raw, json)
Hash identifier: sSCXy2i6QxomdGgEY7eJyW40zlvcoY2tpYfQyzuE8Xo=
Subject key identifier: 4C:90:AB:8D:8A:AF:48:D8:1F:B0:63:78:3A:AA:96:14:D1:20:98:04
Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013
Certificate serial: 01A0D76029CA713933826F63B83EE251EFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 07:03:18 +0000
Manifest this update: Fri 25 Sep 2026 07:03:18 +0000
Manifest next update: Sat 26 Sep 2026 07:03:18 +0000
Files and hashes: 1: Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl (hash: YoLsEqh/t3xaMy9jar6lRSEMIcGOPpdof7mx/om7MZY=)
2: gWRBDddMyWqh-LIfhr099iJ3yoM.roa (hash: miOqJ9LKG8Eyc/AIL8Ov13TsNXdMaSWxli/p6/FIhTs=)
3: nkIfu7bImABod5-85N1FwAXx42g.roa (hash: 9hvhnUz5j9QQtDK6csAcjLrvvxwu/x+GSH7qTRDcSxc=)
4: uHGjwPoMHu2IEBccrs2elf1N18A.roa (hash: g4Yg85Lk+WZoS7yWIAuAp+ehz/I0N5gf+zz3O65XQ14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 07:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:60:29:ca:71:39:33:82:6f:63:b8:3e:e2:51:ef:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013
Validity
Not Before: Sep 25 07:03:18 2026 GMT
Not After : Sep 26 07:03:18 2026 GMT
Subject: CN=4c90ab8d8aaf48d81fb063783aaa9614d1209804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:8b:d4:33:0d:2f:ed:b5:d2:97:6c:8d:43:
14:5d:c2:86:28:2c:df:4b:0e:39:22:44:dd:76:da:
9f:e2:d1:f6:2b:5d:b6:16:10:a5:e0:48:c2:5f:05:
12:f5:e1:d3:58:4a:ba:61:f0:0a:45:6a:14:0c:2c:
e7:55:2f:09:32:83:e5:5e:7d:85:73:01:c7:c8:6d:
b4:46:65:8a:44:27:18:35:c8:2a:87:9b:11:3a:c6:
a0:29:24:c7:4f:cf:54:7e:63:a9:26:77:29:1f:77:
f8:ff:40:fb:95:e9:20:17:b5:12:89:f3:82:d1:a5:
f3:42:d8:a7:88:26:9f:bd:9c:4e:9e:bf:6b:5a:72:
3f:dc:27:74:36:58:35:a9:ec:fb:5f:15:dc:36:4c:
84:56:79:b1:6a:78:9e:84:e4:db:5c:2c:e7:c5:47:
84:7a:9e:6d:33:ce:52:ed:d4:ac:85:fa:bf:18:90:
e2:97:d5:ed:92:e5:b8:90:4c:8d:6a:c6:9f:27:7a:
b2:8e:d4:a9:41:0e:48:72:cf:ed:a9:38:c1:92:e5:
c0:d9:be:a8:e9:f0:d2:51:0f:b7:cc:4b:3f:dd:13:
2d:74:d8:28:1e:ef:25:5b:8c:5e:f1:e2:de:35:92:
70:26:0a:36:34:8e:e4:56:e8:75:e4:ca:24:60:58:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:90:AB:8D:8A:AF:48:D8:1F:B0:63:78:3A:AA:96:14:D1:20:98:04
X509v3 Authority Key Identifier:
keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:42:fd:c7:1f:f2:69:fd:5b:fc:03:d2:8d:d4:1f:22:9a:a9:
ae:78:cb:fa:aa:d6:69:5b:47:ea:bc:58:00:63:db:e9:6f:65:
3e:4e:07:af:1e:44:71:d3:36:90:1b:3e:e1:ad:ac:8b:1a:e3:
54:a9:00:ca:e3:16:44:79:b6:bd:e3:d8:20:9a:bb:66:15:bf:
57:be:a6:44:21:43:35:be:2f:ff:80:c6:20:1b:c8:ac:a8:6a:
66:5c:fa:8f:d9:12:4f:87:a3:0d:e6:0f:09:54:22:47:e6:e6:
23:3b:02:dc:04:0d:12:1e:fd:9f:e8:10:9f:41:df:d1:1a:18:
4a:bf:b2:46:f2:5e:d6:58:43:10:44:fa:d2:86:e2:93:ab:ad:
08:c5:57:6e:0f:f6:26:dc:5d:32:ce:5d:b7:2c:60:3e:7a:17:
bd:27:e4:ac:c3:16:b0:3b:ce:14:b6:d5:84:de:ac:cc:c4:a7:
ef:18:c5:9f:d4:8a:0c:ec:f0:66:a9:3c:11:fd:ed:c0:ef:4b:
2c:e8:77:32:14:df:65:ba:46:29:ef:0e:da:e9:24:e2:9c:f4:
2c:55:60:81:24:12:66:2c:3f:bc:bf:0e:3d:01:97:3f:6d:98:
ac:a7:c4:34:2c:19:17:66:93:a6:94:6a:fe:2d:44:d9:11:d3:
44:68:86:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:40:07 2026 by rpki-client