Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
File: QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft (raw, json)
Hash identifier: 7qlZx/bRtfDhFwBubY3FVIK/pfdqsYISf6geB2husfQ=
Subject key identifier: D8:FA:8F:C4:8E:F8:03:10:3C:0B:BE:64:80:5B:1D:D7:58:AF:11:7E
Authority key identifier: 42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
Certificate issuer: /CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Certificate serial: 01A088D5474376A56EA9E2E40935C8C53BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
Manifest number: 02D1
Signing time: Thu 10 Sep 2026 01:01:13 +0000
Manifest this update: Thu 10 Sep 2026 01:01:13 +0000
Manifest next update: Fri 11 Sep 2026 01:01:13 +0000
Files and hashes: 1: QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl (hash: nxdI3M284cqYmaNkLSHC8nhCgoLcbSMn/1lEAu1f2aM=)
2: t7k_beV3qkNWRdLGwtpfAS6V7HA.roa (hash: vZai5iXmOI1X+EFyUMtGKdKYCWdym2JXQnnjYc/fJOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d5:47:43:76:a5:6e:a9:e2:e4:09:35:c8:c5:3b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d9ec5e228b4af7f03c345bc3967f51d6ff8a09
Validity
Not Before: Sep 10 01:01:13 2026 GMT
Not After : Sep 11 01:01:13 2026 GMT
Subject: CN=d8fa8fc48ef803103c0bbe64805b1dd758af117e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:de:35:c8:a3:4e:0c:06:31:0c:56:fd:ec:05:
6f:df:76:99:55:e4:58:9f:63:6e:40:f5:4a:56:0f:
6d:7f:86:f4:30:25:2d:a1:fe:ab:b0:e3:8e:b6:c0:
97:3d:25:02:df:ed:95:e7:47:47:1a:0a:ca:81:cb:
03:b2:b3:31:27:18:9a:d8:ae:db:14:f5:bb:09:c4:
b2:0d:5c:4b:7c:76:50:cf:1b:fa:fa:c6:24:b7:fd:
bb:42:9d:98:19:5b:93:15:77:0c:66:6d:65:ea:9b:
8a:31:a1:9c:de:7b:46:0d:3d:c4:d8:dc:e0:6a:e1:
1a:a6:4b:d2:51:14:2e:f5:40:e6:c1:77:76:d8:51:
bd:ba:99:01:98:1a:c9:0a:d3:ea:45:31:27:4c:67:
d5:d7:2c:33:d8:67:6a:f3:2e:8d:2b:0a:f6:89:43:
fb:63:df:c6:26:3b:d8:45:d6:e4:0e:79:78:93:f6:
17:90:89:70:19:98:61:17:2a:1d:b1:05:25:7b:b7:
3b:9d:22:3a:be:2e:48:6c:69:98:e0:fa:76:f1:fc:
82:8e:a3:a3:f5:54:8f:b1:5b:ff:10:14:a5:c8:6f:
1c:24:bc:5f:25:c9:43:2e:55:5b:02:26:41:c3:ba:
f3:71:ee:dc:8c:e4:2e:89:e6:9c:df:0d:19:9d:c0:
8b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FA:8F:C4:8E:F8:03:10:3C:0B:BE:64:80:5B:1D:D7:58:AF:11:7E
X509v3 Authority Key Identifier:
keyid:42:D9:EC:5E:22:8B:4A:F7:F0:3C:34:5B:C3:96:7F:51:D6:FF:8A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtnsXiKLSvfwPDRbw5Z_Udb_igk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/dde351-79a2-43a4-81b9-6c9b48bdbfe5/1/QtnsXiKLSvfwPDRbw5Z_Udb_igk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2a:1a:02:79:42:86:41:26:cd:d6:d4:f2:07:28:46:a7:ec:
f3:bc:4d:a5:8e:57:e2:f7:1e:8a:a9:0e:04:09:6d:47:02:1a:
b0:35:2c:c8:2c:51:1a:77:39:1a:84:01:30:84:6d:d7:0d:f3:
a5:f6:7c:87:d0:ed:e0:f7:d7:d5:ff:79:b5:f6:a7:6b:0e:a1:
50:e8:c4:9f:b7:a6:44:14:c6:ca:83:2a:98:ce:7d:99:0c:b6:
97:26:a2:43:e5:56:da:42:bd:05:6f:81:2d:71:bf:84:31:57:
0b:e2:61:6c:c7:57:06:88:dc:53:5f:e6:78:80:8b:7f:42:46:
99:c8:49:5d:a8:a5:73:8a:2d:9e:b9:47:a0:04:19:82:67:b1:
29:57:2f:43:3e:85:d1:9f:24:26:43:42:fa:79:1c:c0:d5:02:
70:28:14:63:3c:35:5d:a5:1b:2e:15:2a:84:6b:06:d4:3a:b4:
97:f2:b5:6d:5f:58:c3:6d:47:84:be:ac:80:de:32:62:45:61:
c5:34:93:ce:28:ed:ce:f3:62:0c:cb:f9:6e:0a:b8:db:5c:f6:
d4:fd:b0:01:e2:52:d8:06:72:9d:9f:9b:9b:05:d0:dc:a5:51:
e4:7e:08:7c:c4:88:f6:98:56:98:a4:ec:27:34:2a:5d:10:ef:
54:1a:40:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCI1UdDdqVuqeLkCTXIxTuzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZDllYzVlMjI4YjRhZjdmMDNjMzQ1YmMzOTY3ZjUxZDZm
ZjhhMDkwHhcNMjYwOTEwMDEwMTEzWhcNMjYwOTExMDEwMTEzWjAzMTEwLwYDVQQD
EyhkOGZhOGZjNDhlZjgwMzEwM2MwYmJlNjQ4MDViMWRkNzU4YWYxMTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0941yKNODAYxDFb97AVv33aZVeRY
n2NuQPVKVg9tf4b0MCUtof6rsOOOtsCXPSUC3+2V50dHGgrKgcsDsrMxJxia2K7b
FPW7CcSyDVxLfHZQzxv6+sYkt/27Qp2YGVuTFXcMZm1l6puKMaGc3ntGDT3E2Nzg
auEapkvSURQu9UDmwXd22FG9upkBmBrJCtPqRTEnTGfV1ywz2Gdq8y6NKwr2iUP7
Y9/GJjvYRdbkDnl4k/YXkIlwGZhhFyodsQUle7c7nSI6vi5IbGmY4Pp28fyCjqOj
9VSPsVv/EBSlyG8cJLxfJclDLlVbAiZBw7rzce7cjOQuieac3w0ZncCLgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj6j8SO+AMQPAu+ZIBbHddYrxF+MB8GA1UdIwQY
MBaAFELZ7F4ii0r38Dw0W8OWf1HW/4oJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9kZGUzNTEtNzlhMi00M2E0LTgxYjkt
NmM5YjQ4YmRiZmU1LzEvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9kZGUzNTEtNzlhMi00M2E0LTgxYjktNmM5YjQ4YmRiZmU1
LzEvUXRuc1hpS0xTdmZ3UERSYnc1Wl9VZGJfaWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPioaAnlC
hkEmzdbU8gcoRqfs87xNpY5X4vceiqkOBAltRwIasDUsyCxRGnc5GoQBMIRt1w3z
pfZ8h9Dt4PfX1f95tfanaw6hUOjEn7emRBTGyoMqmM59mQy2lyaiQ+VW2kK9BW+B
LXG/hDFXC+JhbMdXBojcU1/meICLf0JGmchJXailc4otnrlHoAQZgmexKVcvQz6F
0Z8kJkNC+nkcwNUCcCgUYzw1XaUbLhUqhGsG1Dq0l/K1bV9Yw21HhL6sgN4yYkVh
xTSTzijtzvNiDMv5bgq421z21P2wAeJS2AZynZ+bmwXQ3KVR5H4IfMSI9phWmKTs
JzQqXRDvVBpACw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:24:33 2026 by rpki-client