Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
File: QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft (raw, json)
Hash identifier: UITdCj3CzSXA7NlAn69Tawmagm14QxPhXk+bTzp+xJc=
Subject key identifier: 76:D2:0B:32:3F:BF:10:2C:18:3F:98:8A:E1:A2:C5:79:11:5E:D8:C5
Authority key identifier: 40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
Certificate issuer: /CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Certificate serial: 01A08A55979B5FEF37CDBE95ED88F8BD7ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
Manifest number: 0761
Signing time: Thu 10 Sep 2026 08:01:00 +0000
Manifest this update: Thu 10 Sep 2026 08:01:00 +0000
Manifest next update: Fri 11 Sep 2026 08:01:00 +0000
Files and hashes: 1: QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl (hash: 93V1yQZTTpX68eCj0GHG5QbbYEtW+PNbST1wNUeb724=)
2: b8TCzlfofvmQBp5ln0FqUlWHxqs.roa (hash: mibgsDF2vOF5jB0BgxSZtBehyAPFLfMy1370e6o3F+E=)
3: tVgtWKf3hovbROlWOuakv2HBNcQ.roa (hash: tZH+J6Wky64drRqnuI4atQm17bvmIikThIiw7SOfunU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:97:9b:5f:ef:37:cd:be:95:ed:88:f8:bd:7a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40518ecbd6464d78ad451551648f9206f7fb5f42
Validity
Not Before: Sep 10 08:01:00 2026 GMT
Not After : Sep 11 08:01:00 2026 GMT
Subject: CN=76d20b323fbf102c183f988ae1a2c579115ed8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:fd:0d:68:33:89:48:9d:b2:46:f0:aa:71:
1f:ec:c5:9a:e7:2e:dd:a4:55:3d:8e:9d:8e:25:ac:
09:b3:8e:63:1b:3b:6a:0d:0f:30:d3:84:09:70:7e:
9e:ad:c6:be:6e:50:0a:3a:56:6d:60:e5:61:4e:a2:
03:c6:c8:98:db:dd:a6:90:94:ec:3f:5d:d1:18:20:
0c:21:b5:34:ed:05:12:96:86:ef:b8:a3:f7:4d:d9:
6e:c4:83:54:c3:9b:a0:26:7d:1d:ad:b3:07:06:ee:
e5:04:fa:a8:79:26:a0:55:46:35:43:ee:09:e4:1b:
ef:80:26:bc:a9:5b:65:bb:00:47:bf:30:b8:ae:bf:
16:ec:e7:24:29:dd:7a:39:cc:06:71:ba:83:2a:02:
04:d0:fe:b8:df:c7:16:1d:b1:6b:bd:27:bb:f0:cd:
d7:09:7e:12:5b:fb:e4:f6:9f:4d:9f:3c:1f:f5:c0:
77:54:bc:49:88:56:0a:ad:d5:20:57:8f:2b:9e:2d:
2c:9e:c9:25:87:ec:70:32:d4:cd:b2:ee:61:1f:ce:
6f:b7:b0:c4:41:ec:97:ea:ac:16:e6:bb:a9:7c:18:
11:31:e7:dc:b3:6e:88:36:4e:24:1a:98:f5:b7:ff:
56:09:18:4d:b2:2a:a5:b9:a4:95:e2:29:f9:df:a1:
ea:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D2:0B:32:3F:BF:10:2C:18:3F:98:8A:E1:A2:C5:79:11:5E:D8:C5
X509v3 Authority Key Identifier:
keyid:40:51:8E:CB:D6:46:4D:78:AD:45:15:51:64:8F:92:06:F7:FB:5F:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFGOy9ZGTXitRRVRZI-SBvf7X0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/437150-783c-431a-b3fd-7c3d79401ec2/1/QFGOy9ZGTXitRRVRZI-SBvf7X0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b9:bb:f1:cb:89:f4:72:5e:07:ed:32:51:69:5d:a9:8b:f8:
9c:b5:6d:22:f5:9d:8a:28:4c:91:cd:60:cb:a4:bd:e0:a3:1a:
32:83:65:a0:19:d2:9e:f0:fa:4f:6f:9c:29:77:f7:f6:67:a7:
8a:16:b7:96:c9:2b:4e:83:6b:7c:57:80:f2:22:52:b4:b9:84:
09:a1:52:04:41:79:26:ff:0e:b7:8d:cf:9a:40:b6:b3:ae:59:
fb:16:9d:33:1a:6a:a4:be:af:2e:08:6d:31:9d:5a:07:d1:50:
10:fa:5e:4a:d1:b1:5c:30:67:7b:12:d9:de:e7:b1:aa:6b:65:
e6:55:3c:ce:f3:3c:25:11:50:9c:1c:e3:e7:34:94:de:f6:e5:
af:97:17:0d:9f:7d:de:ee:28:fe:49:e7:49:db:da:c6:70:d2:
b8:43:fe:0d:cb:6c:68:cd:3f:fe:3e:af:45:e6:b4:32:de:e8:
1d:d0:91:3b:08:bf:3f:c1:ee:e8:a0:10:d5:d4:dd:53:4b:14:
6e:65:39:f6:79:80:f1:8d:a5:6c:e4:2d:03:6b:e7:50:7d:44:
e3:f2:33:41:0a:86:6b:14:8c:54:7d:63:9f:06:80:b1:00:7f:
c1:41:03:2b:57:db:9c:c1:6d:87:23:b2:58:91:fc:59:0f:94:
b0:1f:78:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:45 2026 by rpki-client