Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
File: QhFndK-17RrJkmsLwtV_i4BYs-c.mft (raw, json)
Hash identifier: 1KBSc69WM+mLSNAEikJAen8Fnlevd3+vU7gM0d44z+I=
Subject key identifier: 57:06:D3:BE:E6:B7:2A:A9:6B:7D:C0:67:08:AC:CC:97:2A:7D:7F:C8
Authority key identifier: 42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
Certificate issuer: /CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Certificate serial: 01A08AFAF89BC2E6A090D40DE8130DBFAD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
Manifest number: 1697
Signing time: Thu 10 Sep 2026 11:01:38 +0000
Manifest this update: Thu 10 Sep 2026 11:01:38 +0000
Manifest next update: Fri 11 Sep 2026 11:01:38 +0000
Files and hashes: 1: QhFndK-17RrJkmsLwtV_i4BYs-c.crl (hash: r3SwhsqFFaKX5M76xrcVekmfzuBbf6f+bZPfNuy0HkQ=)
2: wCCdFB7UjGfQwzVORHDutY8coC4.roa (hash: RxA0lc40X0LY4oOXiXSm0idHQPBonp6ohq0AD8dBwtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:f8:9b:c2:e6:a0:90:d4:0d:e8:13:0d:bf:ad:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42116774afb5ed1ac9926b0bc2d57f8b8058b3e7
Validity
Not Before: Sep 10 11:01:38 2026 GMT
Not After : Sep 11 11:01:38 2026 GMT
Subject: CN=5706d3bee6b72aa96b7dc06708accc972a7d7fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:4d:1f:5d:e0:7d:37:d9:47:bc:ac:c9:5c:
a2:35:6d:a3:50:97:13:27:94:ae:b4:82:bc:f3:87:
24:c7:87:85:09:61:30:f6:91:40:ba:8b:aa:64:44:
a2:da:a9:ea:a5:d3:6e:99:ad:a3:41:22:6d:c2:ba:
be:f3:c6:cc:48:c2:68:b7:5e:89:0b:0a:24:c9:8b:
ce:e4:65:9d:d2:57:54:43:be:01:f8:bb:7b:f9:57:
04:e8:a8:e7:4e:ae:40:e4:6f:65:d4:58:4e:0c:2f:
85:6c:8d:36:70:c2:cc:e8:9a:63:d5:7d:61:0b:25:
29:e4:88:1c:5c:7d:cb:ac:94:12:b1:2d:2f:98:53:
d2:9a:b7:b7:76:d4:3c:29:bd:21:00:34:56:d3:2c:
e6:92:00:5d:5f:c3:83:33:55:db:a3:28:f0:6f:7d:
11:eb:75:e5:99:5c:ca:e3:6a:3b:47:72:28:e0:e3:
7e:d8:12:5c:34:b6:6e:ff:1a:7f:d8:bf:88:70:2c:
00:6e:71:7b:71:6f:07:37:4e:58:cc:f3:23:ff:06:
f2:4c:55:bd:ef:ce:05:46:92:08:f7:23:bb:95:28:
a9:41:65:6e:41:eb:4a:4a:92:0c:bb:7f:6f:a5:04:
d4:30:ff:bf:04:c0:8a:8e:99:fb:3a:1f:17:7c:dc:
72:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:06:D3:BE:E6:B7:2A:A9:6B:7D:C0:67:08:AC:CC:97:2A:7D:7F:C8
X509v3 Authority Key Identifier:
keyid:42:11:67:74:AF:B5:ED:1A:C9:92:6B:0B:C2:D5:7F:8B:80:58:B3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhFndK-17RrJkmsLwtV_i4BYs-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/174627-e52f-4fa6-b331-e97cd3ad4da3/1/QhFndK-17RrJkmsLwtV_i4BYs-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:97:43:25:89:6c:98:62:b2:7d:2a:40:28:a1:ac:61:e6:eb:
24:47:5a:bf:1b:8b:98:c7:1a:1b:c1:2d:3e:4b:81:8e:b9:cc:
9d:31:37:96:cf:21:3a:85:db:4d:8f:2f:4c:dd:fa:85:2b:1a:
1d:a0:ec:ce:6b:dd:d7:db:f3:0f:34:c1:64:9b:3c:60:2f:8a:
2a:15:f4:f1:fa:ce:dc:b8:90:cc:29:1e:e8:9d:f7:6c:6c:2a:
81:ff:81:c1:b3:43:ba:c3:90:16:b6:f7:ac:61:de:a6:c3:fa:
72:fb:e4:e4:54:21:04:72:63:4d:f6:a8:80:31:b2:ea:71:3b:
17:48:bf:76:c0:bd:e8:eb:a5:82:dc:46:d5:fc:f1:42:af:e0:
60:93:8f:71:46:4a:65:a5:20:6e:47:7b:1e:5e:2d:8c:66:73:
1e:e2:23:33:29:25:b2:b1:24:7b:44:ce:ef:ef:00:45:5b:79:
dd:9a:2f:f5:ac:a7:56:e3:04:a2:39:2d:1c:85:7c:eb:44:58:
2c:ed:95:b9:55:95:6f:9e:13:b9:87:19:bd:b5:db:d9:fb:4d:
56:1e:be:92:4d:16:29:61:2e:39:60:45:00:5c:ef:26:40:8d:
a0:67:aa:56:b2:2d:c7:26:d4:89:e6:38:8c:63:18:5b:1e:51:
6d:5c:45:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:32:17 2026 by rpki-client