Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
File: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft (raw, json)
Hash identifier: Y46O1aHyT4HVjYC9g1Ny0zzQnATzgkf09P80ThOhQH0=
Subject key identifier: 52:7E:E7:E4:50:53:D1:EC:38:B4:59:B1:42:E0:AD:4D:A7:95:FA:D8
Authority key identifier: 41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
Certificate issuer: /CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Certificate serial: 01A08C7AAFACC4D35A4F59BCF4FF6AE594C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
Manifest number: 1A4D
Signing time: Thu 10 Sep 2026 18:00:45 +0000
Manifest this update: Thu 10 Sep 2026 18:00:45 +0000
Manifest next update: Fri 11 Sep 2026 18:00:45 +0000
Files and hashes: 1: 16Of3nkjMP8UdSS9id5ZJPl_uic.roa (hash: 3kAPeMDB74ONzDFPUBPrWjZx5ADHmGueRoPekMbbEgg=)
2: QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl (hash: 240LKyWMx6Grno7D+bUbHSLG+BwN9hx8Mf6BBgAT7hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:af:ac:c4:d3:5a:4f:59:bc:f4:ff:6a:e5:94:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=418df868f7d9e98d4fd41e6da597a283c9141b44
Validity
Not Before: Sep 10 18:00:45 2026 GMT
Not After : Sep 11 18:00:45 2026 GMT
Subject: CN=527ee7e45053d1ec38b459b142e0ad4da795fad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1a:4f:48:fd:0d:15:80:5d:a0:67:73:ab:91:
86:99:5b:1c:35:8c:1d:82:ca:00:4c:3d:94:2c:b6:
49:f8:c9:20:fb:9e:bb:1a:b4:bb:a7:55:2b:c1:c3:
ec:c3:dd:87:70:da:78:1f:43:c6:3c:fa:81:56:18:
ae:f0:eb:bd:73:93:2e:d5:7e:17:84:bd:c8:0c:7b:
a1:90:3b:26:da:bf:84:6e:7f:4b:d0:ac:b1:b3:83:
f2:2c:6f:a6:b9:51:91:53:36:0d:03:4d:b7:31:9c:
a1:96:cf:74:a6:ec:d6:75:50:60:82:5c:a1:7d:6d:
ac:fd:66:e9:fc:e8:b2:34:50:74:d4:d8:9d:fd:62:
7e:a8:1d:07:57:3a:1c:5b:ff:fe:a9:5d:ed:8b:fe:
81:2f:93:24:64:81:fe:56:21:0b:74:20:48:e0:08:
e0:79:4b:03:94:fa:db:f2:e1:af:06:12:53:32:85:
bc:9f:c9:5c:0f:01:23:18:c1:1b:6a:57:11:28:d4:
8c:f7:8d:45:8c:05:f8:d7:cb:8f:99:f1:02:24:5e:
b0:d6:af:d1:8f:d1:83:d1:db:69:fa:18:55:16:14:
2d:7c:69:fa:5e:71:b7:65:d0:c8:c4:62:51:fb:97:
a3:1b:a2:65:ea:6a:8f:8d:56:1e:5a:f5:3e:b6:aa:
6b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7E:E7:E4:50:53:D1:EC:38:B4:59:B1:42:E0:AD:4D:A7:95:FA:D8
X509v3 Authority Key Identifier:
keyid:41:8D:F8:68:F7:D9:E9:8D:4F:D4:1E:6D:A5:97:A2:83:C9:14:1B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c6f86d-f795-419f-ad31-ee9c3452cbaf/1/QY34aPfZ6Y1P1B5tpZeig8kUG0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2d:7c:b1:6a:4b:38:79:b7:89:1b:c5:40:ba:4e:da:89:79:
c0:d2:d7:27:21:6f:81:13:82:0e:4a:59:8e:86:34:31:98:84:
d3:cd:89:f3:bb:82:6c:56:e9:03:b8:6b:40:e3:a7:d5:cb:5e:
e3:a1:ea:f6:d5:2e:98:38:d1:27:b7:63:ca:34:3a:0d:58:7c:
6a:e0:a1:8e:27:65:ee:11:a1:3d:08:84:a7:b6:9b:e2:39:b0:
ac:bd:35:2a:ad:23:6b:14:c6:bd:31:44:27:bb:ef:63:25:cc:
30:11:3a:35:30:4f:cd:9e:fe:d6:b0:2d:a1:5e:67:78:a1:e1:
81:5b:c5:ae:f2:d6:9c:a2:d3:4b:27:0c:43:cf:0b:09:9f:3e:
00:d1:86:67:91:83:14:33:7d:dd:20:1b:0d:6e:e1:4a:03:e8:
29:32:78:57:80:d2:c9:c7:9f:cb:2c:34:cf:a4:57:e9:76:3d:
7e:4a:48:c6:82:c0:6f:e0:bf:98:7e:5d:58:c2:05:78:c7:3e:
64:fd:47:f9:bb:f0:6c:6d:39:6c:94:0d:a3:1a:ac:e8:c8:ca:
29:56:17:aa:9a:46:06:9f:d0:ac:0c:48:86:ab:6b:fb:7a:f1:
9b:58:94:13:71:ed:25:e6:c8:d0:30:29:30:d7:f3:da:68:4d:
98:18:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:04 2026 by rpki-client