Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
File: QKljngI9_Ik-xp2nFrhKtdZOpZw.mft (raw, json)
Hash identifier: BlxUqzyXLqlwwTXPIG+akGzounjwl7y9JpIrPaqteks=
Subject key identifier: 2A:08:A3:C8:BA:C5:D5:28:04:10:9E:AC:A2:46:0E:EE:DF:1C:C6:8C
Authority key identifier: 40:A9:63:9E:02:3D:FC:89:3E:C6:9D:A7:16:B8:4A:B5:D6:4E:A5:9C
Certificate issuer: /CN=40a9639e023dfc893ec69da716b84ab5d64ea59c
Certificate serial: 01A1249D381D97347129EF1C5E52CD5F4B7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
Manifest number: 0102
Signing time: Sat 10 Oct 2026 07:00:45 +0000
Manifest this update: Sat 10 Oct 2026 07:00:45 +0000
Manifest next update: Sun 11 Oct 2026 07:00:45 +0000
Files and hashes: 1: QKljngI9_Ik-xp2nFrhKtdZOpZw.crl (hash: lJtK7lX8+43eA9mGaOeRohpFV1KDdx3BhRjolx9Uqfs=)
2: ou0GbJ1blaoMkgv99wOuI85TEgs.roa (hash: oR49PdheVHE66AKe4AhTIFXe+kYWY/wSYwudCN274ZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:9d:38:1d:97:34:71:29:ef:1c:5e:52:cd:5f:4b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a9639e023dfc893ec69da716b84ab5d64ea59c
Validity
Not Before: Oct 10 07:00:45 2026 GMT
Not After : Oct 11 07:00:45 2026 GMT
Subject: CN=2a08a3c8bac5d52804109eaca2460eeedf1cc68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:58:a1:31:41:09:d8:e1:2d:a5:7a:a6:14:
6d:3b:92:3e:fd:bd:83:79:f8:54:d6:d6:b9:12:64:
b3:c7:59:fb:41:50:c5:14:42:d8:d6:03:9b:ae:86:
ce:1a:af:4b:56:69:b2:f7:59:3b:a4:df:ad:3b:0f:
1a:a9:69:1d:e8:e1:23:e1:b1:af:b3:ca:24:e5:5f:
27:59:a4:47:4c:4e:8f:b9:8b:37:a6:94:94:69:c0:
df:dc:aa:e3:2e:a7:16:be:7c:f7:4c:41:68:c2:13:
7b:fc:43:98:2c:7e:c8:55:d3:e2:03:f5:a0:7a:f0:
6e:df:7b:81:97:e7:ba:e4:35:68:0c:65:6d:82:1c:
81:6e:2a:4b:ad:99:92:ad:be:75:de:80:39:40:dd:
fa:87:30:bf:be:e3:45:da:6d:02:b0:46:cf:ed:23:
a8:a6:3b:da:a6:cb:4c:b0:fd:5e:8d:11:84:5c:c0:
42:ed:5b:13:96:5e:33:a4:ec:a4:83:ec:16:3e:35:
25:75:06:72:1f:92:dd:83:48:1a:08:ce:a1:39:90:
ac:84:c5:1f:ed:8e:93:34:5f:76:b9:d4:95:9f:c9:
e4:72:d7:fb:74:61:66:fc:f2:d5:5b:e9:72:dd:ad:
50:50:ff:ba:64:85:d1:2f:e5:36:e8:6f:16:e6:6a:
c0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:08:A3:C8:BA:C5:D5:28:04:10:9E:AC:A2:46:0E:EE:DF:1C:C6:8C
X509v3 Authority Key Identifier:
keyid:40:A9:63:9E:02:3D:FC:89:3E:C6:9D:A7:16:B8:4A:B5:D6:4E:A5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKljngI9_Ik-xp2nFrhKtdZOpZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/70230f-5c0b-4308-ab4e-7af6282c2ce8/1/QKljngI9_Ik-xp2nFrhKtdZOpZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:27:e1:fe:ec:55:66:b4:c1:91:17:c2:3e:02:bb:54:87:96:
e5:98:19:b2:8a:66:2c:14:99:8b:9e:4e:b4:ec:82:b4:3c:15:
00:40:e7:de:57:57:26:2e:fa:a2:85:da:ec:5f:05:dc:e0:56:
2d:06:b9:0f:db:f0:55:29:a3:9a:d5:ab:21:be:64:6d:b2:42:
33:11:a1:17:88:4a:ed:9b:fd:0a:7a:fc:da:6f:81:cd:46:ba:
c6:30:40:1f:8e:21:be:3f:80:21:e0:27:95:72:dd:b6:25:2f:
ce:82:ba:8f:2d:4b:dd:2f:1c:25:cf:79:b7:1f:fa:42:fa:04:
45:43:93:5a:38:59:7a:82:3e:bf:b1:20:3a:8a:d5:9b:ef:b0:
3a:02:e8:ca:94:e5:07:ff:8d:43:a4:66:bf:ac:77:93:86:30:
72:80:51:93:b5:6a:2a:ed:d0:d5:ab:f9:80:3f:1f:53:c7:5f:
2c:2d:87:7b:38:61:d3:10:b8:15:bf:c8:fa:98:54:39:ad:d7:
92:ea:44:43:0c:06:f5:2b:03:73:7f:81:06:67:72:b3:a8:e7:
26:af:62:15:66:6f:c1:5b:98:bb:4c:7b:95:4a:b6:19:74:95:
54:ac:fb:5c:c5:3a:94:40:15:50:05:41:d0:29:5e:df:4c:17:
55:93:73:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:46:43 2026 by rpki-client