Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
File: QLt2qpbfjrfWd3s1clLhEVUjh4U.mft (raw, json)
Hash identifier: kcIXi+FWeMNqz+OKd57MC68eIzKJLbUkKLa6LAASGTU=
Subject key identifier: 51:F9:D3:B8:9F:99:FF:0F:51:83:0E:5A:B3:84:8B:C2:12:95:3D:62
Authority key identifier: 40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
Certificate issuer: /CN=40bb76aa96df8eb7d6777b357252e11155238785
Certificate serial: 01A1065C8C2D4918614A608C6C1DC454B21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
Manifest number: 17E0
Signing time: Sun 04 Oct 2026 10:01:30 +0000
Manifest this update: Sun 04 Oct 2026 10:01:30 +0000
Manifest next update: Mon 05 Oct 2026 10:01:30 +0000
Files and hashes: 1: QLt2qpbfjrfWd3s1clLhEVUjh4U.crl (hash: rGH2VErpFEA2bIlzPpsQfyTlguGnw65S8AHsCCoX074=)
2: lXeVvSBTU7kT9plGVLjP1SeM5e8.roa (hash: d6HLCVnG+FtyHmH62hlZHwElrQ46SkYz4wdJECCi/g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:5c:8c:2d:49:18:61:4a:60:8c:6c:1d:c4:54:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bb76aa96df8eb7d6777b357252e11155238785
Validity
Not Before: Oct 4 10:01:30 2026 GMT
Not After : Oct 5 10:01:30 2026 GMT
Subject: CN=51f9d3b89f99ff0f51830e5ab3848bc212953d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:89:e8:dc:00:6a:f0:47:57:19:5d:ac:52:
20:09:42:6d:d1:80:09:d8:cb:1a:e8:59:ab:12:ae:
13:c0:47:2c:d7:b5:08:e0:b6:a9:2c:a8:7f:35:3d:
cd:2f:7e:06:ef:7d:cd:9d:3d:ef:6d:e2:ce:34:68:
ac:fe:e3:89:ff:1d:63:14:ca:d4:63:40:ef:09:c9:
b2:aa:4c:4b:45:33:09:14:14:c9:a0:b7:d5:36:0e:
41:d8:d8:8c:01:d1:e7:d7:ab:cf:ae:e3:dd:f2:a2:
5d:7e:64:23:d7:e5:a0:f5:d4:d6:fa:5b:11:66:af:
8e:3f:28:b4:9e:9c:4c:4c:30:4a:d8:3f:0b:c6:66:
db:56:b4:d2:5b:e7:e9:23:96:a9:5f:9e:f6:12:e0:
52:12:7b:ef:de:eb:7e:52:7d:c2:2e:ff:72:d8:a6:
13:98:11:09:34:5b:0f:e3:8d:0d:a4:e2:08:99:77:
e4:03:db:3d:63:e2:18:fd:15:00:65:50:c7:c0:19:
8b:08:2b:da:33:60:a2:ff:06:2a:d1:8e:45:2d:36:
73:65:d7:e4:22:d9:11:08:04:de:90:ca:97:2c:cd:
36:d7:c5:60:41:3e:6f:dd:b7:99:2a:bc:d2:37:70:
42:04:21:4f:3a:52:c8:55:2b:9f:66:8a:c5:29:f3:
92:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F9:D3:B8:9F:99:FF:0F:51:83:0E:5A:B3:84:8B:C2:12:95:3D:62
X509v3 Authority Key Identifier:
keyid:40:BB:76:AA:96:DF:8E:B7:D6:77:7B:35:72:52:E1:11:55:23:87:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLt2qpbfjrfWd3s1clLhEVUjh4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e31d68-cb63-4bd1-99b9-35ee7a739fd9/1/QLt2qpbfjrfWd3s1clLhEVUjh4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:05:a8:c1:10:4d:f1:3b:e1:20:49:8b:82:00:95:2e:27:7a:
13:d7:af:0a:99:61:15:8b:a2:72:83:4a:d6:1f:95:ca:71:f8:
e6:e0:c5:ed:31:5a:25:ed:cd:d3:75:6d:02:d2:8b:8c:de:8b:
b9:e3:a8:47:bc:30:e4:cd:83:12:f0:0b:e0:4f:70:57:05:a8:
83:1d:33:15:fd:8e:cd:86:66:f3:ea:c6:c1:6b:4f:77:28:bd:
c7:e7:41:2a:d3:6c:d8:b0:72:7c:96:b1:f8:36:86:ad:a8:35:
3b:c1:2f:15:c1:b4:07:78:2b:11:86:a5:46:98:55:44:a0:61:
d0:6f:66:f0:6a:e9:dc:8c:71:44:b7:91:fa:58:d7:4b:dd:c7:
41:03:c8:70:da:2c:61:63:70:33:80:10:02:58:af:fc:a6:16:
8d:60:d0:4f:ff:56:63:7d:a6:4a:8c:a0:62:33:74:1f:19:3d:
14:ef:b5:ca:db:00:16:12:e9:2b:97:6c:85:ce:7f:b0:d4:59:
42:24:72:3f:e4:d5:4a:88:5e:96:ba:d8:a2:16:2a:fe:f5:5d:
c0:4f:75:c7:1e:41:d7:13:50:19:ae:e6:56:05:b3:16:c3:d1:
e2:5b:4e:ff:8b:da:5d:10:e3:f8:ea:2a:ad:cf:b4:da:de:a1:
4e:ca:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:35:47 2026 by rpki-client