Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
File: QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft (raw, json)
Hash identifier: Zt1WHRCrmqnzgBlc7H1qjzXZ1/LPrWqv4JIYEUIUiqo=
Subject key identifier: 21:50:03:9A:F6:D2:06:27:7C:FD:63:63:09:63:78:6E:2C:91:2D:3B
Authority key identifier: 42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32
Certificate issuer: /CN=42e0d377ac225dde2de910cc7b816850f0b67132
Certificate serial: 01A1634589F9BAD2148C6902195E4E2249D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
Manifest number: 0151
Signing time: Thu 22 Oct 2026 11:01:03 +0000
Manifest this update: Thu 22 Oct 2026 11:01:03 +0000
Manifest next update: Fri 23 Oct 2026 11:01:03 +0000
Files and hashes: 1: QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl (hash: nFvtOBIpxFMzdXV8UTkGa6rBTijpSjcq43mztNxvL+U=)
2: eVVWCsR3SsLT4BetTTjquKU-q1M.roa (hash: aeSr2d45S0h29TxwaX3O5Y/8gj9nHZ8GIzMdMwCrt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:45:89:f9:ba:d2:14:8c:69:02:19:5e:4e:22:49:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e0d377ac225dde2de910cc7b816850f0b67132
Validity
Not Before: Oct 22 11:01:03 2026 GMT
Not After : Oct 23 11:01:03 2026 GMT
Subject: CN=2150039af6d206277cfd63630963786e2c912d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0b:d3:7f:f7:47:a4:54:ff:03:51:2b:25:0a:
17:04:1b:75:c8:57:08:1f:5a:db:d4:8e:60:3e:6c:
6a:b6:91:4e:32:a6:77:c1:64:32:3c:84:16:82:a9:
40:10:96:b5:b6:e3:23:ca:24:23:9d:b0:71:c5:71:
71:c8:c5:e6:f9:1e:e1:b9:5f:73:ce:58:57:a0:1c:
4b:35:05:d1:dd:0c:e7:e6:b2:73:bb:ae:ef:57:66:
ea:4e:0b:5b:89:bb:e3:1d:31:69:92:47:1e:38:89:
72:00:c2:3a:3f:9c:3b:08:ef:05:22:c0:60:c3:33:
d0:06:30:6e:c7:81:7a:75:83:d0:74:38:77:25:6b:
68:0d:ce:9d:62:10:69:24:c0:48:04:3c:2b:3c:1a:
95:d3:da:b2:54:3e:41:c5:bb:48:d7:ef:43:b8:b8:
6a:70:b3:c3:28:d7:21:4f:9d:2f:4c:08:7f:aa:cb:
fd:de:a4:f4:1b:8f:c7:57:b6:fd:0e:9f:33:df:8e:
e8:19:c8:32:da:db:f7:31:4a:76:ba:53:ec:70:cd:
84:7e:b7:0a:6c:c1:d3:aa:2b:32:a0:05:80:98:1f:
3e:98:aa:b3:02:29:d9:4e:ad:4d:71:d0:af:82:2e:
6c:05:cd:fe:74:cd:c9:97:3f:91:53:fb:6d:1c:6a:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:50:03:9A:F6:D2:06:27:7C:FD:63:63:09:63:78:6E:2C:91:2D:3B
X509v3 Authority Key Identifier:
keyid:42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6f:e3:fe:cd:9f:bd:86:0a:58:96:5a:0f:7e:6b:20:01:9b:
2d:2e:f5:11:fc:e2:dd:6d:94:47:0b:14:e3:06:0c:0f:17:b2:
69:38:3f:ed:16:fa:58:3d:4d:9e:09:82:63:e5:aa:ef:c6:1a:
ed:bd:34:11:79:93:53:02:2c:7b:b5:27:dc:e7:f0:15:84:04:
23:2c:be:4a:65:9e:7a:56:f1:d6:53:6e:c6:75:14:c7:7b:3b:
8c:c6:d6:dc:09:6f:98:20:aa:74:66:9a:af:a0:97:e8:bd:8b:
53:1e:46:12:ce:41:9e:c7:18:f2:82:09:95:78:6e:cc:62:b8:
d3:8e:97:68:3d:e8:19:f2:a3:01:6a:49:7c:95:09:3b:8a:af:
9f:6b:52:42:52:5a:ea:8f:83:e2:9a:d2:0d:ce:93:d2:3f:5f:
90:98:89:6f:05:3a:43:d1:cb:49:64:25:5f:09:1e:8a:be:3a:
8d:a1:14:b0:65:6a:91:6f:36:c1:80:e2:7d:4f:ce:32:3a:32:
88:1f:a0:c6:63:b6:5e:b4:d8:e4:d8:68:5c:66:3f:c1:f6:20:
b8:3e:7f:a5:0a:82:bc:8b:e5:8d:56:7a:db:d9:2d:04:1a:4a:
0d:57:66:dd:c4:4f:1b:01:d6:c9:87:de:7a:9e:3d:a2:12:6f:
eb:eb:25:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:21:32 2026 by rpki-client