Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
File: Qd0c5O65L_U7YziS_UV7AR4RcfE.mft (raw, json)
Hash identifier: YlXnUiyfi6nwdnDTDI4KS0y3PtgbopY41dv/bXIAmF0=
Subject key identifier: 96:20:45:CC:9D:B0:9D:77:B5:3E:FD:2C:10:2C:88:0E:16:5A:2F:B4
Authority key identifier: 41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
Certificate issuer: /CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Certificate serial: 01A06EA76A8B1EC3C425AD2537B341CCECBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
Manifest number: 093F
Signing time: Fri 04 Sep 2026 23:01:00 +0000
Manifest this update: Fri 04 Sep 2026 23:01:00 +0000
Manifest next update: Sat 05 Sep 2026 23:01:00 +0000
Files and hashes: 1: 3OkMfbNK7oywxyEduLLpDjtw4pE.roa (hash: L7QwofR/zK4j6up4RavhL5dZloz6sdS+umIJ+YznSC4=)
2: BfXkb3Ul_TeZj4Afd4e_3oJ5s1c.roa (hash: 7KGanpBCj79/3lwELkYNBDfBwHWTdM1LjWtMw6Jbt2E=)
3: Qd0c5O65L_U7YziS_UV7AR4RcfE.crl (hash: hVZKSiY4yod6+Nt5pKxKk4pb8Q9+ycAmEIKiXbSNGcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a7:6a:8b:1e:c3:c4:25:ad:25:37:b3:41:cc:ec:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41dd1ce4eeb92ff53b633892fd457b011e1171f1
Validity
Not Before: Sep 4 23:01:00 2026 GMT
Not After : Sep 5 23:01:00 2026 GMT
Subject: CN=962045cc9db09d77b53efd2c102c880e165a2fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:de:6b:e8:74:48:aa:12:1b:7d:31:a1:ef:
28:4d:22:58:cc:58:cf:1e:2a:f0:9b:e3:9c:03:23:
bf:27:3b:7b:73:be:9a:75:a4:ad:a5:72:4c:28:b4:
14:f7:e1:92:81:29:e7:bb:af:ad:75:56:fe:50:7b:
87:65:bf:7f:66:53:e0:a2:f6:3a:89:2d:27:25:cf:
84:ba:ba:ae:5e:d0:ae:6a:7e:cc:e9:78:ad:9e:07:
55:cf:56:0e:ea:19:56:14:78:95:62:87:d6:bc:1a:
d4:8c:01:b7:a3:a8:5b:2b:7b:ce:51:32:6c:c8:d9:
ae:03:bb:b7:89:aa:a8:b0:bb:3f:7f:78:50:c3:87:
9c:5d:ee:dd:0f:12:16:89:a1:f4:07:84:23:ef:5a:
5c:62:b7:8f:46:63:d6:ea:e5:1d:85:1e:93:11:2e:
1d:cc:30:07:7d:34:22:39:62:cf:70:9f:4f:c2:76:
53:5e:30:57:3b:9a:6e:bc:ac:a8:c6:02:60:64:51:
95:09:5c:25:86:64:fd:2f:3a:04:01:e6:1b:8a:62:
12:51:22:a4:bb:06:d0:16:8f:1b:81:c4:49:45:41:
9c:64:1d:65:80:bc:e0:3e:9c:bc:39:04:ef:c7:ad:
5f:c4:48:26:51:da:89:9d:3e:8d:87:0d:f8:3a:f6:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:20:45:CC:9D:B0:9D:77:B5:3E:FD:2C:10:2C:88:0E:16:5A:2F:B4
X509v3 Authority Key Identifier:
keyid:41:DD:1C:E4:EE:B9:2F:F5:3B:63:38:92:FD:45:7B:01:1E:11:71:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qd0c5O65L_U7YziS_UV7AR4RcfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/1acc61-b95a-406e-80fc-88521ad99c7e/1/Qd0c5O65L_U7YziS_UV7AR4RcfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:dd:b3:ad:50:c2:9d:09:25:d7:69:8b:28:1a:c6:b5:ab:dd:
83:e4:fe:fe:71:50:e6:8c:f9:66:df:ad:99:8c:f2:65:11:f6:
09:2c:22:94:52:3a:c9:80:36:21:68:d9:b6:97:0a:dd:1c:d7:
a4:cd:e4:ab:25:4d:e7:4c:6d:5b:18:62:5e:50:5f:73:0b:7c:
b3:18:30:40:46:ee:4e:41:f9:eb:87:69:f4:20:d8:4f:e7:f4:
b4:4e:ac:7e:b3:a0:33:0c:3e:22:df:f3:0b:6c:ce:cb:66:8d:
50:a7:cc:b8:c1:2a:9a:44:50:33:b1:20:32:e6:e1:95:30:c3:
b1:fa:3a:c4:b2:cc:a7:f6:4b:74:cb:1e:95:7d:d8:9e:b9:17:
d7:3d:3c:4b:c5:22:8c:18:3b:37:a6:97:c8:21:ff:ea:aa:9e:
1b:db:77:49:7e:87:2a:49:5c:91:29:28:65:ce:0a:27:f4:b8:
a5:aa:56:01:9c:35:bc:28:78:e1:6c:0f:72:c4:72:a0:c7:a5:
cc:fa:01:2c:fc:89:c2:ed:df:d0:3c:0c:4c:ce:1b:f8:24:81:
95:e2:a7:d3:d1:ad:8c:cc:82:9e:55:3c:ab:98:64:9e:55:f4:
99:b0:74:3b:6d:08:d7:26:19:c3:7f:07:ca:cd:3f:c6:65:ef:
78:07:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:54:23 2026 by rpki-client