Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
File: QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft (raw, json)
Hash identifier: OSORujrrc38M+NUYnX/uQdRuJdGzIQBe6deL7cnbUh8=
Subject key identifier: EB:4F:F2:C4:6A:2C:03:58:93:8C:07:6A:78:52:56:E9:41:A3:F3:00
Authority key identifier: 42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32
Certificate issuer: /CN=42e0d377ac225dde2de910cc7b816850f0b67132
Certificate serial: 01A06C141579D7419EA8DA0BCD3F3ADD0475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
Manifest number: D1
Signing time: Fri 04 Sep 2026 11:00:50 +0000
Manifest this update: Fri 04 Sep 2026 11:00:50 +0000
Manifest next update: Sat 05 Sep 2026 11:00:50 +0000
Files and hashes: 1: QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl (hash: z8pedaiUQkkG39BjOn2MltCVOJDkryBa81SbmIuKhyo=)
2: eVVWCsR3SsLT4BetTTjquKU-q1M.roa (hash: aeSr2d45S0h29TxwaX3O5Y/8gj9nHZ8GIzMdMwCrt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:14:15:79:d7:41:9e:a8:da:0b:cd:3f:3a:dd:04:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e0d377ac225dde2de910cc7b816850f0b67132
Validity
Not Before: Sep 4 11:00:50 2026 GMT
Not After : Sep 5 11:00:50 2026 GMT
Subject: CN=eb4ff2c46a2c0358938c076a785256e941a3f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:fb:43:10:63:8b:6c:52:d7:04:90:b7:f6:
33:c3:f2:cd:64:dc:63:73:f6:c7:69:08:8b:dc:9f:
a8:b1:96:1a:9d:ad:42:d7:23:47:7c:8e:f4:43:44:
a3:2b:99:46:7d:fb:07:a7:b8:c9:39:42:46:57:ab:
7b:68:18:07:65:04:fe:fe:4c:78:84:45:f9:27:8b:
23:11:56:b2:43:a9:a6:21:71:06:23:f8:f0:9a:ed:
df:89:55:3f:a2:16:e0:43:24:a8:9b:47:10:35:18:
f5:3b:6e:66:85:51:6a:2a:a3:13:a2:18:6f:3b:cf:
ab:3c:8b:32:3c:6d:9b:4c:29:82:9f:68:93:89:ac:
66:30:0a:22:d9:4e:45:ec:ff:9d:ba:02:c4:25:e8:
e7:52:1e:bb:8e:c3:2f:ff:f0:9f:bf:69:bf:3e:99:
d9:89:60:2f:12:be:ab:2c:a3:90:cf:a0:c3:be:11:
9c:97:4c:35:c0:b7:d4:e2:9e:05:72:c8:11:cd:2d:
ef:71:c6:72:c3:61:0f:62:a8:63:a4:7e:cd:86:6f:
65:26:bb:5e:81:e1:eb:ac:b6:d1:87:e8:1d:ce:ca:
8d:63:d0:05:2b:45:b3:c0:93:3e:79:73:48:26:12:
b9:bc:ce:b6:2f:a2:45:5f:ef:01:13:4c:e9:3d:f4:
5a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:F2:C4:6A:2C:03:58:93:8C:07:6A:78:52:56:E9:41:A3:F3:00
X509v3 Authority Key Identifier:
keyid:42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:81:bf:47:32:09:3f:0a:5b:f0:54:ff:03:50:91:18:e3:ef:
7d:b2:a3:3f:5a:6a:9b:90:3c:28:9e:ff:13:a5:15:d7:15:2b:
64:98:a4:15:16:58:ac:d3:2c:01:fc:2d:9d:ea:0c:88:94:39:
0a:0f:9d:15:b1:62:fb:f1:57:1d:3f:67:32:2f:5b:93:1d:db:
9e:db:59:82:b3:a5:bb:5a:d7:c1:30:c0:a7:fd:36:bf:57:07:
63:43:48:4a:b1:29:5a:b3:78:74:b3:6d:04:64:12:9d:99:31:
17:3a:fd:68:55:3f:48:7d:4a:57:1d:ed:9b:bd:43:ad:3b:7a:
ea:f3:00:a3:52:ee:03:a3:09:a1:77:eb:37:57:25:6f:81:d3:
0b:06:12:55:3e:0b:bd:d8:75:6d:bc:66:ca:d2:d0:d6:24:73:
da:5a:1f:5a:58:ab:35:06:44:61:68:e0:df:d3:fd:fe:f7:35:
9b:e4:dc:a9:8e:fb:d4:ee:df:fc:dc:39:16:34:53:05:34:fb:
4e:4d:43:bf:02:3d:98:c4:66:76:f9:29:24:dc:b6:1f:45:82:
6b:b0:00:32:59:fe:3b:17:d8:0a:19:ce:c9:bd:1a:24:da:de:
8b:9f:05:cc:e2:4d:ed:7a:b2:c4:74:87:03:58:77:7f:15:67:
18:2e:24:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:20:06 2026 by rpki-client