Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: J+qk1RBgALLsfRp36lGYA12bojPs7UL7d+SYMykC7cY=
Subject key identifier: E9:61:E1:DA:72:43:51:CB:E8:60:8B:B3:CF:69:02:0C:D1:DB:1A:22
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 01A14195982AB68CE3F92D22936D3B70F911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 22:01:25 +0000
Manifest this update: Thu 15 Oct 2026 22:01:25 +0000
Manifest next update: Fri 16 Oct 2026 22:01:25 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: V1p8QwxwkVTiXFiwMp1GIiU+zhQmQpZcL0nn6O0GkOo=)
2: RMmBnfd1TCGUmEC2O6JokpnQVQ8.roa (hash: wPMgtMcsG/KMNrN9/altEtQua2Hm0vaKQpeGiiY5B3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:95:98:2a:b6:8c:e3:f9:2d:22:93:6d:3b:70:f9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Oct 15 22:01:25 2026 GMT
Not After : Oct 16 22:01:25 2026 GMT
Subject: CN=e961e1da724351cbe8608bb3cf69020cd1db1a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:5e:a9:c2:48:96:83:a0:b8:6b:59:e0:31:
86:8a:e6:db:e9:a6:f4:25:b0:00:d8:04:ec:42:41:
9e:77:35:52:fa:2b:94:5f:a0:10:2e:35:5c:33:89:
c3:eb:71:51:9b:98:a4:70:d8:80:d4:08:2a:19:9f:
c8:16:c1:08:9d:e8:2e:9d:0a:5b:27:82:86:57:17:
82:d6:e1:c3:08:5b:c3:19:75:88:50:db:e7:c3:fb:
30:33:ef:d9:af:8c:f5:da:5e:50:4e:cd:f4:08:d2:
68:c0:8d:86:10:35:9c:8c:99:88:6d:73:bc:61:b5:
66:fc:23:01:ac:8c:f7:be:e8:b6:63:39:d5:9f:a5:
4a:5d:20:64:09:3e:8a:b8:e9:4b:62:ba:98:66:9e:
92:cc:3c:53:11:35:00:71:1b:a3:fe:ef:0d:bb:df:
06:aa:0e:9d:d0:aa:65:e8:3a:3b:b9:fa:73:af:bd:
84:98:56:c9:8e:29:1f:1f:5a:c0:81:10:6e:e3:4a:
a3:b4:d3:5e:63:1b:1f:d4:a0:5a:56:b1:93:9f:a6:
6e:35:9c:f0:12:68:ca:3c:6b:58:62:6e:16:b4:e3:
b6:b7:64:71:6e:cd:8d:b5:cd:77:1c:3e:29:ec:7f:
ce:ba:0c:bd:fb:e4:f8:fa:1b:62:56:dc:53:f8:f9:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:61:E1:DA:72:43:51:CB:E8:60:8B:B3:CF:69:02:0C:D1:DB:1A:22
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f3:7f:ac:67:60:31:de:09:f6:5e:5d:5e:d4:dc:e9:7e:62:
7c:84:c5:1a:d2:04:aa:c4:8b:26:4b:96:94:f7:21:74:7a:93:
a7:9a:cf:77:64:c3:60:97:b2:de:ca:59:dc:85:04:e1:82:82:
4d:cb:44:8c:34:2e:45:67:0c:7f:64:64:bc:48:fd:f5:15:27:
b5:a9:a2:c8:70:10:cd:7b:4a:79:3d:52:c3:9f:fb:c9:48:e0:
7e:3a:14:78:9b:e6:b4:26:fb:1c:8c:3c:75:bd:ee:7a:2f:67:
37:76:54:07:8a:55:a3:f6:a4:37:ba:08:1d:a8:e5:ab:b7:e4:
ad:80:93:9e:bb:46:c7:2d:e0:ec:22:b9:8b:3d:ab:fd:0a:35:
86:6e:f0:59:72:d3:9e:03:6c:20:a7:a0:80:e1:c6:fb:ca:4c:
55:bf:01:67:4a:e8:be:5c:7d:17:2c:30:59:60:07:35:57:86:
dc:d2:dd:d8:f6:00:26:d0:c9:af:b2:84:c9:e4:7b:a6:88:53:
2a:9e:fa:34:1e:0c:85:ca:ee:2c:ff:c2:2c:9e:90:fb:03:5d:
e5:d2:6e:b9:a6:3b:67:54:b4:dd:69:26:7c:1e:c7:d4:45:15:
4a:18:95:fa:cc:1a:fd:79:dc:74:db:bd:2e:00:e8:0e:f9:db:
8b:18:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 08:24:43 2026 by rpki-client