Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: 4KUgpHpsSVWDLntVdsXz+ne/mAUR81knkp9QSvk7zTI=
Subject key identifier: E6:CA:7F:C0:DF:86:46:04:73:90:3C:EC:F4:31:53:18:CF:28:D5:D6
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 01A06E39E4F3DD58C6D0C0ACF1DF04E8041C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 1A3B
Signing time: Fri 04 Sep 2026 21:01:22 +0000
Manifest this update: Fri 04 Sep 2026 21:01:22 +0000
Manifest next update: Sat 05 Sep 2026 21:01:22 +0000
Files and hashes: 1: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: 7iZooJtYKhT+uA77D6ksE0iSbwnK4x6+aLWp+2sbbSM=)
2: dzTzYf-TKYJMVkOvvaBfstjTJ9w.roa (hash: ZIgS2/isxUOPCfVNIh153dBZ1pmUGjEqXD0BSekDaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:e4:f3:dd:58:c6:d0:c0:ac:f1:df:04:e8:04:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Sep 4 21:01:22 2026 GMT
Not After : Sep 5 21:01:22 2026 GMT
Subject: CN=e6ca7fc0df86460473903cecf4315318cf28d5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:44:c7:72:5e:6b:ad:12:af:4c:38:ae:5f:
0b:96:55:44:e0:e2:89:2f:72:cd:f7:3f:34:ec:1b:
63:26:39:90:af:3c:8d:dd:53:09:9e:1d:fb:c6:ee:
b1:de:7c:21:7c:1b:a9:44:75:3d:ac:61:1f:72:03:
1f:8d:7c:c7:7a:52:54:79:f7:7d:8f:98:2b:96:ce:
ec:e8:65:1d:d4:a9:eb:db:4c:e8:4f:39:7d:0f:d8:
b7:c8:83:93:4b:12:79:d3:21:1e:95:fd:e1:ad:46:
e3:4a:38:62:84:f1:56:ff:9c:df:7b:20:52:bb:a6:
54:36:12:f7:d3:0e:6e:15:e3:cf:c8:c4:16:c1:dc:
36:82:8f:dd:b1:59:81:ba:77:46:f0:33:23:d5:cd:
97:70:57:f3:ca:12:af:29:f0:1c:e1:de:3d:21:8c:
4e:42:37:de:b2:46:1c:88:99:7c:6b:34:5c:96:b1:
19:cd:6f:78:67:5a:84:a0:bf:26:40:d5:c7:5c:45:
78:1d:23:65:2e:75:f5:d5:de:d3:6d:de:05:87:f8:
05:b0:bc:f8:d5:dd:7e:7b:de:23:aa:9b:b3:2c:04:
f1:cf:9c:06:c0:77:16:e0:dc:1c:06:a9:56:ba:18:
19:2b:8c:5d:34:99:16:be:88:c2:c8:f1:10:7a:21:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:CA:7F:C0:DF:86:46:04:73:90:3C:EC:F4:31:53:18:CF:28:D5:D6
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f4:91:2f:59:4f:7a:5d:4e:13:5a:40:65:da:cf:55:58:50:
8c:d0:bc:5b:29:5a:7a:63:77:6e:6a:4e:55:d0:c5:c2:8b:bf:
67:c8:c7:59:43:87:0e:8d:53:ac:f8:ab:ed:dc:46:9d:87:f9:
5d:a9:ac:b0:65:01:89:6e:19:50:84:96:d6:56:91:bb:65:9e:
30:35:19:34:0b:cd:af:fb:e1:0e:d7:ce:ff:f6:3e:86:6c:b2:
e4:09:ce:14:c7:05:dd:94:86:90:6c:aa:38:8b:a4:0e:2d:86:
8e:79:b0:a3:31:bf:21:75:29:e2:3b:32:00:65:d2:14:57:df:
5a:7f:84:d3:5b:76:7d:f3:92:4a:10:a1:05:7e:e6:63:2c:45:
47:ae:eb:73:2f:2e:50:02:09:a8:c3:81:5d:56:6e:ac:bc:3f:
94:db:89:c0:25:17:60:7b:5a:b4:47:b2:57:46:7b:b2:d9:5c:
b6:88:9b:b9:cf:20:d4:fe:eb:18:80:7c:73:43:90:67:24:c4:
ac:33:59:f3:9e:66:6c:2b:0d:32:95:fc:33:8f:8c:01:a3:3a:
ab:d2:16:41:c2:a7:c4:7e:7d:70:05:a0:c1:4b:db:55:e9:7a:
48:e1:70:b6:69:25:f6:57:f8:db:c7:37:12:14:c7:ae:2d:2e:
4b:5d:cc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:26:15 2026 by rpki-client