Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
File: Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft (raw, json)
Hash identifier: h8z24RqAzEKzgUyqfhqXvyzwfyDyiB0TWVuQ6C7SeIc=
Subject key identifier: 35:07:58:75:9D:70:3E:45:1A:F9:89:CA:2D:43:A5:10:1C:16:53:32
Authority key identifier: 42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
Certificate issuer: /CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Certificate serial: 01A08CB19A8939ED5C362409221BCB5D6AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
Manifest number: 0938
Signing time: Thu 10 Sep 2026 19:00:44 +0000
Manifest this update: Thu 10 Sep 2026 19:00:44 +0000
Manifest next update: Fri 11 Sep 2026 19:00:44 +0000
Files and hashes: 1: Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl (hash: Gu48vFuvKxTM5r8YqPLLZLJclQkSyz9DiWlMLcC9s2E=)
2: gODxSRHwWTf0AdhEf-vZlAdcT8Y.roa (hash: 3YgISHwQEuO0iWUQza0xD+9L4RrntGi+pZDu8veL4Yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:9a:89:39:ed:5c:36:24:09:22:1b:cb:5d:6a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42383dcfc9d399f0397a881a4b6a6ee6ae161822
Validity
Not Before: Sep 10 19:00:44 2026 GMT
Not After : Sep 11 19:00:44 2026 GMT
Subject: CN=350758759d703e451af989ca2d43a5101c165332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:af:fa:b2:15:65:9b:da:06:e9:86:f1:b7:16:
b4:d2:2c:69:d4:5f:cb:df:d5:81:de:38:cd:bf:98:
9b:09:c0:b2:19:9f:c7:6e:2a:2a:60:8f:85:13:a0:
4f:8f:c5:af:d3:56:83:d4:0b:63:be:09:5d:3f:f7:
6a:90:a1:a4:28:5a:17:af:f5:d0:d9:ec:38:fc:a3:
65:b0:16:3a:78:95:7d:50:a0:dc:de:86:b6:e7:f8:
24:77:14:03:2e:ef:6b:3a:83:d9:69:6d:1c:29:8c:
9b:e0:15:db:93:f9:8d:ca:6a:a7:be:cf:29:68:aa:
65:3a:8c:49:54:73:f2:0f:f2:dd:d6:a2:20:4a:46:
53:c0:ba:e7:3b:e3:8d:e1:af:df:c7:67:d0:00:4d:
fa:be:a3:e9:bf:67:d7:b0:1c:cf:67:9d:3b:36:16:
2c:3b:36:b3:65:35:8c:fb:d5:05:05:f4:f3:5e:04:
ec:78:b9:38:76:22:d2:99:e9:53:94:7e:0a:04:97:
a5:14:44:72:c5:5d:48:e8:7e:7c:ae:c5:7e:45:1d:
87:6e:ac:1e:4a:45:97:6b:f6:c8:09:de:76:aa:3a:
3f:40:c6:67:1e:76:db:71:7c:a4:6a:76:13:e1:60:
23:a8:50:11:3e:1e:ce:02:f8:32:14:ca:97:3c:8c:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:07:58:75:9D:70:3E:45:1A:F9:89:CA:2D:43:A5:10:1C:16:53:32
X509v3 Authority Key Identifier:
keyid:42:38:3D:CF:C9:D3:99:F0:39:7A:88:1A:4B:6A:6E:E6:AE:16:18:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qjg9z8nTmfA5eogaS2pu5q4WGCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/6ab40e-59a0-4843-ad31-f880d0cae090/1/Qjg9z8nTmfA5eogaS2pu5q4WGCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3d:35:17:f8:ee:df:e9:eb:0f:9f:17:56:e0:17:aa:05:04:
72:db:e0:c0:4a:3a:c1:84:59:cf:88:21:bd:3b:62:01:59:8f:
e5:a9:1b:1e:bc:43:f3:ad:60:95:59:7b:09:7a:7b:90:85:4e:
82:f2:69:a0:21:a5:b6:b5:0d:4b:d9:bb:cf:ea:78:cb:6e:1d:
65:7b:31:8e:43:39:01:6b:d7:89:19:8b:fb:3a:72:0c:b2:a3:
2c:58:a2:12:13:16:2a:7d:fa:97:f9:3a:26:46:a1:e8:4a:08:
2f:b1:e4:5d:2b:2f:fe:92:ce:d8:ac:eb:76:eb:ea:97:b0:dd:
cf:6b:52:30:42:74:59:38:a7:95:b7:20:6b:3c:0b:f2:be:b0:
27:ee:a9:9d:2b:f3:fe:d9:f4:83:c5:0d:ef:65:af:cc:36:4e:
ac:c9:dd:3f:78:5c:10:91:fb:8b:af:1c:1e:dc:5e:8c:2b:5e:
bb:ed:5d:e6:f2:98:86:c1:7d:3a:08:dc:0d:ab:ec:3c:fb:43:
c1:83:52:04:4e:81:d5:8d:15:85:dc:d0:80:ae:a6:7f:1d:c6:
a9:36:b6:e0:09:c3:3c:24:a8:cb:d4:3d:65:a5:9d:83:4b:fd:
34:f1:9c:ad:0e:9c:e9:89:70:b5:db:6e:d2:05:52:32:f8:24:
97:26:60:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:48:33 2026 by rpki-client