Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
File: Q94YPxSj8k-bhtBE-HcphoC1Ers.mft (raw, json)
Hash identifier: LcLEFaG5Pe+KA2+TUkdJYxGzP4gpVcMYyReEp/EQjXc=
Subject key identifier: 49:21:C8:62:FA:54:B5:74:4D:E5:EA:24:61:CF:CB:A7:6C:34:78:88
Authority key identifier: 43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
Certificate issuer: /CN=43de183f14a3f24f9b86d044f877298680b512bb
Certificate serial: 01A182D07631A1319738633C5984C2653C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
Manifest number: 0933
Signing time: Wed 28 Oct 2026 14:01:02 +0000
Manifest this update: Wed 28 Oct 2026 14:01:02 +0000
Manifest next update: Thu 29 Oct 2026 14:01:02 +0000
Files and hashes: 1: Q94YPxSj8k-bhtBE-HcphoC1Ers.crl (hash: nK4k8mBVKA4PZ8ROxu4D7ykXITIusvxdfCcLGAE3v/o=)
2: hXKR5zejn3_Hil5KhYu5iVmfXJI.asa (hash: 3GFU2TS4xAC21rEQtTrjdeWRD+az4p5iCI2PhFizOP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:76:31:a1:31:97:38:63:3c:59:84:c2:65:3c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43de183f14a3f24f9b86d044f877298680b512bb
Validity
Not Before: Oct 28 14:01:02 2026 GMT
Not After : Oct 29 14:01:02 2026 GMT
Subject: CN=4921c862fa54b5744de5ea2461cfcba76c347888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:91:ed:cb:f6:d6:fa:21:f4:85:3e:c8:65:
8e:07:bd:80:e0:66:fa:47:7b:26:7b:ce:93:65:3c:
b0:e6:5a:0e:c4:82:fa:b0:82:9b:68:bc:0f:69:ca:
bf:b3:8b:05:db:96:14:8b:db:18:f1:06:c9:ea:6f:
45:6f:9f:ca:e9:27:6c:3c:9b:85:23:af:36:3f:7a:
13:5a:c4:2f:ad:2e:ef:95:47:61:43:5a:d4:a1:96:
c6:26:40:9e:ff:59:3f:62:ca:d2:4c:fc:0c:92:a1:
6a:9c:fe:b4:e9:fc:0b:c1:51:09:f7:69:1d:0f:a5:
e4:80:7f:f0:21:19:eb:06:b4:10:d7:54:2a:b3:e1:
09:b3:d6:1b:0a:6f:9d:97:9a:0a:cf:91:3d:d6:3d:
90:c4:a0:73:6c:df:e7:ee:fe:26:c0:3b:41:e5:84:
7d:b8:ef:aa:6c:7e:0f:b2:cd:8a:99:91:55:41:e1:
11:42:6c:c9:71:1f:5f:b7:4c:50:6f:b6:66:11:55:
c0:fa:b3:92:2a:7b:07:6f:99:b3:04:e1:ac:5a:2f:
6b:b4:19:46:21:40:c0:7c:42:d2:ad:5c:02:80:d5:
95:80:37:39:ad:41:9b:6c:12:2d:57:de:f3:fb:af:
49:a4:64:78:85:98:3f:40:5b:f2:12:93:c6:aa:ab:
d1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:21:C8:62:FA:54:B5:74:4D:E5:EA:24:61:CF:CB:A7:6C:34:78:88
X509v3 Authority Key Identifier:
keyid:43:DE:18:3F:14:A3:F2:4F:9B:86:D0:44:F8:77:29:86:80:B5:12:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q94YPxSj8k-bhtBE-HcphoC1Ers.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e2d8fe-01f1-4c56-91f8-ded743147d58/1/Q94YPxSj8k-bhtBE-HcphoC1Ers.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:25:35:a5:1e:95:47:3c:ff:3e:f0:64:64:34:a1:0f:31:0a:
af:1e:4b:d9:da:d1:c8:5d:a5:fd:fd:ec:06:1c:cc:72:ab:10:
87:4e:7a:26:d7:7a:42:43:9c:e2:e8:95:1e:d9:54:e0:66:f1:
2b:90:e5:6a:d4:68:22:0b:bb:ff:7a:a0:7b:47:00:67:06:44:
3f:6f:7e:c5:cf:95:97:a7:d1:4b:31:5c:6d:56:85:af:30:a6:
b0:be:91:0d:e3:fc:13:41:43:03:91:03:2a:a9:b4:ac:e0:00:
eb:84:c4:76:b0:14:99:4d:75:0b:0b:01:e9:9c:51:51:bb:ca:
13:3d:37:6e:ec:7f:60:80:cb:40:06:34:14:91:65:6c:01:76:
4d:a4:79:e6:62:dd:ad:89:e6:4f:11:88:7b:93:96:c4:c3:12:
04:7f:09:cd:ae:80:5e:24:00:fc:0b:b5:a0:c3:f1:5e:9c:97:
0c:32:0d:eb:23:5e:47:1a:b1:92:9c:02:11:fe:93:8a:74:43:
b1:f5:50:fe:b0:83:77:01:ae:9d:12:8a:1b:5e:b5:40:41:d8:
56:7e:36:7a:79:45:7e:f5:5d:2a:2f:9b:08:26:c4:1f:66:82:
99:39:29:b1:30:d8:ff:44:ac:65:96:62:b3:1f:a8:a4:8b:75:
03:ad:5c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:38:40 2026 by rpki-client