Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: AMNTqmijeryAR+9k5fFEhJ5/fYtFsFx1hwHsdJ2gVKI=
Subject key identifier: 08:60:DE:8C:14:64:55:4A:87:14:C6:A6:7E:6C:FB:79:61:24:69:25
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 01A16E6E5C84BA1295F73613B1525B603993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 1AC0
Signing time: Sat 24 Oct 2026 15:01:28 +0000
Manifest this update: Sat 24 Oct 2026 15:01:28 +0000
Manifest next update: Sun 25 Oct 2026 15:01:28 +0000
Files and hashes: 1: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: ZFsOIudauoLBbc7dXTCcg2JBH/Qb5D9azegpUV6iIm4=)
2: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (hash: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM=)
3: zXqwVcwlXpQqAoueTVMdXtH7SG0.roa (hash: jcregEqkWYaC2zgOmhpk2TEJDFYrMRRaV054ziFvW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:6e:5c:84:ba:12:95:f7:36:13:b1:52:5b:60:39:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Oct 24 15:01:28 2026 GMT
Not After : Oct 25 15:01:28 2026 GMT
Subject: CN=0860de8c1464554a8714c6a67e6cfb7961246925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:41:39:77:9f:78:07:9c:2f:ed:ba:1a:09:18:
60:c0:02:a8:4d:00:d1:cb:30:f1:16:1a:00:6d:eb:
ec:52:7a:f8:41:21:5d:aa:0d:ab:4f:f1:f5:73:0c:
c7:1a:0e:f4:41:9f:b1:9a:b5:a2:48:e2:83:87:40:
3f:19:de:b8:e3:c0:9c:8f:39:99:e8:df:4a:54:de:
8c:97:c4:86:f3:49:c7:d4:db:87:21:a9:c5:b8:66:
76:f2:d5:bb:ac:14:2a:68:ad:c3:c5:48:93:f9:80:
82:c0:3a:8f:42:36:dc:be:38:2c:9e:e2:8b:2c:76:
ef:41:56:e2:c0:56:3d:2d:e5:9f:0d:89:0d:ac:ff:
0b:48:6a:5f:13:50:d5:bd:c3:f8:ce:c8:4f:ba:49:
03:0e:b6:9b:4a:1e:53:4b:60:47:e3:3f:29:5c:3f:
6b:26:d7:ef:f5:a4:86:17:ba:b2:50:58:ab:0b:26:
f4:02:f0:d3:49:c2:e5:c1:67:fc:43:fd:d2:45:35:
e7:c2:ed:67:2f:59:53:ba:17:da:9f:e9:e2:29:6d:
11:bc:ca:4c:ea:71:53:99:14:b1:6e:58:25:78:8c:
81:42:84:ed:ee:b4:78:de:6e:78:1b:9a:cd:a8:f1:
6b:c8:47:64:88:c0:12:bb:3d:7b:1f:09:af:28:bf:
4e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:60:DE:8C:14:64:55:4A:87:14:C6:A6:7E:6C:FB:79:61:24:69:25
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f3:2a:6a:cc:85:54:a7:7d:84:1d:79:53:c5:de:63:30:30:
77:c6:20:a6:b4:2e:33:07:ac:27:15:a4:be:cd:18:60:a9:a1:
56:05:b4:58:a8:e7:a6:aa:62:bc:0a:cf:4e:2b:0b:76:41:1c:
ce:83:cc:0c:3e:76:53:49:ee:d4:89:1d:b5:46:5e:10:69:ac:
b1:f5:9b:25:bc:85:c3:f9:39:15:69:75:a4:36:27:48:48:d2:
8b:e6:26:75:83:c2:17:90:4d:51:02:99:44:de:fe:07:9c:7d:
1b:ee:b2:46:fa:b0:4a:cd:ce:2e:3e:fb:3d:ac:14:39:9d:3e:
a3:4a:1d:2f:a0:f6:e8:02:7f:ef:a2:80:12:69:40:c1:8a:60:
8b:74:5b:c5:f1:3f:1e:0b:7c:5a:c4:e7:65:ff:31:b3:42:64:
eb:d3:c9:8b:6a:bb:53:df:3d:a0:a0:6f:49:13:a6:b7:47:ca:
a2:c4:80:25:ac:d5:61:bb:48:90:0b:f3:52:60:c4:0f:cf:c6:
8d:35:08:ef:fe:1f:fc:37:20:bd:d8:76:79:05:4c:0b:33:7b:
9f:6c:a8:93:ed:cc:5d:f1:80:03:a3:f1:5e:41:3f:b2:3a:50:
d7:0d:22:10:a4:9a:10:50:79:20:b3:5a:fb:e9:72:cc:e9:5e:
ca:67:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 21:52:45 2026 by rpki-client