Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
File: QYHCLrezLZAdElcA4UDrYAncxto.mft (raw, json)
Hash identifier: KftsssFlkGLnOQeRl54bTAOCc6SSHnm7cxSVys3K3qE=
Subject key identifier: 33:9C:BD:EA:46:6A:54:6E:59:F5:95:D1:BB:5E:A1:AB:DE:6C:60:F9
Authority key identifier: 41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
Certificate issuer: /CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Certificate serial: 01A088D4E7DD64AED81133F5E42B6016637A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 01:00:49 +0000
Manifest this update: Thu 10 Sep 2026 01:00:49 +0000
Manifest next update: Fri 11 Sep 2026 01:00:49 +0000
Files and hashes: 1: QYHCLrezLZAdElcA4UDrYAncxto.crl (hash: 0a57lbMq/+a3dp/+Kbt9NBBnVRvF5jJhtvUMPc90ao4=)
2: amR_0Ln3b6oWcaZ7obIng9Z_o0U.roa (hash: tbRCRQaFz7cg1epOgNM5Qx0T+ZaSIikRXHm5/Cmw7WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d4:e7:dd:64:ae:d8:11:33:f5:e4:2b:60:16:63:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4181c22eb7b32d901d125700e140eb6009dcc6da
Validity
Not Before: Sep 10 01:00:49 2026 GMT
Not After : Sep 11 01:00:49 2026 GMT
Subject: CN=339cbdea466a546e59f595d1bb5ea1abde6c60f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e3:cd:c3:4d:e7:61:45:9f:c6:1e:10:9f:be:
e7:62:7d:8d:55:6a:c0:93:9e:76:a0:92:72:04:c1:
62:9f:17:de:c4:09:83:20:92:f2:1c:90:0a:9b:9f:
fd:3d:af:0d:9d:3b:cd:8e:aa:f4:79:79:8c:5d:2f:
47:01:2d:11:9a:02:6f:6f:93:fe:24:9b:fa:75:92:
3d:e8:74:99:37:1c:cf:ce:7b:18:6d:56:4f:59:ee:
3e:87:9f:7c:e7:f6:90:ca:30:30:76:9b:b9:58:b7:
62:aa:bb:24:f6:c2:fb:8a:99:63:f4:78:35:0c:58:
2c:0d:0e:21:94:fb:64:a9:5c:61:48:bf:2a:c6:c3:
60:57:92:7c:3e:ba:89:25:ac:41:e8:2d:8f:23:6f:
90:24:4b:27:38:cc:b5:27:f4:28:cb:64:ba:36:d8:
15:44:4b:03:5f:10:bd:1c:ef:7f:b0:16:8d:ac:11:
63:7a:a5:c7:ac:e1:40:bc:ea:1c:a8:aa:40:c5:ad:
7d:f0:ba:38:ca:ed:82:4f:d4:1f:56:33:43:d2:ab:
64:4f:a2:18:cf:c6:b8:10:2c:12:b5:b2:3b:7a:57:
cf:b2:74:47:17:91:43:e6:fc:55:e3:84:29:a2:81:
fc:28:dd:49:5a:90:10:b3:0a:7d:cb:b6:2b:2f:32:
7e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9C:BD:EA:46:6A:54:6E:59:F5:95:D1:BB:5E:A1:AB:DE:6C:60:F9
X509v3 Authority Key Identifier:
keyid:41:81:C2:2E:B7:B3:2D:90:1D:12:57:00:E1:40:EB:60:09:DC:C6:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYHCLrezLZAdElcA4UDrYAncxto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/ffdaf5-acaa-4df3-9e6c-c21409442fac/1/QYHCLrezLZAdElcA4UDrYAncxto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:16:c1:f2:76:94:c0:11:6e:ac:d6:44:0a:50:a8:68:cb:b5:
a6:80:e1:e9:08:2b:fb:5c:89:e8:d6:ee:8d:7a:d7:b5:9c:17:
ac:64:cb:b3:05:99:f3:e2:d1:0c:5e:ca:17:f3:7a:60:7b:f0:
57:8a:85:3f:23:dd:dc:85:8a:59:67:fb:c7:3d:cf:e6:6d:b5:
63:7d:fc:9c:21:77:7c:2e:24:e3:da:ff:3a:73:c9:68:18:68:
e6:b0:33:dd:e2:08:1a:d0:f2:1d:24:60:ce:73:c8:35:48:06:
77:d1:ef:a0:ca:74:31:76:6c:44:12:22:6c:d7:f8:8b:ab:16:
d1:8c:54:df:7e:1d:76:c6:18:0f:d8:d0:42:df:ef:20:ac:7e:
cc:95:e1:7a:9d:0b:d9:f4:95:3d:85:a0:e5:ba:2b:d0:e6:d1:
ca:23:89:91:ac:3f:01:79:aa:0b:da:23:46:40:40:1d:4a:1f:
16:49:98:3a:0e:0a:fb:27:a0:fd:8b:ee:27:a6:bf:a5:3a:16:
97:70:29:69:1c:49:19:f3:8e:54:9c:a7:0e:db:94:47:69:a0:
17:2a:55:ba:c1:75:b5:7f:34:1a:65:76:f2:cf:6b:3c:af:cb:
23:70:90:ca:91:e7:01:cf:ad:69:84:9a:19:1d:10:17:0e:5d:
54:33:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:27:12 2026 by rpki-client