Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: DZFAOfaarGAcvquOZxrpT3SggPQdqJyauoKLM/kH3NU=
Subject key identifier: AE:35:24:49:90:1F:99:E7:0A:2C:98:EB:85:93:63:FE:63:B5:FB:64
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 01A08979C569216460925A562CEDFBCEF278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1A4F
Signing time: Thu 10 Sep 2026 04:00:53 +0000
Manifest this update: Thu 10 Sep 2026 04:00:53 +0000
Manifest next update: Fri 11 Sep 2026 04:00:53 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: 0erO+mTwkxJMk+qeODJggZAGdmRt3mj+vGabC0sWUKY=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:c5:69:21:64:60:92:5a:56:2c:ed:fb:ce:f2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Sep 10 04:00:53 2026 GMT
Not After : Sep 11 04:00:53 2026 GMT
Subject: CN=ae352449901f99e70a2c98eb859363fe63b5fb64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ec:89:5c:eb:ee:ee:a7:31:c1:75:dc:a5:72:
cd:dd:29:a5:88:a9:45:ae:04:d1:b7:2b:12:9b:b6:
0e:85:54:d9:48:fe:44:ee:16:1a:12:fb:1f:e4:fb:
51:55:3c:74:d0:76:3e:0f:01:1f:f3:a3:9b:02:1d:
8e:d7:34:e5:cb:be:f7:6f:00:4d:9f:18:db:06:1b:
04:ca:fb:71:78:04:b1:53:17:d3:d2:3e:0b:65:e7:
09:bb:25:c2:16:0a:f4:3b:6c:e5:fd:72:6f:34:b5:
c7:fb:90:3b:05:a8:fc:2e:83:b6:b6:cd:68:0a:2d:
38:07:fc:df:2b:a2:d1:51:8a:b7:6f:f3:6c:fa:a2:
fc:4b:9e:0f:a0:05:ed:9e:e5:ba:cd:8b:86:94:65:
03:c1:ec:8e:a4:8b:14:1e:b3:2f:b7:3b:b2:21:a5:
2a:f8:c7:f0:03:24:4d:0b:1a:56:44:2a:72:38:e8:
de:ca:ba:cc:84:d1:b2:30:2c:8d:db:78:f0:3f:1a:
ea:a9:cb:9d:87:e7:91:7d:66:da:9b:f0:ef:10:73:
15:74:d9:44:e0:80:f8:d1:cf:81:3a:0b:0d:94:da:
b7:c0:6b:d5:64:4b:74:06:20:26:ad:3c:86:09:4c:
16:8a:20:b6:e5:ff:ae:00:5b:ad:fc:8e:d3:12:02:
6d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:35:24:49:90:1F:99:E7:0A:2C:98:EB:85:93:63:FE:63:B5:FB:64
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a1:8f:42:db:3a:a7:de:5c:05:5a:74:c4:c7:28:fc:e5:62:
c2:99:fa:33:92:12:bf:69:ba:eb:2c:e8:0a:64:c8:94:59:9c:
03:73:9b:0d:1f:62:e3:cf:a9:12:75:48:8f:fc:22:72:1e:74:
c5:e7:4d:7c:e0:db:55:aa:e9:f2:21:4c:14:f7:5d:8e:cd:38:
4e:76:d3:dd:bc:aa:0a:a0:f4:5a:67:1f:2b:38:01:ca:08:3d:
a3:de:8c:37:9c:10:f7:bc:45:71:54:3a:39:96:94:e6:71:40:
0e:6b:5e:c2:ab:f5:cc:63:96:42:86:35:52:2e:3e:a3:33:81:
93:64:49:66:01:8b:0b:30:07:bf:dc:a9:63:f9:8e:24:17:ad:
70:06:cb:90:54:1f:4e:c7:69:af:e9:a7:07:7e:40:25:53:52:
c1:88:3c:c9:29:00:98:c3:d1:ff:af:b9:43:2f:29:27:f4:4a:
96:90:10:c9:f6:91:0c:0d:14:ad:4a:f6:27:ae:73:a8:26:ba:
66:16:57:e0:6a:7f:06:4e:fa:ec:eb:14:3f:93:a8:41:a1:9e:
a3:e3:2f:90:e6:6f:14:0c:af:0d:93:95:1a:31:ba:17:cf:ee:
23:09:78:0b:4d:ba:82:d6:23:d8:ba:42:f0:f3:f0:f9:1e:1e:
dd:8a:91:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:01:20 2026 by rpki-client