Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: 0W4I0K/ln9ycLk05tEQNqZbybqdxWMtI9NM5jh4Czqc=
Subject key identifier: E0:1A:42:FF:45:A8:B7:69:72:88:7E:F8:9B:B4:B3:1F:09:6A:87:75
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 01A08F0E1F2747FC32EC60E48372887AAB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 1A4B
Signing time: Fri 11 Sep 2026 06:01:02 +0000
Manifest this update: Fri 11 Sep 2026 06:01:02 +0000
Manifest next update: Sat 12 Sep 2026 06:01:02 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: rucHQXJg25CPIVWp4qG+vXB/HrT2QJbCHY71ZXXe4aA=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:0e:1f:27:47:fc:32:ec:60:e4:83:72:88:7a:ab:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Sep 11 06:01:02 2026 GMT
Not After : Sep 12 06:01:02 2026 GMT
Subject: CN=e01a42ff45a8b76972887ef89bb4b31f096a8775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:5a:ea:11:48:5d:a0:b8:91:5c:03:a6:8b:
01:75:fb:10:6f:c9:19:57:c9:53:8f:66:af:be:92:
ca:78:94:bc:56:70:5a:ab:1d:76:5b:8c:42:d9:de:
63:b6:fc:49:49:41:1d:90:7c:bb:9b:f3:69:ef:4d:
19:f4:cb:29:04:f2:38:26:1b:87:92:c7:f3:65:d5:
5f:2a:dd:f9:f0:67:08:d0:d7:f7:43:00:97:39:96:
cb:3a:80:3d:70:e1:a9:4d:b2:f0:0f:ba:8a:06:03:
a6:0e:b6:3e:1e:0e:3f:45:fe:45:4d:c4:b0:37:63:
61:0b:d5:d9:37:f2:4f:d4:68:e9:65:b0:d7:e7:6f:
6b:aa:34:e7:af:bd:ec:ec:55:71:98:e7:95:58:5e:
58:f0:41:f1:09:92:1a:ee:fc:78:1e:61:dd:8b:84:
22:a0:8b:6b:d5:f8:1a:bf:d9:c2:90:14:33:da:04:
a0:40:05:18:ce:6a:37:09:66:14:47:ad:3a:9f:83:
e0:1c:9d:13:52:52:a6:99:e4:63:3a:85:90:fa:f6:
0e:b9:6f:0d:22:01:d5:ef:a9:04:a1:95:c0:4f:7c:
f9:43:97:18:0a:1a:35:6c:c1:8c:64:4c:17:54:28:
e3:ea:ae:ac:29:30:c5:f7:f1:97:10:f4:09:06:52:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1A:42:FF:45:A8:B7:69:72:88:7E:F8:9B:B4:B3:1F:09:6A:87:75
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:4b:85:2a:b0:cd:a6:cd:c7:8a:d1:d8:78:6a:27:15:9f:db:
a7:f1:e0:25:5a:7c:fb:14:03:8c:64:e2:0f:38:f9:7d:c1:88:
cb:4f:9a:01:68:28:95:9f:e6:fa:4f:e3:79:71:e0:59:d4:46:
e1:19:eb:7e:d2:49:c6:2c:cb:01:29:a8:30:2d:68:6f:90:80:
f6:65:16:e5:1c:83:3e:fd:be:c7:94:21:e9:42:42:ed:45:3f:
0e:2b:4c:12:83:b5:d7:49:7f:d8:e6:41:ff:33:0c:39:7b:0e:
07:d5:bd:fb:ab:14:25:22:a4:44:94:30:19:b7:e8:57:64:6f:
ab:35:ec:68:99:41:79:8e:40:9a:57:1a:5b:64:04:31:83:b2:
9d:36:11:88:2a:3d:0b:cc:37:5b:87:2e:27:ed:06:b3:31:a2:
ed:a6:f2:3b:6e:4e:5b:86:56:86:1d:97:f0:78:90:8b:5c:e5:
32:72:48:0f:12:65:9a:da:62:b8:fa:d8:99:28:37:11:6f:59:
9f:aa:fb:85:9b:6d:2f:88:0c:a0:79:13:04:51:fa:f3:22:81:
4b:26:07:91:96:95:a7:97:ac:53:b7:d6:4d:b0:e6:00:02:45:
6c:9e:83:2b:0b:54:7c:68:0b:05:b2:1c:0b:2b:8e:82:aa:a5:
a5:64:35:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:37:57 2026 by rpki-client