Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: IjWl9dXLDLy57Nc/UQWWk+xlP/UkaUPvM4crSS+GjIg=
Subject key identifier: 17:C9:D5:F1:45:19:86:3B:13:4D:AD:2A:3C:3D:52:60:48:03:6C:9C
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 01A186760B4BD1891FB63BC2EE079E3E6E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1AD2
Signing time: Thu 29 Oct 2026 07:00:45 +0000
Manifest this update: Thu 29 Oct 2026 07:00:45 +0000
Manifest next update: Fri 30 Oct 2026 07:00:45 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: A+UxjshtDhwHsA5QcnX7C5BZIknazEcJ4sC0Oi0lcmQ=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:76:0b:4b:d1:89:1f:b6:3b:c2:ee:07:9e:3e:6e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Oct 29 07:00:45 2026 GMT
Not After : Oct 30 07:00:45 2026 GMT
Subject: CN=17c9d5f14519863b134dad2a3c3d526048036c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:14:9f:70:fd:f4:c2:d5:49:33:c9:83:31:2e:
68:1b:ee:6f:d4:16:37:dc:53:cd:60:68:36:68:49:
26:d5:fd:f2:73:60:85:d6:18:70:39:9f:33:d3:24:
40:1b:38:61:a2:f1:e6:d8:be:11:8e:81:21:f8:fb:
79:e5:4f:7f:72:49:e8:48:10:6e:4f:28:fb:f3:39:
5a:2b:e1:69:fd:22:42:f8:83:49:ef:11:36:f5:37:
74:74:7c:35:8c:89:35:df:08:a9:60:12:0e:33:22:
1d:d2:13:36:9d:86:3d:41:bf:96:0c:32:f5:69:98:
63:4b:1f:58:21:5e:da:56:1c:68:ef:92:a6:f0:fe:
6f:88:98:46:dd:94:c1:f9:05:ce:45:c4:88:cd:23:
2a:bb:d9:58:62:a8:d2:20:cf:ca:93:2c:f7:3f:ee:
6d:95:47:b6:8e:49:70:80:e3:2d:bd:06:52:f3:81:
e8:15:4b:de:78:32:c6:5a:cd:a8:40:f2:f5:c6:37:
a8:f1:a0:25:1e:e0:3d:3f:32:8e:c1:ed:21:cf:3c:
d6:52:4e:b2:d7:28:19:a7:56:2e:f8:de:7d:c9:3b:
90:e4:63:c4:59:d0:19:cc:24:d0:56:1e:ff:d8:45:
df:ab:4d:0c:82:d8:75:f8:f9:2d:c5:f2:f0:d0:86:
0b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C9:D5:F1:45:19:86:3B:13:4D:AD:2A:3C:3D:52:60:48:03:6C:9C
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e0:af:65:1e:67:93:7e:3d:7a:40:76:17:be:17:40:be:23:
4b:e3:c7:d0:5c:2c:9c:e1:3f:bc:7b:41:93:53:4f:0a:e9:00:
04:88:1d:41:d7:4b:ca:5c:97:d2:9f:b2:ed:e1:be:59:4c:83:
bf:35:b8:07:6f:f3:f6:50:1f:20:f0:6c:0c:e3:fe:f5:95:c0:
e0:ba:45:35:ec:ae:cd:d1:35:a6:85:7b:f0:da:ea:04:fb:fd:
5d:74:e1:86:25:b8:91:e4:ce:db:23:15:80:39:9b:07:09:a5:
ed:aa:b1:f8:6f:e4:57:b7:6c:82:b3:dd:b2:5d:9a:8f:14:78:
fb:42:4c:85:c5:a3:30:b1:20:6c:58:1f:93:8c:b7:7f:d7:13:
ad:a1:d9:d4:e4:0b:09:57:ac:e0:3d:bb:a2:b3:77:c8:d1:de:
8a:c0:f7:01:af:52:88:6f:75:bf:2a:e5:9d:63:bb:c5:b2:df:
77:0f:a1:98:8b:83:53:dd:6f:68:6b:9c:ca:86:28:47:b5:33:
f9:a2:b7:50:cd:b8:d0:bd:0c:88:40:cb:47:0a:9b:4b:9d:49:
15:c5:f0:86:e1:31:f9:5a:cb:88:40:3c:c6:12:8d:cd:4c:43:
33:3a:ef:c9:ed:77:09:c0:bb:de:55:58:fa:7b:49:a5:93:a1:
08:fc:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 09:38:51 2026 by rpki-client