Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: kVEeoYMn3sV61Zz2A4LdQA7axsUKa9Bwb2PzTi8/dvc=
Subject key identifier: A8:90:8C:5D:8E:64:C6:70:9F:C3:A5:BE:62:27:99:ED:21:41:B7:F5
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 01A08B9EFFA5311014979077D97AD346031E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 1701
Signing time: Thu 10 Sep 2026 14:00:48 +0000
Manifest this update: Thu 10 Sep 2026 14:00:48 +0000
Manifest next update: Fri 11 Sep 2026 14:00:48 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: IpVRfCDa4MearZ2GPwWCJw8j1uxYHOVG8yFEoofnGsE=)
2: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (hash: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9e:ff:a5:31:10:14:97:90:77:d9:7a:d3:46:03:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Sep 10 14:00:48 2026 GMT
Not After : Sep 11 14:00:48 2026 GMT
Subject: CN=a8908c5d8e64c6709fc3a5be622799ed2141b7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:12:46:d4:95:2a:24:d0:a7:89:98:af:a8:17:
75:5b:da:1a:41:11:15:eb:f7:01:3c:6f:52:02:51:
5f:91:5a:13:4a:df:16:b8:51:94:56:7b:87:17:19:
8a:c1:6c:76:b9:e2:7c:9f:89:05:91:f3:a9:b4:70:
19:67:86:da:f6:21:f5:41:16:a9:fb:c9:47:c6:79:
64:6c:4d:8b:ec:54:57:7d:10:3e:3c:1d:db:56:94:
af:a7:10:d9:eb:e9:63:26:81:57:c1:62:98:86:de:
08:9f:22:ed:66:b8:a7:9f:16:1e:30:1d:17:b5:09:
6b:40:73:b2:63:10:9e:cf:d9:73:06:35:76:f6:72:
de:3e:54:62:46:f6:a3:d3:46:04:5a:47:42:7c:f6:
a2:77:0c:b7:38:17:1d:d0:ad:d8:bc:20:cc:e9:cc:
a1:65:09:06:14:9b:67:19:2a:a5:43:f6:25:4f:86:
3e:e4:c5:c9:1e:b0:d7:49:33:37:0b:41:4e:a3:12:
58:52:7a:ee:7a:0d:ed:7e:b9:5f:57:54:1e:88:84:
12:71:0d:9a:c5:4d:7d:6f:6f:6a:89:dc:eb:b3:67:
a1:2c:64:d3:0b:99:e1:5d:48:18:a2:7c:7c:02:bb:
9b:c3:22:0d:6c:ae:e2:70:9e:3a:8b:10:08:c2:94:
2d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:90:8C:5D:8E:64:C6:70:9F:C3:A5:BE:62:27:99:ED:21:41:B7:F5
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b5:11:fd:02:84:17:36:1a:38:63:94:28:38:4d:88:71:d2:
c9:ac:10:9b:63:92:ed:59:1d:2e:30:46:5f:4a:37:e4:38:71:
e8:4e:db:b9:6c:83:20:54:36:58:75:54:f4:6a:91:92:8f:f4:
20:5b:0b:b0:de:cf:ed:f3:72:c9:c4:f8:67:96:66:df:e9:26:
ec:11:c6:2e:74:bb:a6:0a:a0:04:51:89:8f:1a:a7:f7:c4:41:
14:67:8c:6d:17:01:b5:05:21:fa:89:c2:a2:bd:c2:75:2e:ae:
7b:95:6a:ad:5b:63:14:7c:bc:e6:7a:69:59:24:94:6c:b3:7f:
97:29:04:b9:12:1a:1a:44:0c:ae:33:e1:ee:0e:52:20:80:39:
82:dc:60:3d:53:26:5f:36:13:5a:d7:ed:f6:8f:ec:ed:dc:65:
f7:cd:ec:71:73:24:c1:0c:c0:7e:77:ef:a1:0b:22:13:2b:3f:
d1:45:0a:9f:96:5c:f1:34:f0:38:68:32:9f:bb:fd:fc:7f:1c:
ed:60:f7:34:48:a1:78:02:0b:01:c2:2e:b5:bd:39:fc:24:26:
d9:c5:f2:e8:7d:84:f5:73:7b:1f:66:a3:14:2e:e0:dc:1a:5f:
86:15:35:cc:5e:9f:56:f8:17:88:c8:a0:da:2c:87:9c:2a:9d:
d8:ab:b5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:03:20 2026 by rpki-client