Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: zg5BKh0i3v4yerPyA1w3/Yam5H4BBm1OCmUhpnxy3n8=
Subject key identifier: B9:3F:88:D2:27:B4:2E:8F:E7:9F:0D:A7:93:D1:03:80:9B:B2:D5:66
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 01A12B4482D8EBB420DB73E7DE2CC70D2320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0E96
Signing time: Sun 11 Oct 2026 14:01:12 +0000
Manifest this update: Sun 11 Oct 2026 14:01:12 +0000
Manifest next update: Mon 12 Oct 2026 14:01:12 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: inOpNNFfyzn/xb2LY4A+JMetcjEvxBnbqpgFffOoTqA=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:82:d8:eb:b4:20:db:73:e7:de:2c:c7:0d:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Oct 11 14:01:12 2026 GMT
Not After : Oct 12 14:01:12 2026 GMT
Subject: CN=b93f88d227b42e8fe79f0da793d103809bb2d566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:14:39:e5:f4:14:c9:44:21:77:22:e4:cd:
b6:e1:a6:d2:c4:d0:8a:57:d2:55:04:ef:bb:8a:38:
39:ba:2c:0f:a1:7f:71:9b:65:43:87:54:d9:16:c1:
2a:ec:77:f8:54:2a:0e:90:42:18:10:1d:e3:19:a1:
cd:fc:74:b3:7a:bf:06:5d:eb:ae:dd:c1:8e:0a:5b:
41:e6:89:4d:ef:d5:79:a6:02:81:45:c9:d4:9e:62:
82:22:5b:e9:3d:16:bd:7b:08:70:3a:7a:15:f9:b1:
b1:2a:d2:59:93:1e:43:03:73:c2:ce:57:1d:47:4d:
4f:a7:13:d7:b4:42:2f:ef:2b:f3:f0:a9:e6:e9:1d:
09:d2:87:1d:28:bc:39:90:db:5a:5f:34:f0:11:f3:
2a:b0:66:4d:03:d0:08:fa:95:98:30:3d:be:c4:ce:
af:54:5d:92:1a:81:b5:78:c0:fe:8f:14:87:f3:6f:
cc:21:6c:ac:ac:60:ae:0d:b6:d8:a5:bc:08:51:5b:
fa:4b:24:cf:54:6d:a1:f2:02:dc:af:d5:31:9f:84:
80:7d:e2:a8:d8:e0:3e:7c:c6:75:e8:6b:bd:5f:49:
f7:26:fc:b5:20:01:48:86:2d:d8:f3:1c:14:a5:fa:
28:de:75:4e:28:88:e6:ac:21:90:07:f3:5c:09:6e:
cb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3F:88:D2:27:B4:2E:8F:E7:9F:0D:A7:93:D1:03:80:9B:B2:D5:66
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:13:e3:4c:f6:77:78:44:41:aa:d7:d4:8f:65:73:72:3a:71:
19:20:ef:6f:8b:b1:7c:53:e9:4c:af:7c:79:7e:4c:f4:01:f0:
88:4a:2b:30:db:53:9e:fb:b5:90:20:87:74:aa:c2:2b:95:42:
7c:4d:51:13:bb:3b:84:66:9b:61:e4:bf:1c:d9:21:d1:18:9e:
ec:ef:b5:e4:ec:c2:83:06:7b:d9:14:e3:13:c4:fc:14:c9:c0:
82:3d:70:1f:11:54:0f:35:23:75:21:1f:4b:78:7f:9c:c6:3c:
70:2c:0c:68:8d:43:9b:15:c1:87:cc:14:e2:7f:f3:fa:91:d6:
5b:10:d6:36:5c:7e:c0:87:a1:e6:be:79:a5:2b:bd:4c:6b:03:
06:76:0b:02:f2:dc:33:61:f2:58:09:e7:80:d3:3c:ab:7d:e8:
b8:01:53:9a:61:7f:a3:3d:a1:99:23:1f:5a:97:7c:a2:43:20:
3a:b3:b1:aa:c9:d8:98:82:95:47:93:67:91:fb:a8:3b:d4:9e:
02:44:72:9b:7d:07:49:e3:60:70:64:a2:39:5c:f7:3e:eb:d5:
f3:ac:33:72:b2:be:d7:1f:41:ea:95:af:77:91:85:8c:3f:28:
2f:e1:e8:d1:cd:d1:5f:6e:b9:b2:36:11:07:e5:c4:1a:c8:40:
62:63:6c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:55:45 2026 by rpki-client