Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
File: QsCVkBFifd0NBX1zHo-lpRApZZI.mft (raw, json)
Hash identifier: EhMRiR2PVfHs3hn/Km/ncTE7heQBOv56GdhgR43HpCM=
Subject key identifier: 16:F6:4B:04:6B:82:42:AC:5D:2E:5F:C5:8C:55:3B:08:82:76:16:1D
Authority key identifier: 42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
Certificate issuer: /CN=42c0959011627ddd0d057d731e8fa5a510296592
Certificate serial: 01A002F005355896E6C9FBF20B4EEE5232E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 01:01:19 +0000
Manifest this update: Sat 15 Aug 2026 01:01:19 +0000
Manifest next update: Sun 16 Aug 2026 01:01:19 +0000
Files and hashes: 1: QsCVkBFifd0NBX1zHo-lpRApZZI.crl (hash: DvKTJ7DXjB82QwNiNnAz8w6yA1C0wXwMwHe1sLWJRNo=)
2: RMmBnfd1TCGUmEC2O6JokpnQVQ8.roa (hash: wPMgtMcsG/KMNrN9/altEtQua2Hm0vaKQpeGiiY5B3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:05:35:58:96:e6:c9:fb:f2:0b:4e:ee:52:32:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c0959011627ddd0d057d731e8fa5a510296592
Validity
Not Before: Aug 15 01:01:19 2026 GMT
Not After : Aug 16 01:01:19 2026 GMT
Subject: CN=16f64b046b8242ac5d2e5fc58c553b088276161d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e9:b6:4d:f8:c2:f8:85:00:81:d4:7d:66:3f:
f4:6b:c9:74:b2:b0:af:bb:0d:7e:8b:74:e0:f6:a5:
3b:0f:e9:07:29:67:a0:10:51:9d:c3:c1:41:96:fd:
30:71:27:ce:dc:a5:35:ab:c0:0a:e6:0c:ab:08:65:
75:a6:9f:69:8b:c4:63:2a:cd:1e:cb:79:2d:67:a5:
92:ab:ee:04:a0:a5:0f:05:42:c5:e8:6e:2c:d9:fa:
fd:51:16:07:ad:0e:07:50:d7:a2:58:05:2c:05:1e:
7f:fe:32:11:31:11:03:0c:fe:ce:e2:ca:af:68:d6:
a2:1a:0e:2a:56:c1:26:3c:d7:7b:96:47:db:2b:1d:
8e:b4:09:40:84:59:22:20:d8:01:5e:f7:f2:f4:5f:
00:9f:b5:af:5b:65:b0:0e:33:13:4a:da:58:7f:e1:
39:b2:2b:13:62:a8:5f:66:fc:da:1a:cf:79:bf:f6:
05:45:95:4f:a1:7d:c8:41:4f:f0:d0:37:63:94:fe:
93:70:a9:e2:1d:dd:7a:28:9b:b4:d0:53:61:04:97:
18:1e:8f:5e:b9:b0:04:9d:c6:1e:fc:45:49:56:8a:
4e:11:fe:a6:f0:52:b6:dc:30:bf:f6:8c:97:67:ac:
32:ba:98:59:3d:a9:b3:c8:e8:f0:b0:1a:6d:64:95:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F6:4B:04:6B:82:42:AC:5D:2E:5F:C5:8C:55:3B:08:82:76:16:1D
X509v3 Authority Key Identifier:
keyid:42:C0:95:90:11:62:7D:DD:0D:05:7D:73:1E:8F:A5:A5:10:29:65:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsCVkBFifd0NBX1zHo-lpRApZZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ba12cd-2e7e-40dc-ae88-248b59c3696b/1/QsCVkBFifd0NBX1zHo-lpRApZZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b5:be:c8:7f:21:95:67:55:79:e0:68:d7:70:bb:66:ef:1d:
f5:c7:8e:34:88:78:df:07:da:c9:13:fd:92:eb:77:b1:17:5b:
00:7d:a7:7f:21:4d:07:df:13:07:94:8c:78:8a:4c:62:09:c5:
bc:57:93:de:1b:b5:2e:6e:11:52:8e:52:38:59:37:99:1a:60:
d7:b9:ed:51:ae:fb:e6:bd:e7:eb:ee:22:78:60:fe:e4:6a:d1:
25:c8:c2:f3:32:91:c3:1a:0f:d0:95:6f:e6:80:8e:5f:44:a9:
ef:01:cc:e6:69:96:dd:3c:ab:8b:f2:34:e7:7b:5d:10:87:ec:
d3:7f:79:54:87:8b:3b:d6:84:a1:57:cc:a3:b6:bf:c6:bc:a2:
ef:76:cb:ad:58:f3:ee:e6:ad:d1:92:38:2d:a7:e6:dd:75:73:
cb:5b:4d:d6:03:1e:25:f2:11:da:a9:40:54:a4:da:98:34:c4:
31:c6:d8:6f:93:2c:67:6a:d4:f1:c5:e2:1b:50:8c:11:cc:f9:
e7:1b:6f:a2:17:c8:c7:3c:18:45:ed:39:4b:eb:82:04:0c:59:
a1:d1:11:b5:a8:91:e5:67:ae:77:02:b2:81:d7:45:83:ea:41:
a9:d0:cb:c2:d5:be:10:37:30:a9:7d:ae:68:00:2a:e3:3e:3d:
c2:82:58:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:00:24 2026 by rpki-client