Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
File: QD1jsy5xwcFpJD79ttVu1cprgk4.mft (raw, json)
Hash identifier: de4bh3rjinikWLcv2UOkXhcS7yj68MAXNiMIHbPeImY=
Subject key identifier: 33:80:E5:FF:D7:C0:70:2B:BF:A3:69:FD:D4:F0:31:C4:68:33:3C:37
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Certificate issuer: /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial: 01A08B31AF4DCAACF787CF03DD6D35B79E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
Manifest number: 1979
Signing time: Thu 10 Sep 2026 12:01:24 +0000
Manifest this update: Thu 10 Sep 2026 12:01:24 +0000
Manifest next update: Fri 11 Sep 2026 12:01:24 +0000
Files and hashes: 1: IV2bE_1F3hO5cMPUIUiklGj1ImQ.roa (hash: 9tZfxXABVpGlo9KfN6uwXM4sjMJUMLOKi3lQp9BdRLY=)
2: QD1jsy5xwcFpJD79ttVu1cprgk4.crl (hash: wKO47d0EyQ5yLfhrpb1c/bY161PHbxPxv9jUFwrjmJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:af:4d:ca:ac:f7:87:cf:03:dd:6d:35:b7:9e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Validity
Not Before: Sep 10 12:01:24 2026 GMT
Not After : Sep 11 12:01:24 2026 GMT
Subject: CN=3380e5ffd7c0702bbfa369fdd4f031c468333c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:a8:0e:23:ab:c8:3f:59:5a:0b:81:c2:9e:
98:fe:86:9d:e8:c2:a1:70:5d:ad:1b:96:5d:5d:4d:
67:e1:a0:b8:25:86:fd:2a:d6:d3:e5:14:cd:ad:a5:
5c:bc:cb:44:3d:ad:ce:c6:8f:cd:35:8b:1b:c2:ff:
79:a4:07:3f:d5:ae:52:ae:6d:b7:4b:8f:c4:36:3d:
ae:1a:e3:a7:cd:67:f0:17:86:bb:47:e6:9f:71:a3:
f4:d3:f7:55:c9:b7:c0:42:b6:03:4b:3b:c6:f2:e2:
09:02:20:1e:57:7e:c2:c3:ce:a2:8c:47:b7:97:e9:
55:4c:22:41:85:4e:02:5d:69:16:2f:46:cf:56:ca:
fd:29:66:2c:12:5c:9c:48:f7:aa:e4:8a:8b:45:53:
22:65:2c:ed:11:15:a6:01:89:ec:c1:9c:5d:aa:ec:
31:93:17:ef:6f:ae:23:f0:f6:d9:fd:c4:80:25:4e:
0b:af:10:40:e3:f6:41:84:12:8e:d8:77:ee:f8:11:
30:38:01:0b:3a:c9:3d:1f:5d:7e:43:b5:0c:8b:07:
d2:8b:89:36:47:ab:31:da:29:4a:68:1a:9e:33:f6:
e5:f7:a9:54:a0:e5:db:33:b2:eb:9d:f6:23:c6:eb:
cc:99:f8:b7:12:b6:12:09:77:61:3e:31:90:51:01:
98:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:E5:FF:D7:C0:70:2B:BF:A3:69:FD:D4:F0:31:C4:68:33:3C:37
X509v3 Authority Key Identifier:
keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a6:54:79:94:7c:10:10:f4:45:c7:ed:fd:e4:23:d2:80:6f:
f0:3f:f3:2c:90:cc:2d:22:d5:52:94:c5:d3:60:6a:f3:8d:43:
68:61:09:53:13:2a:e3:aa:02:e1:44:eb:62:93:e0:f5:15:67:
0f:cb:8f:3c:27:61:60:8d:0e:93:1e:0d:1f:3a:50:5a:5f:88:
72:8d:e4:36:a9:51:5b:91:1c:78:c3:7a:8a:1d:06:1d:03:db:
97:e9:f1:8d:c8:f0:37:43:cd:39:90:de:8a:86:87:f3:fc:e7:
7e:1a:3e:da:d3:81:55:e4:5c:b9:7d:3e:74:f3:7a:f7:72:bd:
1b:71:f4:8b:8f:d1:eb:43:92:df:ed:fe:29:37:c5:97:f4:9a:
3c:c7:c3:d3:dc:c4:5b:27:84:ab:ab:b7:0e:63:83:15:22:6f:
0b:2a:a3:21:39:c5:89:57:4b:79:95:65:a0:fe:e9:f4:cc:ac:
48:5e:7b:4f:ff:6a:f3:71:51:d4:ef:5f:bd:b9:a1:89:d1:9c:
41:56:7b:5d:21:f0:cb:81:e7:a2:71:3e:8c:be:fc:da:2c:86:
4d:8e:27:00:f6:e5:2b:26:3b:ea:42:a7:ec:46:c2:e9:c2:d2:
32:1f:e0:91:68:cf:c2:56:96:b5:48:8f:17:bf:43:ce:ba:62:
de:40:ee:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:28:07 2026 by rpki-client