Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: A+rx3gZZHc/FloIXUdH8V+Rf8owih+2JtxvVclON4go=
Subject key identifier: 32:F9:8B:62:A9:20:39:92:3A:D9:45:E4:C3:40:D6:8D:FD:38:52:BB
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 019FF67DE857BEA01462DE1DD3874CD23C09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: 01E8
Signing time: Wed 12 Aug 2026 15:01:14 +0000
Manifest this update: Wed 12 Aug 2026 15:01:14 +0000
Manifest next update: Thu 13 Aug 2026 15:01:14 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: jgADXX2PkSCmrscW3xsYvpOuusFfn4vOSNUq+ex02rE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:7d:e8:57:be:a0:14:62:de:1d:d3:87:4c:d2:3c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: Aug 12 15:01:14 2026 GMT
Not After : Aug 13 15:01:14 2026 GMT
Subject: CN=32f98b62a92039923ad945e4c340d68dfd3852bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:a3:66:58:6f:47:66:b0:6f:ea:16:50:a5:
91:97:75:7f:88:89:dd:63:58:ad:89:38:35:36:71:
08:0c:f5:3b:6e:86:4d:17:6d:f2:b6:b3:09:e1:52:
d3:03:a1:10:d2:38:bd:75:55:3a:33:6f:b4:1d:b3:
c6:18:b7:9b:82:27:5c:25:49:29:53:78:81:1d:10:
cf:e4:ae:5a:c3:eb:fc:29:d8:77:b8:a5:0b:ba:b0:
82:be:41:f5:a7:6f:13:bd:0e:40:c8:37:04:e2:42:
a6:f5:31:2a:c0:b2:bc:58:9e:04:0c:40:d9:21:2a:
14:4b:88:a8:83:05:cc:46:f2:a1:38:7f:0e:3d:41:
d5:af:78:2c:e3:a6:df:bc:f7:95:42:d1:8d:df:8b:
8c:57:01:ca:db:5b:8e:94:d3:75:44:2e:92:d8:1c:
fc:c5:26:61:21:1e:57:17:53:86:38:5b:23:34:31:
42:2d:3f:35:c0:11:14:4c:cb:88:40:a1:17:a7:d5:
a6:a7:e0:18:a4:c7:1f:ea:63:e0:d5:e3:da:43:03:
4f:80:85:f6:aa:be:4f:1d:98:a2:b8:74:1b:67:76:
09:bf:d9:af:f8:8f:11:c9:64:76:c9:5d:14:d0:dd:
31:4a:a7:af:8e:00:26:cd:ae:84:d0:31:9a:3e:3e:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F9:8B:62:A9:20:39:92:3A:D9:45:E4:C3:40:D6:8D:FD:38:52:BB
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fd:c0:65:43:cd:36:e3:e7:86:56:9f:30:26:eb:78:d9:ec:
02:c3:92:f4:bf:e5:cd:ed:ad:bf:7d:95:8b:2a:f1:b9:86:80:
5a:63:86:0e:5b:c6:21:10:45:8a:69:70:25:20:24:8b:b4:2e:
bd:01:21:8d:7f:02:90:e2:bf:df:0d:23:e9:5e:70:71:80:57:
1e:1b:5a:1d:31:0a:06:71:cb:1f:f6:7b:08:36:a0:d5:51:7c:
d1:96:27:24:6b:e5:59:71:7f:e5:e3:8c:dd:92:6d:45:4b:dd:
f7:02:92:90:61:6a:fe:d4:d2:ac:c7:cd:9a:22:bf:a3:ae:3c:
69:8f:b0:ee:4a:5d:dc:8f:51:3e:8d:f6:14:65:62:1b:69:5a:
38:e8:11:7c:21:08:2f:58:b1:af:25:5f:10:d5:3b:2b:2a:d6:
2b:4b:73:d4:0d:40:9e:6b:69:e4:bc:f9:ca:bd:00:4e:53:8d:
72:f3:0b:0f:d2:1c:f8:65:e7:47:e0:b0:89:de:b1:dd:8d:14:
6a:98:92:e5:ec:a7:96:96:ca:f2:d8:d8:78:9b:2b:da:0d:64:
91:fa:0b:2c:1b:2a:ce:b7:82:da:6b:9e:a5:03:f3:8d:47:52:
fa:dc:f0:d7:ec:27:76:d2:c7:33:a8:14:8a:96:ac:10:1c:82:
6f:80:74:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 19:29:40 2026 by rpki-client