Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
File: QtT25CKV9UA7hFtSu6lnl2HYhNg.mft (raw, json)
Hash identifier: xEUwVv+MurIPV+r4vFSgHcZQFM0SDQrJ1IF6FiKr5qM=
Subject key identifier: 72:43:6E:35:67:2A:70:0B:C8:40:56:70:06:55:29:9F:60:9D:16:79
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 01A020C326EE36A0D6AA404907011674946D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
Manifest number: 0E0C
Signing time: Thu 20 Aug 2026 20:00:55 +0000
Manifest this update: Thu 20 Aug 2026 20:00:55 +0000
Manifest next update: Fri 21 Aug 2026 20:00:55 +0000
Files and hashes: 1: CZes9ucne-93ugwSp9Uj8QRuyUI.roa (hash: SmIb+DlDVr+RAK+c6/UM+iCQn51gq6QKyPu2qNkBKg8=)
2: QtT25CKV9UA7hFtSu6lnl2HYhNg.crl (hash: 4hI6hfZpcN2PFE/6JqmqZAnclHhgiczU1Rf3E5miPHY=)
3: mdvmy6IQAdVPllVNujJTmgLBeMk.roa (hash: 8bJ+OELFjDn0Z1urqhVSsIZSC0xHEOIJenSspzmy9DY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:c3:26:ee:36:a0:d6:aa:40:49:07:01:16:74:94:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Aug 20 20:00:55 2026 GMT
Not After : Aug 21 20:00:55 2026 GMT
Subject: CN=72436e35672a700bc84056700655299f609d1679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:96:9a:fc:7b:6d:48:3c:ac:75:53:08:72:
78:15:cf:cc:44:b7:50:a1:e5:b7:53:0e:2d:0c:3c:
33:f2:d6:20:65:31:83:f0:c9:58:dc:3c:45:66:2d:
bc:18:a9:2e:e1:d6:8a:52:f3:ab:52:8a:6a:1f:55:
fc:ed:f4:ae:ed:bc:8b:09:f9:aa:d8:b2:e0:b7:08:
62:53:8c:f0:c3:82:4e:51:49:6e:d1:d6:76:e5:c9:
eb:c3:ec:57:d9:7a:3b:69:14:b3:46:8f:34:1e:40:
62:2c:f3:94:7a:d1:d7:22:29:e1:d1:90:cf:a1:39:
a1:f9:24:bb:b6:ed:9c:01:ca:2f:ae:b6:aa:8b:fa:
7e:c6:27:46:5b:a0:17:8d:e4:5f:df:6c:a3:8a:10:
d9:70:0b:b4:14:6b:b9:b3:ba:df:4d:0b:24:e4:b2:
f8:76:c5:28:83:15:b4:42:c3:60:34:d1:ad:40:40:
29:72:30:12:99:0d:f4:d8:b6:99:83:13:6c:2d:68:
f1:d7:b0:a7:e7:b2:7e:00:22:6c:a1:80:c8:ce:df:
71:a0:33:a3:54:1a:e2:93:12:9f:52:cf:9d:0f:84:
b2:82:7c:13:72:df:76:33:ce:0c:7e:b8:3c:8e:d4:
00:c2:04:45:44:7f:00:81:6d:c6:cc:a0:dc:14:c8:
b4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:43:6E:35:67:2A:70:0B:C8:40:56:70:06:55:29:9F:60:9D:16:79
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c9:06:21:0a:77:eb:40:e2:b3:3e:46:56:1d:db:af:a5:00:
8b:07:98:4a:48:59:c7:f0:9f:9c:df:a7:e7:3d:56:d7:b8:10:
7e:fb:ef:ed:4b:15:b3:f1:e5:4f:2d:19:f8:63:1c:90:d8:16:
4c:38:65:6e:b0:bf:34:e7:48:3d:34:e0:cc:0b:01:9a:1e:9a:
fb:55:4b:99:1d:6e:72:1b:a9:49:4f:9c:93:89:10:0d:6c:0b:
f8:2f:c1:9c:f3:66:56:d5:35:1f:01:43:95:39:c9:6d:d9:b9:
7d:28:33:36:e3:4d:8e:66:dc:a5:79:27:f1:e5:fa:30:6f:2b:
ee:f5:f6:6b:00:79:7c:f2:f8:5f:b0:34:ee:52:06:fb:b5:ee:
32:0b:1c:1c:d9:c1:9f:ce:d5:cb:ef:20:a3:23:66:b3:b3:97:
b1:ee:26:77:d6:b2:af:e6:3c:a8:25:7e:b8:a4:75:e7:38:c1:
a3:d1:46:ce:ab:0e:a9:4c:fd:a1:16:fd:32:35:ea:6f:47:2f:
b8:31:7d:e8:dd:b6:1a:f4:cc:32:66:c5:e7:c7:9f:13:5c:38:
19:40:f8:13:e7:5c:a1:1c:6b:a1:43:60:b4:86:63:08:44:ff:
d6:23:e3:5b:3c:1e:15:2a:c8:a2:a8:89:55:b5:12:52:80:ce:
69:91:18:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:56:32 2026 by rpki-client