Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
File: QNTjO-cdM587wMxtrmXoeS_01dw.mft (raw, json)
Hash identifier: qOcMP7gi9++N1s/RnLFeaH5jO586g9rTuZYZFy0IA+I=
Subject key identifier: CC:38:9A:98:4A:AC:3E:42:06:B1:A2:42:76:D3:CF:B7:2F:66:4A:D3
Authority key identifier: 40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
Certificate issuer: /CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Certificate serial: 01A0C632CEC7111219791B862DC775C57943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 23:00:13 +0000
Manifest this update: Mon 21 Sep 2026 23:00:13 +0000
Manifest next update: Tue 22 Sep 2026 23:00:13 +0000
Files and hashes: 1: QNTjO-cdM587wMxtrmXoeS_01dw.crl (hash: 2kUN7AONoJbVoW5xHrHCbpJl7UU+u5/lsNqyoV/GWOk=)
2: Ynb6_GOJr5BWsmssnmCiWT1fn7w.asa (hash: 1LS6QFZFhpfMUxXS4QP7dupHPq2LjjbAwscSCeUJDT8=)
3: uI_1KbkZIzvy3UFDfb5otHjxgXg.roa (hash: UQMNIvWBKb3xfqjEuaI3AXKNpWm9JLUIJVsw2I/E4EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:32:ce:c7:11:12:19:79:1b:86:2d:c7:75:c5:79:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d4e33be71d339f3bc0cc6dae65e8792ff4d5dc
Validity
Not Before: Sep 21 23:00:13 2026 GMT
Not After : Sep 22 23:00:13 2026 GMT
Subject: CN=cc389a984aac3e4206b1a24276d3cfb72f664ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:77:e8:09:37:ba:6d:0c:92:90:3b:85:2d:
0b:52:d8:96:10:14:19:e3:49:67:a4:ea:76:a3:43:
c1:27:a0:2e:34:00:58:51:da:ff:19:ca:df:69:81:
f9:13:92:58:e4:80:7d:84:82:fa:5b:d4:c3:4b:42:
7c:43:0a:55:95:b2:32:2b:9e:ae:34:f0:5a:11:7d:
5f:ff:0e:13:62:00:f7:7b:49:7c:9e:1b:90:95:93:
6a:fb:16:80:20:c9:d0:9c:b3:80:99:21:bf:2d:1d:
be:fb:2b:f6:53:48:40:dd:57:b8:e8:0e:ec:45:af:
0f:98:61:91:85:f0:f0:15:1f:f2:38:fd:bc:5f:97:
20:06:a4:32:4f:ec:0e:06:5c:81:aa:21:4c:77:fc:
1c:39:0f:2b:59:03:56:25:14:28:54:90:09:b8:86:
f3:d3:ab:a1:ff:9a:18:d7:2b:e6:d6:a8:44:9a:eb:
02:9c:58:76:43:78:00:e1:41:ae:2a:81:b5:0b:45:
ab:9c:3a:77:49:db:80:d0:90:d5:21:96:48:dc:8e:
fe:b9:59:8e:53:34:00:be:32:b6:a3:ec:23:19:2f:
4d:13:a7:c4:60:5f:ea:d6:83:84:a6:4e:f6:33:da:
3a:57:de:2a:51:ad:03:c0:06:1c:88:6d:c1:4a:7e:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:38:9A:98:4A:AC:3E:42:06:B1:A2:42:76:D3:CF:B7:2F:66:4A:D3
X509v3 Authority Key Identifier:
keyid:40:D4:E3:3B:E7:1D:33:9F:3B:C0:CC:6D:AE:65:E8:79:2F:F4:D5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNTjO-cdM587wMxtrmXoeS_01dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ac69d2-9299-49b0-91c8-0233b7b26d5d/1/QNTjO-cdM587wMxtrmXoeS_01dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:12:10:bd:95:7e:23:7e:50:8b:70:d5:f6:83:c9:ee:46:eb:
fa:00:3a:3b:85:cc:4a:69:e2:d7:a6:06:f8:cb:ed:d4:d2:f9:
e9:b9:da:b2:7f:da:61:8d:c2:2a:7b:85:9e:02:c5:6f:b8:4b:
75:e2:87:e9:e5:65:16:04:a0:e2:34:db:c8:25:10:34:3f:c7:
ed:78:35:b0:f9:1a:80:ba:f4:9c:81:42:c1:5f:4e:cc:d5:90:
10:81:ce:15:46:ba:2d:3b:57:6d:1c:6a:0a:7d:c5:82:de:6d:
b2:05:b6:dc:63:39:fb:82:0e:3c:c7:77:f7:eb:6d:cb:71:cb:
56:b9:57:56:51:65:22:1e:e6:66:b8:b8:e4:87:99:20:38:56:
ec:e6:f1:b1:bb:ac:6e:ec:5e:b2:f9:e1:e9:a3:2a:26:78:97:
a5:d8:f5:31:de:15:44:b3:0c:09:a3:05:b4:0d:34:6f:a2:28:
52:d4:cd:98:9d:4f:5c:d6:7a:e9:8c:4e:ed:3c:c1:82:5f:da:
65:32:b9:23:e3:cb:31:9b:d8:08:6f:0b:3f:27:50:00:1b:83:
0b:36:f5:db:24:3b:e1:a4:9f:1e:30:52:de:81:34:66:c5:31:
6e:67:d2:0b:b4:ef:d3:91:75:fe:31:df:82:92:63:cf:7f:c0:
44:e5:ff:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:43:01 2026 by rpki-client