Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
File: QhLmk-jn-4sxqoVTsw2VvvBINyk.mft (raw, json)
Hash identifier: jpb8WRiN/muhlpSHWnJ6mVwCryEEpaI98ZkjA1AhUo8=
Subject key identifier: 1D:45:F0:2F:E4:E3:BE:80:D3:6E:28:91:1A:B9:1A:96:91:2E:F0:77
Authority key identifier: 42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
Certificate issuer: /CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Certificate serial: 01A089E76BBBAA776992AD73657D8E65A40A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 06:00:39 +0000
Manifest this update: Thu 10 Sep 2026 06:00:39 +0000
Manifest next update: Fri 11 Sep 2026 06:00:39 +0000
Files and hashes: 1: QhLmk-jn-4sxqoVTsw2VvvBINyk.crl (hash: ztPhf/TqHOP8u1GxNJYYopVyhRPrHkjC95vWeicqZC4=)
2: m00WEi-KUhPZOZ6m8xsbkwzAAqQ.roa (hash: 7OLk561MR7BV3oxXePdGss3bEUcPG6YjZLBOYNNOHXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:6b:bb:aa:77:69:92:ad:73:65:7d:8e:65:a4:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4212e693e8e7fb8b31aa8553b30d95bef0483729
Validity
Not Before: Sep 10 06:00:39 2026 GMT
Not After : Sep 11 06:00:39 2026 GMT
Subject: CN=1d45f02fe4e3be80d36e28911ab91a96912ef077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:36:ff:af:2e:af:27:6e:ae:cf:ab:23:2c:14:
32:4b:a2:94:7b:ba:74:32:6c:62:2f:15:7e:65:e6:
00:11:bc:39:0b:99:11:62:33:d5:5e:4b:47:95:e8:
99:f1:59:e9:bf:8f:f4:c1:1c:16:0f:b6:16:b4:66:
cb:25:d7:6f:5b:e1:3e:ad:73:d9:b9:fd:75:8b:57:
21:16:e5:86:3e:b8:34:e1:11:ad:55:52:66:7e:5f:
e8:fb:2f:01:2c:b0:be:9f:0e:0d:a9:09:b6:9a:9c:
47:30:c0:75:7d:54:16:41:cd:2c:8f:d9:6d:7b:66:
6f:de:54:b9:ad:d8:b1:75:50:fa:75:5d:aa:c2:c2:
6c:4d:85:fb:3e:18:64:10:20:a0:0a:34:64:b6:13:
a6:74:1b:11:a0:8e:7b:3d:10:26:f7:3a:bd:46:60:
e7:4e:74:3a:87:93:22:b6:15:6c:12:92:6d:c6:79:
1a:fc:85:b0:2c:50:ae:46:da:a6:ab:bc:ff:7c:52:
89:15:b2:26:2b:af:ac:60:7c:d4:c1:5b:96:10:57:
37:94:6e:2a:7b:ec:28:d1:a9:93:b4:d6:72:3a:7e:
d2:43:43:09:5e:61:28:54:91:74:d8:df:7e:34:2b:
2f:05:2f:28:ed:7b:a8:1e:25:69:4b:12:f4:db:6b:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:F0:2F:E4:E3:BE:80:D3:6E:28:91:1A:B9:1A:96:91:2E:F0:77
X509v3 Authority Key Identifier:
keyid:42:12:E6:93:E8:E7:FB:8B:31:AA:85:53:B3:0D:95:BE:F0:48:37:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhLmk-jn-4sxqoVTsw2VvvBINyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e21325-9910-47e8-99cc-75a555c8fb41/1/QhLmk-jn-4sxqoVTsw2VvvBINyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a1:29:9b:50:7a:dc:8e:9e:a2:30:5d:76:2c:04:ad:ac:74:
1d:51:c6:ca:d2:25:fd:a6:d2:2c:81:4c:50:36:a4:8e:dc:93:
8d:34:8e:81:cd:12:c1:da:b8:83:c9:a4:5c:98:a7:43:5d:d0:
f9:fd:2b:9b:29:a0:d2:ad:76:45:38:28:1a:ba:d0:34:0b:d7:
30:f7:72:aa:a4:80:1e:57:44:9a:3c:38:a2:14:77:5f:f0:e6:
02:bb:f6:06:bd:a1:1c:cd:74:3c:dd:e5:bc:3c:56:29:bb:18:
ae:87:1f:56:76:48:b3:5e:e2:7a:a1:50:06:30:e9:2f:60:6b:
29:eb:3c:38:f6:1a:c2:f5:63:bb:cc:b1:e2:16:74:c1:88:aa:
fa:f2:e5:3c:6b:4b:1b:8d:08:ba:fe:6d:cf:44:76:01:9b:ff:
c5:72:de:3e:64:2d:47:2c:7a:c1:ce:f0:17:4b:17:04:66:18:
8b:9d:c7:d4:63:5d:69:1f:85:e4:5b:5b:a3:38:e5:d4:f1:2f:
53:8d:8c:c1:d9:95:71:42:13:7d:a9:88:aa:51:15:ce:a9:9a:
03:c4:84:6f:dd:5f:2c:20:8f:f8:19:b0:d4:b1:f7:1f:c7:fb:
49:75:49:bb:ea:4c:99:0b:6b:48:8d:79:a0:f6:98:8d:c3:6e:
11:09:a9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:25:42 2026 by rpki-client