Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: 3O18xx+kGp+xK40RV9ODoQIrMvM/Tg996Q8vAji++ug=
Subject key identifier: D3:CB:7D:C5:BA:C3:A4:BD:52:30:A5:D9:27:EC:39:ED:99:99:6A:9B
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 01A0431967F2A22385FF6241EA3196CE93BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 1871
Signing time: Thu 27 Aug 2026 12:02:13 +0000
Manifest this update: Thu 27 Aug 2026 12:02:13 +0000
Manifest next update: Fri 28 Aug 2026 12:02:13 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: VnXUd8R0znlSbRlYlQXQjU0INLVr//uLa9irgerf1Rc=)
2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 12:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:19:67:f2:a2:23:85:ff:62:41:ea:31:96:ce:93:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Aug 27 12:02:13 2026 GMT
Not After : Aug 28 12:02:13 2026 GMT
Subject: CN=d3cb7dc5bac3a4bd5230a5d927ec39ed99996a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:02:ef:b9:39:f9:fd:3d:11:b9:32:90:4d:
9d:69:6d:e6:a6:ce:1b:9b:4f:40:62:d4:dc:49:8e:
7f:9d:3c:29:8d:97:08:5f:77:2b:ac:96:58:de:13:
30:9b:a1:e9:98:dd:8e:69:e0:dd:f1:cc:37:b1:5a:
b9:35:ce:ee:15:3b:76:1e:d0:35:14:98:07:b7:ce:
55:05:72:42:59:b6:26:c9:a1:71:d6:c4:c6:60:10:
9e:f6:d5:c2:96:e4:1a:6a:62:ec:d0:de:8c:fb:9a:
60:08:aa:a1:3a:bd:8c:b7:fe:3c:ed:81:17:0a:cc:
c1:08:5b:4f:e7:48:23:b6:f0:d9:c0:2a:7b:0e:a2:
e1:73:60:84:6a:0b:d8:5b:ae:9e:5d:53:94:44:e2:
ca:50:15:bb:42:62:2f:80:7f:b9:2e:89:91:ef:5e:
24:10:e2:31:e3:c2:41:f2:23:b4:09:6d:b4:48:dd:
96:72:65:ff:45:b0:40:73:14:8b:98:3d:c0:27:93:
a5:ac:ef:ea:7e:92:5e:6b:73:ac:6d:d4:d5:76:31:
48:71:41:54:73:ff:69:18:92:07:1b:b0:b6:01:1a:
dc:26:3a:e0:9a:a7:c1:04:49:da:2a:d8:e6:45:47:
13:b5:de:f6:11:2c:f5:b3:d2:9b:fb:41:6c:61:ef:
67:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:CB:7D:C5:BA:C3:A4:BD:52:30:A5:D9:27:EC:39:ED:99:99:6A:9B
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:55:d1:6b:3a:11:1b:60:76:e6:1b:3f:e5:91:1e:51:e5:56:
3d:18:08:fe:70:3c:ea:cf:93:2a:ec:ef:ae:44:87:51:ad:f1:
0d:f8:d6:8e:d7:4e:94:b4:85:b0:75:40:41:0e:09:ff:39:16:
d4:b8:f0:4b:6d:be:91:98:a8:49:ae:a5:ce:20:11:e3:18:e2:
4f:71:e4:02:9e:3c:7e:e8:18:bf:7f:19:6b:29:7e:d6:e7:94:
90:1e:f6:ef:34:fe:6f:7f:e5:55:c6:6e:d9:b5:fd:f3:a2:34:
43:cb:f4:bf:92:4a:53:b2:86:d3:51:37:24:36:47:b6:0b:be:
22:57:ac:09:ee:11:c3:34:f1:72:4d:72:6a:11:d7:3c:22:a4:
3c:15:c4:a3:5b:76:ba:8b:c9:f7:5e:dd:80:a3:f2:19:af:55:
29:00:2a:bb:93:f9:65:78:ad:38:64:33:41:61:28:b7:27:ff:
18:47:6e:72:1b:90:c2:30:27:37:23:34:8f:7a:cf:bc:f2:f1:
71:b1:20:db:65:4e:79:c5:80:04:13:66:24:bc:3e:95:e9:38:
71:06:2b:3e:32:b4:1f:64:3a:32:ba:b3:1c:ec:44:a3:37:95:
42:f4:40:c6:69:bf:4f:e8:e8:70:4f:bd:10:30:c8:e5:17:21:
56:87:0a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 21:43:11 2026 by rpki-client