Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
File: Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft (raw, json)
Hash identifier: Enzc3Pgrii8zy93qPx1l/SpaF6WVqlVMvo0p5/7NWZU=
Subject key identifier: 68:30:81:E9:8B:77:39:91:A1:13:2C:0C:28:DA:EE:11:92:6E:A1:2C
Authority key identifier: 42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
Certificate issuer: /CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Certificate serial: 01A0CD112E1C7792E164049D37176A478EFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
Manifest number: 1A72
Signing time: Wed 23 Sep 2026 07:00:50 +0000
Manifest this update: Wed 23 Sep 2026 07:00:50 +0000
Manifest next update: Thu 24 Sep 2026 07:00:50 +0000
Files and hashes: 1: Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl (hash: fLl9NS6YEhRouOGOCMVIK4rGcDTLCZgB1220TYXqDZc=)
2: wSVDY4D_BTNkmAglY_HeZ285NQM.roa (hash: ZEnBPvLpoohK2SLbOe4ksZss1TrPkGCglvZY4UbgGD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:2e:1c:77:92:e1:64:04:9d:37:17:6a:47:8e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cde365d7d2b58506e4d4abf0c2ef7cd5e3b462
Validity
Not Before: Sep 23 07:00:50 2026 GMT
Not After : Sep 24 07:00:50 2026 GMT
Subject: CN=683081e98b773991a1132c0c28daee11926ea12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:cd:82:20:49:30:4a:59:5a:ae:c4:ed:3b:
08:3f:c2:2d:d7:64:2e:57:6f:c7:94:37:78:97:57:
cf:96:01:97:c5:58:2b:fd:05:45:c6:87:f3:99:42:
c2:6e:17:c1:79:96:08:74:b9:dd:ad:7a:be:b6:1a:
a4:66:78:f8:23:13:cb:9f:e6:2d:4b:79:8f:b0:c4:
3c:10:94:77:1d:6c:9c:46:19:e3:2a:bb:e0:2f:f9:
b5:34:56:7f:04:c9:ba:dc:cb:af:91:e5:8b:1c:16:
d4:5a:f1:d1:fa:92:ed:59:cc:f6:22:7d:71:d4:b5:
fe:25:fb:ea:14:af:06:e1:13:23:12:7e:74:d9:19:
e7:6a:ba:6e:66:e6:51:90:30:3d:0a:69:7a:0c:4d:
2c:91:58:9d:c5:59:11:90:c1:78:aa:95:d4:db:48:
79:bc:d0:69:90:cc:26:eb:b2:8d:cd:e6:a6:26:06:
f5:d3:55:b5:94:99:ce:67:7c:56:b1:58:e6:1f:b1:
3b:d8:3e:61:91:e2:5d:ea:6e:da:cf:71:2f:77:7f:
f5:d4:98:06:c4:a1:0e:9d:08:3d:52:ab:43:31:c5:
07:14:90:40:96:dc:3a:38:a7:40:61:65:c7:47:4c:
2a:d9:61:87:86:59:c8:04:2c:d8:cf:df:c3:dd:41:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:30:81:E9:8B:77:39:91:A1:13:2C:0C:28:DA:EE:11:92:6E:A1:2C
X509v3 Authority Key Identifier:
keyid:42:CD:E3:65:D7:D2:B5:85:06:E4:D4:AB:F0:C2:EF:7C:D5:E3:B4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs3jZdfStYUG5NSr8MLvfNXjtGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54018c-01e8-417f-856a-02e1bd6050e5/1/Qs3jZdfStYUG5NSr8MLvfNXjtGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:a2:c3:e5:5e:28:b2:9e:b2:53:98:65:e0:8e:9b:90:ae:9e:
5b:be:7e:21:11:04:b6:44:b3:2b:69:f8:64:4f:49:b2:65:e8:
54:93:88:44:71:1a:b9:6b:65:79:b9:fa:82:7d:47:9f:1e:6a:
e8:0d:09:7b:b9:bc:d5:03:62:af:1d:e9:39:e4:12:c2:8c:0b:
c8:86:fa:a7:d3:78:96:44:78:35:ed:25:27:98:24:63:5f:2a:
b4:af:5a:7b:ca:2c:e2:2b:1e:aa:7c:f3:94:cb:d9:bb:1e:f3:
51:48:c1:36:0f:f3:76:01:c2:d0:57:3c:15:91:0d:30:56:ca:
17:a8:73:0b:01:07:48:27:d2:56:cb:26:f1:9e:85:cd:62:b0:
0c:69:73:b8:9e:e1:a0:63:13:79:86:5d:ce:69:79:a0:99:27:
23:25:61:00:1d:e3:cf:6f:a4:15:9a:64:37:00:19:25:d8:3f:
0d:77:a3:e3:42:4e:f3:46:9e:c0:77:55:70:82:ec:db:a6:14:
fb:7c:75:3a:b4:85:d6:17:8f:f7:ad:f6:15:aa:9d:a3:e4:d7:
6a:7b:47:d5:5f:4d:c9:6c:71:76:71:e6:aa:b9:54:1a:b8:67:
96:aa:3e:2c:e7:6d:a8:63:18:8b:b1:17:42:91:95:0b:0e:a8:
c0:d7:9e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:37:04 2026 by rpki-client