Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: zmkKM+74+U0EGsAXEuEkZa7K2xofDi01vFjKmytlCgU=
Subject key identifier: 9D:4E:7A:4C:95:E8:80:36:A1:49:5B:94:50:3E:55:28:82:81:04:40
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 01A0D8A84AD9CAA8E2ABE2A5E36E43B31F0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 17AD
Signing time: Fri 25 Sep 2026 13:01:42 +0000
Manifest this update: Fri 25 Sep 2026 13:01:42 +0000
Manifest next update: Sat 26 Sep 2026 13:01:42 +0000
Files and hashes: 1: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: PNZaLSr53/35FBJccjL0BGh0pG1F8CX6klgy1zCmU9I=)
2: SsfnBHuvPDESg4pTMTaqtv9nT-Q.roa (hash: ZrITCydyp3ig8q1pUL+0pHbv4soXKIcGIYDQm4wHpvo=)
3: c-KZaw3UumwWkGCg1_3weGS8B-U.roa (hash: 2AcxA0Jqp/dgXDEXPcxhpKLcjp+xB4KSRrsphLc65kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:4a:d9:ca:a8:e2:ab:e2:a5:e3:6e:43:b3:1f:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Sep 25 13:01:42 2026 GMT
Not After : Sep 26 13:01:42 2026 GMT
Subject: CN=9d4e7a4c95e88036a1495b94503e552882810440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9d:ed:ee:92:62:0a:f3:18:48:55:48:fc:98:
4a:f2:00:84:23:50:d3:49:b0:24:f8:4b:b0:31:f8:
95:0d:15:ef:9d:2b:6a:a4:1d:0e:db:5b:06:6e:e5:
2b:69:64:a6:61:31:66:cb:da:5f:fe:d1:06:10:da:
38:85:d0:46:40:d4:c8:a4:56:ef:82:c5:2d:5a:18:
21:6e:3e:82:39:27:ad:84:01:fd:e9:4c:c9:1a:3e:
b0:98:5c:99:c4:b1:3c:f3:80:14:c5:20:f6:28:23:
b1:cb:b9:71:a5:42:86:f9:74:6b:b1:72:1c:a3:0a:
2c:1f:7e:95:80:5c:ac:54:50:70:bb:f2:71:a9:6d:
49:f4:61:f9:0d:e6:6e:ee:13:40:83:14:a7:2f:a4:
a2:f0:fa:e7:65:21:b2:40:e2:3f:ff:98:91:f0:d2:
0f:2a:32:b8:b2:c8:d6:84:72:73:77:a5:ac:6b:8f:
44:c0:c2:9d:e7:f6:a9:9b:bb:84:88:e7:d5:9d:67:
b1:b0:2b:38:e6:a9:e0:22:94:47:2d:56:01:65:2e:
24:04:60:a8:10:fa:3f:fd:78:03:fa:73:5b:be:cd:
22:ea:d4:f6:f4:7b:3b:11:d4:ec:a2:58:ec:11:d4:
68:8a:b6:1d:e9:04:01:50:32:8c:ac:5b:05:89:24:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4E:7A:4C:95:E8:80:36:A1:49:5B:94:50:3E:55:28:82:81:04:40
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:86:89:8c:18:58:38:c0:49:99:b4:27:f8:82:5b:76:bb:60:
72:90:72:a3:73:d5:68:a0:6c:27:11:d7:bd:cf:87:d0:4f:5d:
37:b1:9c:cd:8f:2b:59:9e:b9:f9:21:64:5d:8d:5f:88:e3:cd:
26:11:1f:7c:0b:41:91:d5:32:d4:b8:7d:56:1b:e9:04:d6:c1:
a0:bf:96:31:4e:3b:6c:e5:8f:9f:be:c9:6f:6c:18:53:59:4f:
4a:4c:2d:e9:f8:20:4b:72:69:45:bd:33:62:8b:82:8e:a6:d3:
42:a9:01:57:5e:c3:4b:7a:65:47:a3:b9:d8:75:6f:5e:17:9b:
6e:5c:e9:01:28:b1:22:1a:20:80:74:1b:c3:d5:d3:64:5b:17:
f5:92:65:3d:60:28:13:9b:1d:14:99:2b:07:27:56:c0:5f:ab:
ef:05:d1:55:d3:fd:ff:d8:92:6b:34:74:1d:62:91:f3:5c:f2:
58:65:e8:a2:3c:e1:30:0c:32:81:fa:a1:d5:71:69:a0:d8:7d:
15:00:68:df:c6:34:96:cc:c8:33:81:f1:b0:29:0f:21:d8:77:
8f:9e:99:8a:7e:ea:2d:60:bf:bd:85:c7:46:e7:91:50:37:dc:
56:df:de:f1:84:a8:16:84:2d:52:7b:cc:17:b1:83:f1:de:d0:
a2:9d:31:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:41:56 2026 by rpki-client