Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
File: QHShwDg61esPBYjkwzlLo0AQpiE.mft (raw, json)
Hash identifier: ZrqU1nd7NcpQ6BDoaeLWh9X0oCbP9ozCPUWbF1IW5dg=
Subject key identifier: FC:42:55:91:C9:A2:6C:36:BE:F7:3C:41:7B:F0:CD:BF:AB:03:B8:05
Authority key identifier: 40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
Certificate issuer: /CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Certificate serial: 01A06E703B6A3A914376339861187033134C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 22:00:43 +0000
Manifest this update: Fri 04 Sep 2026 22:00:43 +0000
Manifest next update: Sat 05 Sep 2026 22:00:43 +0000
Files and hashes: 1: QHShwDg61esPBYjkwzlLo0AQpiE.crl (hash: a4b+VbNjaCC996BKb8jjVRmlXTNxV03lYQfO3VXtnVY=)
2: UuOnxKKINXGrGno4BgqG1wRiVJE.roa (hash: qOk1balDAYueDzPokwNkuPz8mml9IxTXWfQ4Usp7bxE=)
3: lWaDtpARbUJ2WwQgVuDOZ2ytV1Q.roa (hash: jLR4Kee9nPopi72xWjqK7/G5TtGJxgI8fqStb9xXKYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:3b:6a:3a:91:43:76:33:98:61:18:70:33:13:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4074a1c0383ad5eb0f0588e4c3394ba34010a621
Validity
Not Before: Sep 4 22:00:43 2026 GMT
Not After : Sep 5 22:00:43 2026 GMT
Subject: CN=fc425591c9a26c36bef73c417bf0cdbfab03b805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:2f:b5:bb:07:ef:a9:ba:bd:9a:c3:12:c7:81:
5a:a4:fb:b8:4c:9a:de:36:e2:4e:b4:ae:d2:8f:37:
37:bf:3e:4e:69:00:ec:be:a5:d6:32:96:81:57:fe:
59:97:36:44:ba:a0:5d:46:b8:48:ec:eb:15:cd:10:
4e:bd:39:b9:f4:7d:52:96:23:c3:f4:dd:a4:85:c0:
0e:d8:5e:00:fd:f8:48:51:78:bf:44:88:16:03:d2:
dd:08:4d:b4:68:06:3c:1d:7c:77:5c:56:9f:e3:12:
64:e1:08:ce:0d:f2:fb:27:47:51:f8:31:aa:d7:8f:
cb:a1:76:04:41:44:d7:cf:c5:d7:53:33:41:9d:20:
57:53:92:25:d6:8a:3a:e1:c0:9e:c5:13:e8:b1:54:
72:98:09:b9:e5:10:2f:63:c8:24:b2:5f:74:d7:a2:
79:de:71:dc:64:2c:23:3d:be:1e:ea:8c:a7:83:c8:
a3:62:5d:5e:8e:5a:56:d6:ab:66:f7:8b:1a:ab:45:
7e:5e:67:13:68:ec:a1:ed:83:44:51:10:ad:06:b8:
b5:a5:83:0f:7a:d4:74:ce:77:f8:88:a2:a1:d2:d9:
ac:c9:e5:5b:06:4b:22:0d:91:5c:eb:af:fa:f7:43:
cd:08:ad:78:64:61:e6:9d:1e:e4:ad:5e:15:91:51:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:42:55:91:C9:A2:6C:36:BE:F7:3C:41:7B:F0:CD:BF:AB:03:B8:05
X509v3 Authority Key Identifier:
keyid:40:74:A1:C0:38:3A:D5:EB:0F:05:88:E4:C3:39:4B:A3:40:10:A6:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHShwDg61esPBYjkwzlLo0AQpiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/304aaa-4ce5-4065-b073-26c3365153af/1/QHShwDg61esPBYjkwzlLo0AQpiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ff:5c:4a:05:65:2a:a6:ea:14:a3:76:38:e5:f4:63:79:e7:
aa:7a:67:b7:d0:c4:02:ab:01:9b:bc:86:e4:19:ab:81:40:b7:
65:cb:53:00:55:74:43:01:d3:ab:72:08:f4:6a:38:a1:c0:69:
f2:3a:c6:6a:cb:a0:98:07:db:e8:91:cb:a4:c2:37:ab:4e:d4:
e1:dd:cc:f2:36:37:35:15:1b:6a:14:2a:c3:cf:96:c2:68:9a:
88:05:5d:89:cb:e6:7e:23:a2:3e:ea:77:d9:a4:74:32:3b:df:
7a:20:02:52:4a:82:63:58:fc:5b:70:a8:7b:ea:be:4f:1c:f9:
fd:37:77:68:20:79:af:ea:6d:e7:01:1a:2e:45:04:8a:da:39:
4f:59:48:6e:6e:33:8c:32:e2:79:47:1e:6f:51:f4:a8:11:d3:
58:80:1f:c9:87:f6:b3:ee:9a:a9:f6:e7:0f:37:77:3c:1c:ec:
3d:09:86:66:46:ef:c5:14:3b:39:39:f9:1a:7b:5f:48:72:58:
7d:73:1f:7a:43:f5:8b:8c:17:52:af:e3:df:86:57:88:0f:e8:
07:bc:81:cf:0d:f0:5c:8e:97:bc:96:be:5f:cf:af:a9:9b:9f:
05:99:b7:ac:78:80:4b:a7:06:15:89:41:2f:e9:dc:41:77:db:
25:8c:bd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:06:46 2026 by rpki-client