Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
File: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft (raw, json)
Hash identifier: twOkIBKKi7h/D7QWtTdwkzQm0ZNVANW++RmamsTPLBk=
Subject key identifier: D7:1F:34:8C:E8:C6:E7:64:FF:ED:9D:7C:8E:18:84:9D:05:BB:96:45
Authority key identifier: 42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
Certificate issuer: /CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Certificate serial: 01A06E396C62B9ACBD2F5F64203BF2686A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
Manifest number: 1A39
Signing time: Fri 04 Sep 2026 21:00:52 +0000
Manifest this update: Fri 04 Sep 2026 21:00:52 +0000
Manifest next update: Sat 05 Sep 2026 21:00:52 +0000
Files and hashes: 1: NMKwSUUrM8k8eQKWjQoXhVr67Q0.roa (hash: CYXCafl1+25dso4rJFuju+aK/xutXRo5p4nK7eGdbTw=)
2: Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl (hash: GepDIPpD3+fUlabt9x8iUw7fxcYyLS9hgYn2MHIodEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:6c:62:b9:ac:bd:2f:5f:64:20:3b:f2:68:6a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424fd1a3a0258dcca67fc9dddbf4e36157e6a716
Validity
Not Before: Sep 4 21:00:52 2026 GMT
Not After : Sep 5 21:00:52 2026 GMT
Subject: CN=d71f348ce8c6e764ffed9d7c8e18849d05bb9645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d3:e7:09:6c:7d:7c:f9:ab:67:4e:1b:2a:55:
fa:ef:f4:5d:d2:f3:30:f5:48:a4:0a:02:d8:b4:45:
cd:37:04:6d:dd:59:95:41:fc:89:e2:46:18:fd:94:
86:e9:a3:7d:ff:d9:eb:a6:1f:35:d0:3c:b9:47:b6:
74:69:9c:92:60:6e:e5:91:5d:f4:35:83:f1:13:6a:
66:7b:02:5a:6d:cb:6e:3e:e8:4c:ae:f6:ab:28:89:
fc:f1:4d:95:a6:cc:be:cc:8d:15:7b:a4:ae:82:cb:
b7:ad:44:75:24:a3:38:74:8b:54:72:d1:02:8b:0a:
77:11:2a:91:cb:dd:65:02:1d:d4:c9:cc:e2:84:ba:
6e:8d:02:e0:36:f2:60:5c:2c:c6:e4:b5:10:f5:c9:
d7:08:fc:55:32:1d:74:b6:ee:0e:1a:cb:4b:3b:9e:
79:f0:5d:a1:59:3a:03:a5:90:48:1f:8e:a7:ba:b3:
03:ad:fc:3b:f7:d9:e0:15:0a:29:2b:3c:4f:ca:86:
1c:f8:9b:55:1e:db:57:ca:06:f1:46:d4:de:d3:0a:
ad:46:d7:5a:85:01:70:dc:20:88:cb:86:93:0b:e8:
09:5a:5e:50:44:a1:15:48:8c:f5:c6:d7:88:ed:4d:
79:ea:86:15:19:13:cb:37:ff:4d:7e:53:f1:84:7a:
85:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1F:34:8C:E8:C6:E7:64:FF:ED:9D:7C:8E:18:84:9D:05:BB:96:45
X509v3 Authority Key Identifier:
keyid:42:4F:D1:A3:A0:25:8D:CC:A6:7F:C9:DD:DB:F4:E3:61:57:E6:A7:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/913752-b8dc-4dff-8667-747b0e57ab5e/1/Qk_Ro6Aljcymf8nd2_TjYVfmpxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:26:b0:49:f2:7c:5e:79:01:b6:a2:f3:3d:37:01:34:86:2b:
44:1a:49:9a:74:2d:67:3f:ba:ce:da:e6:e0:d5:0b:e7:2c:2c:
f4:a1:26:61:6a:2d:14:fc:60:e8:1f:20:6b:ac:ad:4e:04:9d:
6b:04:6c:9d:65:e9:27:41:c3:40:2d:58:8a:69:08:48:68:8b:
37:ee:ff:44:44:dd:95:a5:c3:82:50:71:1a:bd:29:4d:81:c5:
31:a0:57:6e:48:da:b4:01:86:b5:96:ce:4c:96:6e:c5:9d:71:
88:47:0e:14:56:d0:cf:d8:ae:32:6a:83:d9:62:c8:6c:d8:10:
1d:a5:10:d6:a2:a4:6d:f8:73:ba:b2:aa:24:e8:57:f2:73:8e:
c0:d1:44:fc:5a:04:7c:4b:f4:b7:3e:34:18:a1:20:62:71:72:
ac:27:aa:99:8e:e0:0e:d7:25:bb:b3:ec:59:56:1f:2d:2b:61:
27:76:94:d5:a9:9c:8f:48:52:85:e6:37:b9:16:bf:ce:c6:e4:
3a:f3:13:21:c7:4f:de:27:72:63:c8:36:8a:6a:b6:a5:57:33:
40:5f:71:dd:7f:bc:c9:b5:84:7a:1a:ed:4a:12:8e:9b:26:3c:
5b:66:16:af:49:0a:39:c0:83:83:c7:53:43:ea:41:4d:40:48:
9c:09:7d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:37:43 2026 by rpki-client