
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
File: Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft (raw, json)
Hash identifier: gB9SU7xEjQJwJ4MfXu0hyMZ9NbKFDN5rCyeP0C9jCSk=
Subject key identifier: AB:76:84:9A:F8:E6:75:B1:95:33:5C:32:59:F6:C3:D9:C3:A0:DA:24
Authority key identifier: 43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
Certificate issuer: /CN=4367547d851e3cd776cd33290b2454acc0e851bb
Certificate serial: 01A0C2FB7B426101B1380FBBBFD3C09DB50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
Manifest number: 06ED
Signing time: Mon 21 Sep 2026 08:00:55 +0000
Manifest this update: Mon 21 Sep 2026 08:00:55 +0000
Manifest next update: Tue 22 Sep 2026 08:00:55 +0000
Files and hashes: 1: 5sjVZOffDC3SdMXl3xj-LISTTRA.roa (hash: NgYO+E9uip8I6LBuV26/SjtRZiAA/mIEsqO23fxRKZo=)
2: Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl (hash: ga1VP7Bp/vcoVIEdwEFqb091kVS4PG2F/oRwMnPyux8=)
3: UZ8MoagtWKlsIsRGsjso-iozLGw.roa (hash: dnetz1uWniSUYV1OlTPjy0Ix9dXrnsa95CDJdNzqlUI=)
4: _PN_oCivSa6SCwOfHRvwn1IYBgQ.asa (hash: 2M4AXv8yl0hWjN/wepg6vu4DidwOliFRGd1ExPxEg/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:7b:42:61:01:b1:38:0f:bb:bf:d3:c0:9d:b5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4367547d851e3cd776cd33290b2454acc0e851bb
Validity
Not Before: Sep 21 08:00:55 2026 GMT
Not After : Sep 22 08:00:55 2026 GMT
Subject: CN=ab76849af8e675b195335c3259f6c3d9c3a0da24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4d:88:0b:26:f6:44:5e:db:aa:8e:41:ef:a2:
b1:3f:4c:fa:63:23:34:26:94:39:aa:b9:5f:64:c1:
52:5d:b8:a5:22:0f:ec:e3:ff:ba:2c:f9:57:01:53:
cc:9c:e0:d1:ad:ab:2f:cd:40:83:7c:39:ca:bf:22:
9d:e5:db:bc:9e:f8:68:79:45:51:95:ad:5d:39:6c:
53:8a:fd:35:83:12:f1:d4:45:5b:73:89:eb:b4:d1:
13:b5:4b:5f:91:ef:17:7e:f3:a1:5d:48:2d:c5:f0:
f7:ed:bf:36:6b:da:3a:4b:4f:b4:3a:9d:e5:d1:0a:
63:20:cf:51:39:62:c9:d0:a7:eb:80:a4:26:96:ad:
45:59:cc:84:e9:c8:64:13:72:c9:07:fb:73:de:cf:
81:65:b2:a2:da:3c:e9:d2:b0:0f:a3:91:22:1a:05:
bc:22:4c:6a:c9:8d:8b:73:3f:39:cf:0b:98:2b:17:
21:17:11:9f:2a:04:4f:cd:53:72:83:c4:bc:6c:7f:
3a:05:27:d7:7b:ad:a7:f3:c7:0e:01:16:c8:e3:a1:
c6:8a:87:43:09:c2:1e:46:5c:f0:28:8f:f6:a7:73:
ab:c8:27:6e:57:e7:af:bd:3a:59:56:06:3e:8a:b9:
b3:ea:d2:90:13:a0:b8:d9:08:d2:cd:6f:ee:57:40:
58:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:76:84:9A:F8:E6:75:B1:95:33:5C:32:59:F6:C3:D9:C3:A0:DA:24
X509v3 Authority Key Identifier:
keyid:43:67:54:7D:85:1E:3C:D7:76:CD:33:29:0B:24:54:AC:C0:E8:51:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2dUfYUePNd2zTMpCyRUrMDoUbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/874c85-9e7d-4ace-958f-dab7f0c8d240/1/Q2dUfYUePNd2zTMpCyRUrMDoUbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1a:1b:94:b8:b4:37:02:89:91:a8:12:42:94:c5:45:3c:9d:
35:a6:3b:8c:ad:d6:06:ee:17:eb:4a:9f:4f:7c:3c:ce:08:b8:
74:43:3a:4b:a9:b8:7b:fe:6b:21:c0:f3:62:36:03:9c:e2:83:
a4:f9:de:5a:dc:81:3d:70:ae:75:1a:bd:e3:f9:82:58:77:cf:
17:f9:49:20:f3:39:b7:f6:38:2d:64:e2:8f:ee:42:0c:72:c9:
8c:2c:97:9e:ac:db:b7:9e:c8:63:d0:d2:64:9a:30:b1:10:45:
af:83:a2:c4:b1:0e:83:7d:b6:e9:77:64:af:fc:6d:fd:6e:15:
42:bb:13:26:ae:66:01:78:df:3d:dd:87:c3:a3:6d:42:b1:85:
45:15:4a:8a:35:eb:64:2d:60:0b:43:99:6a:b1:84:97:52:e9:
cf:43:87:48:01:2c:df:1d:a7:fe:6a:34:7d:66:12:65:77:b8:
60:02:5c:c5:b4:24:25:9d:04:df:9e:92:72:dd:43:6f:41:36:
52:75:27:1f:21:b9:69:30:53:f5:80:e1:4b:78:70:e0:6c:58:
14:a5:6e:5b:b7:6d:dc:fc:b8:01:b4:af:03:7e:60:e2:64:dc:
56:94:4c:d9:66:35:85:9c:99:65:55:27:08:38:ab:55:55:e3:
7f:c4:94:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:38:14 2026 by rpki-client