Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: kMkGIfGdqCeSGfKCVs53yQ72jjoifFtI88hlwlrvYLk=
Subject key identifier: EF:02:CB:8E:3B:45:5E:E0:9D:BC:5F:45:E6:9F:96:96:9F:F3:98:08
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 01A18299BF40C5A414578A7D940ACFCAE246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 19B9
Signing time: Wed 28 Oct 2026 13:01:16 +0000
Manifest this update: Wed 28 Oct 2026 13:01:16 +0000
Manifest next update: Thu 29 Oct 2026 13:01:16 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: JrrJwwj+5M//9lt/ztI8Qq9SjJdlgyXPb5PanNSFoH0=)
2: kIdKfcVB8xoU-jL0GS61sHZEdFc.roa (hash: 0PfvIN3m+RMyfBShY3gPVZh53Z/48yCnaRs0eMSULZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:99:bf:40:c5:a4:14:57:8a:7d:94:0a:cf:ca:e2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Oct 28 13:01:16 2026 GMT
Not After : Oct 29 13:01:16 2026 GMT
Subject: CN=ef02cb8e3b455ee09dbc5f45e69f96969ff39808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:29:db:a1:a7:cd:74:19:bb:b2:6c:eb:2e:eb:
51:90:a4:7e:04:21:31:4c:15:a3:e2:82:b6:c5:14:
01:a2:49:2c:0c:e5:33:78:24:ad:f7:fe:4a:02:7d:
b2:ab:93:2b:30:9d:93:8e:49:e2:32:9b:05:fa:48:
2e:b0:fa:25:f3:03:43:18:72:af:c1:d3:d8:f8:af:
cb:9f:62:86:f6:4f:47:ce:d8:4a:5b:b1:34:b1:90:
87:4e:46:6c:1e:61:73:3e:48:6f:20:5a:51:04:d7:
83:b8:f0:e7:88:7c:6d:a0:3a:e0:f4:92:5e:33:50:
de:12:9d:bd:91:a6:b9:dd:c5:09:f3:70:c0:e7:f2:
22:ea:67:33:29:16:01:58:2d:bd:f7:90:77:ea:0e:
e3:46:91:75:4a:1b:09:d3:e8:89:90:38:fd:e8:b3:
f8:3e:bd:f8:60:ff:3a:8c:0c:fb:21:c1:19:44:8b:
a2:97:ce:3a:d0:06:4a:aa:79:d6:69:30:b0:36:e3:
90:57:5b:7f:1f:e4:2b:fc:4e:c4:8e:56:b3:82:6c:
9b:2d:7a:1c:b8:3f:2b:e6:d7:23:ee:64:b2:38:90:
0b:6a:5d:b6:73:a4:e6:cb:4b:eb:d2:d9:19:8a:40:
ca:0e:78:ce:02:4e:a3:0f:cc:54:10:73:1c:35:63:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:CB:8E:3B:45:5E:E0:9D:BC:5F:45:E6:9F:96:96:9F:F3:98:08
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d2:0e:0d:71:f3:45:d0:5f:6e:a2:b9:f5:c7:ba:c4:e1:ba:
0f:de:56:66:f5:72:71:a9:84:9e:74:18:85:f3:0b:3d:48:b3:
cc:4e:d4:18:2f:28:cb:cc:c9:98:a6:09:a6:36:45:68:04:8f:
ed:12:87:9d:81:f1:9c:86:e7:25:d0:18:30:08:04:64:d5:2c:
fd:fd:da:71:c9:ac:a3:8e:65:92:3c:7d:7b:24:43:3f:30:91:
3b:d6:5e:7b:6c:6c:5b:08:b5:9b:40:17:90:d4:18:35:db:f4:
21:66:e3:d7:28:f5:f5:5a:72:47:5a:79:db:1b:59:82:30:61:
04:4b:e6:00:37:cb:de:bc:96:ec:a3:4e:60:38:b1:87:74:f8:
59:ea:4d:8d:94:91:41:47:09:fd:d9:4e:5d:e0:e6:e7:14:d8:
37:d7:55:9a:a4:64:37:a5:29:db:96:0b:46:1f:ae:5f:62:55:
6f:77:b1:cc:31:8f:18:fa:79:8c:47:13:15:0b:9c:dd:19:12:
3c:75:84:3d:7c:30:02:b7:49:54:26:65:2a:e1:dd:df:ab:00:
33:81:ea:40:2b:93:2a:b9:88:4e:d8:aa:01:92:9f:73:d7:b5:
51:1b:92:03:3e:e8:40:25:9d:24:e2:ab:c9:0d:b6:a3:16:d4:
2f:ef:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:27:18 2026 by rpki-client