Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: 1CLesgYpzpcT1nQryuH7JWPNgEj3Eonx6raB0NYLHY0=
Subject key identifier: 8D:16:42:69:03:F8:6C:51:1A:9C:48:ED:E0:EB:4E:FB:88:88:70:22
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 019F12D3E36E8B624A264D835B21B66ED303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 1876
Signing time: Mon 29 Jun 2026 10:01:43 +0000
Manifest this update: Mon 29 Jun 2026 10:01:43 +0000
Manifest next update: Tue 30 Jun 2026 10:01:43 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: iV32JU8ixQUabxyPZyb39XSbkfKAoFQ6AxI0ml5SMRU=)
2: kIdKfcVB8xoU-jL0GS61sHZEdFc.roa (hash: 0PfvIN3m+RMyfBShY3gPVZh53Z/48yCnaRs0eMSULZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:e3:6e:8b:62:4a:26:4d:83:5b:21:b6:6e:d3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Jun 29 10:01:43 2026 GMT
Not After : Jun 30 10:01:43 2026 GMT
Subject: CN=8d16426903f86c511a9c48ede0eb4efb88887022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bc:19:53:23:e4:ba:b2:8a:7f:62:50:a2:b9:
7b:34:57:dc:87:30:11:71:6a:16:cd:9c:ac:e2:92:
23:80:be:0d:3a:03:7b:c2:46:c4:52:d5:94:8d:6a:
f9:2f:11:08:8e:17:f8:10:d0:3e:24:ef:b1:b1:7f:
5e:7c:82:62:f8:4a:a7:73:be:87:70:cc:97:51:1e:
bf:6b:f4:48:f9:a2:b4:68:f3:03:d9:8c:bd:82:6f:
ba:85:0d:0a:76:63:12:e7:f1:8d:de:26:0b:fa:b7:
f4:1c:c9:3d:8b:bd:a4:00:ce:91:1a:de:df:6e:e4:
82:3c:76:30:b6:54:c3:b8:14:01:03:25:f4:14:4a:
e5:38:05:d3:44:a0:5b:09:a4:e7:90:82:d7:c8:20:
1f:7f:bd:39:5f:4c:a1:be:3d:2a:4a:8c:84:e3:d9:
6b:0e:4e:27:8f:9a:d2:ad:45:2f:f0:26:04:1f:b1:
4a:26:b7:a6:37:65:a7:c6:5c:b4:ee:c8:d9:4d:cf:
de:57:cd:db:c6:72:da:3f:85:54:b2:d6:7a:90:94:
8f:dd:88:c1:07:fa:93:1e:fe:ce:3f:08:0c:87:2b:
1d:24:b4:f4:73:a0:5d:10:3d:5a:a4:9e:cd:f7:ff:
e7:b2:10:cf:c9:af:3d:c8:0c:cb:3b:25:00:dd:1f:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:16:42:69:03:F8:6C:51:1A:9C:48:ED:E0:EB:4E:FB:88:88:70:22
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4a:88:78:af:75:2f:46:0c:6e:30:b9:b8:94:9f:cb:cb:33:
a7:36:bb:60:e6:0f:95:cf:ea:6a:0e:91:fb:7a:60:3c:e1:e4:
0d:03:08:d8:4b:87:f0:f2:47:95:eb:94:df:0a:4d:f4:9f:ae:
d6:14:5d:0d:9b:4a:42:77:3f:7e:03:60:21:57:16:3d:34:79:
81:b9:fd:35:f4:3d:ff:3c:ff:57:12:44:17:2d:b2:ea:d3:0f:
50:de:52:b2:91:d2:c7:32:fa:96:ba:4e:f9:01:42:13:85:c9:
be:7b:c2:8a:70:61:e3:5e:9d:95:21:ef:c5:5a:ae:96:23:84:
5a:ed:00:f4:ca:18:4d:85:5c:c2:29:42:51:89:25:3d:01:2f:
c3:08:e4:0a:2f:ea:ce:dd:2f:74:53:f1:47:5e:08:f3:91:15:
0f:de:27:1f:88:7b:60:ca:61:a0:94:73:ac:1d:12:40:cb:eb:
4c:5f:99:3c:ff:2a:9e:a3:11:e0:74:1f:90:3b:4f:14:89:27:
df:c4:71:04:a3:9e:d3:3d:09:40:21:b3:8b:4a:87:51:c9:27:
ba:37:ca:f7:4d:c7:66:29:be:5f:99:68:3c:42:56:d3:e4:7d:
a7:0c:c2:47:7d:66:e3:b2:28:92:d8:f0:c7:86:66:ad:04:54:
6f:c2:85:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:34:39 2026 by rpki-client