Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier: EVh5RNEuE9yDnCteJ+SzaPeZbwhOpFsHID2Lx0MVaVs=
Subject key identifier: 28:FE:6C:4A:E3:B2:80:01:FA:A8:CF:D0:5D:11:9D:58:4A:92:14:7F
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 01A0C8214F9C1C006D0767B6ADEB49AAD190
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number: 1085
Signing time: Tue 22 Sep 2026 08:00:21 +0000
Manifest this update: Tue 22 Sep 2026 08:00:21 +0000
Manifest next update: Wed 23 Sep 2026 08:00:21 +0000
Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: GovCMdejBFwR4CmhPTvINj0LJ3QwPOjqHdz5VxxUKDk=)
2: yaEEybz2NfCWEApyu2Dzx2yLpcI.roa (hash: j2pzI49xHsyv/Ol3MBefWz6almNV2xHEmt1n4qjR/Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:4f:9c:1c:00:6d:07:67:b6:ad:eb:49:aa:d1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Sep 22 08:00:21 2026 GMT
Not After : Sep 23 08:00:21 2026 GMT
Subject: CN=28fe6c4ae3b28001faa8cfd05d119d584a92147f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:2c:8f:66:29:56:8e:12:cb:c1:05:24:6c:
6b:c0:72:5c:60:a5:f6:06:d4:59:7b:b1:7b:75:85:
2c:3d:e3:ad:52:9f:0a:7f:ba:e9:6b:45:2a:36:71:
de:ba:c2:a2:c0:9c:b7:c2:c0:87:2c:30:d6:3f:50:
da:4e:6a:43:71:7d:99:1b:d3:54:17:7e:77:b3:85:
49:31:8d:7c:d4:bf:19:7a:fb:ec:ba:e3:9f:9a:f4:
c5:68:9e:72:fc:86:b2:36:7f:4d:a8:03:63:e0:de:
29:68:91:3d:e7:24:2b:ed:69:4b:93:8a:67:cd:49:
63:fe:01:b7:f1:75:d4:f3:a7:e8:5d:3b:6a:5f:05:
fd:63:01:8d:e4:1a:07:b9:fd:0e:7e:6f:c4:bb:a2:
4f:5e:59:00:14:01:bf:9b:73:d2:73:b6:c4:09:e9:
eb:38:17:9d:49:bc:46:1a:14:75:59:9e:63:aa:6a:
94:cf:2c:a8:15:57:e9:4b:cb:b7:2c:77:9a:99:ed:
54:c5:66:32:e5:12:ef:5b:2c:6e:4a:e8:ef:31:79:
89:ff:fa:24:0a:84:51:a9:aa:0f:98:bd:8e:db:2c:
cf:a9:3c:87:0e:ea:d1:76:3c:72:e5:07:19:04:8e:
19:08:e6:c7:a8:3d:a8:eb:02:27:76:cb:f8:7d:b4:
d7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FE:6C:4A:E3:B2:80:01:FA:A8:CF:D0:5D:11:9D:58:4A:92:14:7F
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:73:3e:e6:ec:95:7e:82:3f:f6:d4:68:3a:cd:75:14:b6:cf:
e0:7b:bc:1d:c5:11:48:f4:dc:cd:79:0c:f7:3f:6e:d7:fc:20:
ab:ab:27:4a:90:bb:a4:0b:7d:2b:54:e6:d5:a2:77:2e:19:f3:
74:ed:93:5b:32:d8:cc:88:8e:c3:43:26:16:be:d1:58:37:2f:
d5:93:a4:b7:35:b5:76:a2:bb:38:79:40:92:e2:d3:41:fb:d7:
e3:c3:64:b3:59:b8:3f:38:cf:ff:ff:d1:14:b3:db:4e:a4:0f:
8d:ec:96:ac:a1:d9:65:8e:7d:f5:46:f8:ca:d4:b6:c0:0e:dc:
70:0e:15:16:56:88:95:f4:83:d0:45:a0:12:ea:ab:51:c6:80:
fb:13:3a:8f:cc:84:51:11:53:71:2c:10:8c:d4:c2:0f:62:de:
b9:68:b2:53:72:1b:d3:aa:c1:42:ef:a5:5e:1e:8e:d7:32:05:
72:c6:2d:ed:19:f7:d6:fc:3c:fc:e9:95:6e:e3:a7:ab:1d:0f:
13:d7:90:d3:f8:26:8f:7f:bb:3e:ca:aa:3b:4a:29:ee:7f:20:
30:3b:05:3d:5a:9a:b9:fc:d7:16:37:c7:7c:57:49:c9:d5:22:
0f:fd:88:b2:80:0b:51:db:f3:05:5e:4f:2f:e9:45:61:18:30:
a1:49:bf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:55:25 2026 by rpki-client