Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
File: Q94YPxSj8k-bhtBE-HcphoC1Ers.mft (raw, json)
Hash identifier: eV3O4S6J46FNThZpCWw2TmlGcH/NZWAm2Mnk8MQw7rU=
Subject key identifier: 5F:91:6F:CD:76:00:E2:D0:2A:D0:8C:6A:1A:5B:1D:25:A0:8E:07:7D
Authority key identifier: 43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
Certificate issuer: /CN=43de183f14a3f24f9b86d044f877298680b512bb
Certificate serial: 01A03E5F59F15006B3BCC9C89E1C7ACE6834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
Manifest number: 088B
Signing time: Wed 26 Aug 2026 14:00:31 +0000
Manifest this update: Wed 26 Aug 2026 14:00:31 +0000
Manifest next update: Thu 27 Aug 2026 14:00:31 +0000
Files and hashes: 1: Q94YPxSj8k-bhtBE-HcphoC1Ers.crl (hash: OaG2Eq3fJw93KXniUCnWyzyLAzwFLGJGc+CFg6Agu30=)
2: hXKR5zejn3_Hil5KhYu5iVmfXJI.asa (hash: 3GFU2TS4xAC21rEQtTrjdeWRD+az4p5iCI2PhFizOP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:59:f1:50:06:b3:bc:c9:c8:9e:1c:7a:ce:68:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43de183f14a3f24f9b86d044f877298680b512bb
Validity
Not Before: Aug 26 14:00:31 2026 GMT
Not After : Aug 27 14:00:31 2026 GMT
Subject: CN=5f916fcd7600e2d02ad08c6a1a5b1d25a08e077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:46:7b:40:36:a5:cc:ed:5a:91:89:25:6f:
ba:fc:1d:cd:6f:39:21:ca:2d:06:34:d6:58:18:7b:
10:f1:2f:49:b8:6a:e4:be:6c:b8:b4:71:f9:6f:1a:
a7:6b:f7:87:9c:d6:50:44:26:92:af:20:a0:21:75:
28:1f:8e:61:d6:fe:82:5a:1e:d4:3a:92:b9:ef:0d:
aa:c8:c5:26:c5:04:4d:11:10:e6:4e:4a:33:8e:9a:
cd:7b:6c:1a:ed:b6:66:e7:59:6b:ab:c3:1a:f2:23:
af:37:89:0c:c9:be:6c:f9:fa:02:c4:45:bb:53:72:
65:1b:a2:16:b8:9a:28:23:2c:70:3c:79:45:3c:1d:
54:fc:b6:0b:ee:d6:60:f6:2c:8c:b6:42:c9:81:96:
c6:d1:bf:47:15:e5:99:0f:01:a9:4c:e7:63:69:c1:
ea:41:87:8d:eb:76:06:85:ee:f4:f3:6b:62:28:0b:
b5:c1:9f:2b:67:14:de:cc:82:6a:8e:b3:4d:2c:af:
71:f5:fc:6a:39:8b:98:a4:35:dd:f2:35:77:79:1f:
b7:30:52:34:41:19:04:3f:e7:c6:26:cf:a2:ec:04:
88:a9:16:86:aa:12:9d:4b:13:82:60:d7:5e:b1:ff:
5f:98:0a:e2:df:cc:ad:86:67:45:0f:fa:63:b3:b5:
a1:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:91:6F:CD:76:00:E2:D0:2A:D0:8C:6A:1A:5B:1D:25:A0:8E:07:7D
X509v3 Authority Key Identifier:
keyid:43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:72:42:1d:2d:96:a9:7f:6e:bd:b2:b9:b0:bc:6d:9c:6f:7d:
84:29:36:e2:d9:28:01:a2:f7:6a:23:a6:5c:8b:27:d8:a7:a3:
10:24:0a:b7:58:3a:2d:de:85:44:28:03:dc:d8:c1:8d:1c:8e:
0d:85:30:1b:14:21:21:b7:d5:89:bd:b2:e7:71:ca:61:fc:b0:
88:5c:30:e5:fb:e5:f6:9e:9f:61:0f:26:af:39:51:3d:e0:8b:
16:f3:ad:a8:6b:59:82:bf:fe:4a:09:d7:42:de:5c:9a:d7:42:
d9:87:df:3a:6f:48:8e:ec:06:91:96:6f:5f:f9:ab:30:a3:54:
14:1a:31:d2:ac:f2:73:9e:13:66:33:c0:5a:de:40:95:d4:42:
cd:68:ab:1a:98:ea:c0:b1:19:0c:1b:9e:da:5d:95:44:51:ec:
8f:d4:63:75:ab:ab:18:1c:87:fd:9b:f5:29:9d:57:dc:43:54:
99:a1:ea:98:83:46:57:01:a5:4a:ff:71:7b:28:21:fa:86:f6:
0c:0f:c4:f6:06:2d:34:19:2c:2e:5c:83:40:37:09:62:7c:85:
11:5f:1a:6f:1b:0b:b9:69:79:20:57:84:7e:72:73:f7:7e:4e:
a6:6f:87:64:50:f6:a3:be:f0:06:37:78:b1:73:30:ff:39:61:
8a:7c:3e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:06:36 2026 by rpki-client