Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
File: QtzU0b098prdQHW2jymvkHBHRDw.mft (raw, json)
Hash identifier: agu76+wL3lFu8OLh544NGFzu+TI4ZpsKlVvZZx0c8NA=
Subject key identifier: 1C:DD:1A:61:2B:19:8D:7C:1C:E8:36:2E:F4:DD:2B:1B:6B:7E:43:32
Authority key identifier: 42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
Certificate issuer: /CN=42dcd4d1bd3df29add4075b68f29af907047443c
Certificate serial: 01A0DD2965EFC8B7A02CA6B11C146ECF506C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
Manifest number: 07A0
Signing time: Sat 26 Sep 2026 10:01:12 +0000
Manifest this update: Sat 26 Sep 2026 10:01:12 +0000
Manifest next update: Sun 27 Sep 2026 10:01:12 +0000
Files and hashes: 1: QtzU0b098prdQHW2jymvkHBHRDw.crl (hash: Xu7OTzIQMldidHqrUK4FZ27I6pRE2p5811AMe27igO0=)
2: lqPB-_tpvjZaRMURMIYlaL-x7v4.roa (hash: PwPNHJ6WdN+tYHjQQVUmAufUKj9CcNQAjnCYOsVYIJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:65:ef:c8:b7:a0:2c:a6:b1:1c:14:6e:cf:50:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42dcd4d1bd3df29add4075b68f29af907047443c
Validity
Not Before: Sep 26 10:01:12 2026 GMT
Not After : Sep 27 10:01:12 2026 GMT
Subject: CN=1cdd1a612b198d7c1ce8362ef4dd2b1b6b7e4332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:79:2a:f2:fc:f5:c0:b7:cf:7a:22:6b:3c:ad:
6a:cf:f8:df:e4:85:9e:9c:14:6e:43:39:87:f0:00:
f1:06:e1:83:9e:72:cb:72:e1:c1:78:b3:98:47:83:
a7:10:35:11:ee:67:01:4b:98:96:ad:9a:5d:e6:88:
65:97:2f:8a:3e:79:70:b2:b1:49:89:fa:6f:8f:9e:
38:da:16:fd:fb:75:bf:04:35:10:c9:c5:ad:30:c5:
a3:7b:52:42:e4:75:ea:a8:1c:d5:1c:a6:fc:d8:eb:
de:21:14:85:be:36:73:ac:51:99:39:58:84:de:7f:
c9:3c:0d:ef:60:78:a2:19:e2:b2:d1:34:a9:93:1f:
11:14:ce:d8:8a:d1:2d:16:ba:ff:38:15:20:c0:ae:
39:b2:43:d5:84:ef:ec:a3:76:62:ba:22:c5:d0:c5:
f0:65:b7:c5:c3:8a:33:33:75:1b:95:46:5a:08:02:
a1:eb:82:35:44:c4:71:2c:37:57:16:4b:4a:9f:95:
ff:9e:2c:84:8d:98:d5:b9:ea:b2:31:4a:e1:43:cc:
fc:f7:29:74:0b:4d:48:4a:e0:b5:4e:29:20:71:85:
b2:99:29:34:29:e4:91:e0:f8:d4:c7:05:e9:9e:4e:
33:36:c5:b2:81:0a:41:b7:03:b3:60:f1:48:fd:13:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:1A:61:2B:19:8D:7C:1C:E8:36:2E:F4:DD:2B:1B:6B:7E:43:32
X509v3 Authority Key Identifier:
keyid:42:DC:D4:D1:BD:3D:F2:9A:DD:40:75:B6:8F:29:AF:90:70:47:44:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtzU0b098prdQHW2jymvkHBHRDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/297f1e-922b-45b4-893f-fb98fe3dbc14/1/QtzU0b098prdQHW2jymvkHBHRDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:70:bc:25:eb:74:19:f2:2a:49:39:54:87:8a:91:dc:53:44:
47:64:27:4e:14:c7:5e:1d:be:25:8d:e8:fe:5e:98:f9:9c:8c:
e0:0c:5a:2e:80:4e:e4:b2:3c:a9:c4:80:01:3b:97:64:73:e9:
ea:d0:a0:ec:44:b1:9e:59:ba:6d:a9:04:2d:f3:f2:69:4b:b6:
ca:23:a7:93:c9:02:99:81:9d:22:ba:68:06:fe:2a:dc:17:fe:
92:1d:e0:15:f2:87:07:45:31:d2:06:f0:2f:d5:9b:74:09:af:
71:d1:00:e4:6c:2c:15:d5:30:f6:f5:b2:6b:a4:8a:da:ac:5e:
e1:0c:95:2a:e9:0e:f0:49:ab:0c:6e:cd:67:99:d1:5c:d6:b3:
fb:14:97:d5:e3:bf:4d:5d:3f:6d:60:fb:85:e0:7b:a1:6c:3b:
44:78:04:a5:6a:ab:2e:4d:b1:e5:5f:cf:7e:64:b9:20:a5:8f:
5c:2f:1f:38:3d:6b:f7:fc:9e:fe:80:a3:35:d9:5c:5b:1d:a9:
35:c7:cf:d5:9c:c4:98:b9:3b:47:97:fb:22:f8:b8:62:1c:e4:
8e:cb:da:56:dc:67:6e:0d:4e:12:a5:60:0c:c5:82:64:d9:77:
28:c4:3e:7a:21:e2:b8:4c:b5:46:c7:27:90:a3:9e:c7:50:74:
b6:c7:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:39:59 2026 by rpki-client