Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: UaKwhUkmncysBzcovrgYtCtRYeGe98yr6Qw/YbaxGeo=
Subject key identifier: 4E:76:81:7E:31:15:CE:91:AF:B6:40:F9:BC:8A:93:C7:18:A9:79:F1
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 01A03E28EA872FC113C663207B2CBF3643C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 1911
Signing time: Wed 26 Aug 2026 13:01:03 +0000
Manifest this update: Wed 26 Aug 2026 13:01:03 +0000
Manifest next update: Thu 27 Aug 2026 13:01:03 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: 9uQ7/Mxuyxmy/QSIl5NrML5EfOZOHnrUGCFtO13wvUU=)
2: kIdKfcVB8xoU-jL0GS61sHZEdFc.roa (hash: 0PfvIN3m+RMyfBShY3gPVZh53Z/48yCnaRs0eMSULZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:28:ea:87:2f:c1:13:c6:63:20:7b:2c:bf:36:43:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Aug 26 13:01:03 2026 GMT
Not After : Aug 27 13:01:03 2026 GMT
Subject: CN=4e76817e3115ce91afb640f9bc8a93c718a979f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c5:ec:46:08:38:b2:88:63:7c:5a:c6:cd:e1:
18:77:e9:56:ff:89:93:8e:34:c9:4f:cf:27:cb:18:
89:41:bd:cf:57:26:8a:aa:ca:82:c8:d5:bf:de:02:
3e:f5:97:44:70:32:5c:9f:f7:82:ae:4b:dd:e2:8e:
9c:e2:21:df:0d:2f:4e:1f:a3:ef:87:17:a3:24:8a:
b5:33:4f:57:09:c3:c9:47:44:38:29:40:04:6d:09:
94:e7:29:ad:f4:d0:57:e5:5f:5b:1a:02:bb:f0:13:
46:77:9a:b4:51:7f:d5:b7:55:7f:ef:6e:9e:6f:27:
6b:44:c2:8d:e0:77:1a:5e:fd:70:8e:44:26:85:97:
fc:ea:f1:0c:06:86:c2:58:3a:78:6e:5a:60:e7:4e:
19:3e:c1:92:61:21:e6:5e:67:da:f8:4d:7b:1e:44:
31:18:b2:34:4d:ab:54:a4:1a:20:76:83:b9:cb:43:
33:88:36:d5:c0:19:fa:e0:34:07:e7:a2:f8:22:dd:
f9:a1:5b:26:ff:e6:be:9a:1d:7d:c1:fb:22:09:05:
d0:8f:45:17:51:85:64:3b:70:d8:3e:8b:48:da:51:
40:3f:2e:41:ed:44:75:27:7c:41:30:05:ff:52:8f:
73:aa:12:b9:56:7c:06:57:bf:93:74:d3:72:c8:c4:
81:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:76:81:7E:31:15:CE:91:AF:B6:40:F9:BC:8A:93:C7:18:A9:79:F1
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:1b:aa:90:96:61:20:83:7a:da:e8:8b:84:5a:0b:27:5e:fb:
70:b0:6f:70:80:84:5a:53:73:d7:07:0f:79:dd:e9:7d:5b:75:
39:57:f8:a9:21:7c:2e:e0:cf:62:14:7a:98:26:82:8d:3f:85:
27:8a:35:6a:5b:63:9d:cb:97:1f:9c:4d:8d:c6:67:5a:7a:0e:
a8:bd:da:fb:1a:3d:b0:49:be:c1:24:e2:64:65:b3:74:cf:3c:
d4:38:dc:c7:33:03:b7:a2:d1:1d:78:a3:f1:60:f1:da:1c:29:
fb:26:cf:c4:22:4d:b3:ad:66:31:c3:b3:c7:2f:a0:9d:c5:43:
32:8e:f2:23:1e:f4:3d:18:98:27:90:0e:a7:79:c4:81:d4:d6:
b3:59:69:57:29:b7:70:87:08:8d:f0:30:d8:97:f2:36:93:99:
54:ed:ba:8e:32:7e:8b:48:7f:d8:c8:b9:0a:ec:f8:e8:5f:59:
48:64:78:6d:b3:e4:85:9b:76:c6:20:d5:83:49:c8:dc:2a:89:
d2:aa:9d:47:5d:b7:48:68:09:bd:d5:31:48:9d:62:ce:08:2f:
88:3a:0b:ae:f3:e5:24:d2:c2:5b:79:8a:3e:0e:7b:e5:f1:9d:
7c:95:97:30:58:53:e9:6c:b8:d0:44:5e:5b:5f:6d:80:96:c4:
a2:c5:7f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 21:25:13 2026 by rpki-client