Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: 0qajpiUhZAjHC1wLZvXewUYS7g09oHR1myr3EtZ/QKQ=
Subject key identifier: 4C:8A:2C:D3:C2:A2:AF:F4:E8:33:4C:23:B6:AD:C0:C0:99:72:D2:E8
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 01A0035D2842F1D765C2C74876C52A490C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 03:00:31 +0000
Manifest this update: Sat 15 Aug 2026 03:00:31 +0000
Manifest next update: Sun 16 Aug 2026 03:00:31 +0000
Files and hashes: 1: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: whGa3QbiqveOgVaCmE/7cUoDlqanU4MbzZhhKBqmIvs=)
2: muJold8C5TUMixIVaL6rH1BS38A.roa (hash: FbxuoRz2634QOjJkP7NzNJtkodYJ1wTVSJlQ4uQWs58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:28:42:f1:d7:65:c2:c7:48:76:c5:2a:49:0c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Aug 15 03:00:31 2026 GMT
Not After : Aug 16 03:00:31 2026 GMT
Subject: CN=4c8a2cd3c2a2aff4e8334c23b6adc0c09972d2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ed:e8:fa:bb:e2:ea:6b:b1:5c:d7:87:57:3f:
51:25:8a:e5:6e:9b:39:20:5c:41:99:2f:b0:4e:74:
55:4f:55:fe:a6:c3:95:c2:ca:ae:fc:10:f7:9c:1d:
ca:8f:3a:b9:4f:f0:9b:11:34:74:bf:3a:52:f9:df:
40:51:67:bf:06:48:2e:6b:d8:51:5a:51:2f:0f:2f:
c6:45:ff:be:44:e4:b7:86:e4:79:a4:0a:76:9f:f1:
dc:9e:f4:9d:1e:a3:a1:d8:0c:52:af:e1:67:66:eb:
f7:6f:d3:b3:3c:03:77:8d:d4:04:d8:59:3a:04:55:
b9:1f:87:59:93:9a:9e:85:9b:23:8c:ee:f7:3e:0d:
14:29:d2:01:8c:95:55:ac:29:2e:6b:ff:a4:24:61:
9e:49:72:52:dd:03:54:1e:4a:0f:95:3d:67:1f:47:
3a:f8:18:62:6b:45:03:53:53:bb:41:65:06:74:77:
a2:68:10:24:74:80:4b:8a:56:8d:71:f0:3e:62:62:
3c:be:db:a5:23:3f:35:0c:c3:e0:63:b8:25:ce:35:
d1:2a:b7:e8:7b:a8:b9:02:aa:e6:8c:6b:bb:ab:77:
f8:a0:0d:ff:d2:3b:e5:ec:d5:fb:bc:40:47:37:dc:
0a:b4:4c:19:34:7a:df:16:4d:56:0c:94:90:58:eb:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8A:2C:D3:C2:A2:AF:F4:E8:33:4C:23:B6:AD:C0:C0:99:72:D2:E8
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:49:0d:73:5e:b6:39:10:8a:67:86:5e:63:5f:dc:51:37:20:
75:fb:6c:5b:1b:6e:ab:4a:dd:80:cc:6f:d3:8d:07:59:f5:3d:
48:f2:26:e1:87:b7:aa:44:64:cd:40:ae:0d:9f:9b:db:ef:25:
34:e3:a3:8a:77:b3:89:04:c1:5e:8d:58:64:6d:32:11:59:e3:
6c:89:b0:97:ab:67:a8:ad:c0:7e:98:56:d8:63:2c:11:b4:81:
7d:90:97:2d:3c:7a:fe:ef:d3:c1:2a:5c:1d:73:50:94:4e:f3:
3c:a8:f5:4e:d6:a6:aa:d0:cb:e1:15:84:84:19:da:f1:d2:eb:
57:dd:4b:59:8b:c6:32:0e:f4:3a:c5:f1:85:31:0f:d9:f0:7f:
09:e9:8e:92:7e:48:7a:1d:2a:cf:f5:00:21:75:9d:e4:32:17:
2b:9a:00:5c:ab:4f:e2:4f:b5:9b:80:cd:01:6d:19:54:ae:b1:
ba:01:46:fe:01:82:f5:6d:aa:3f:9f:6f:42:e8:46:3a:da:4a:
be:69:d1:01:48:48:35:71:17:6b:a8:1c:af:17:c3:a5:c8:7b:
62:90:24:ec:dc:9e:fd:d6:5c:72:8b:dd:73:44:7f:f2:f1:17:
84:3a:fe:88:c4:2d:7d:f8:45:d7:de:28:bf:34:5d:be:c5:9d:
56:e0:28:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:37:50 2026 by rpki-client