Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: BC0L8pAZkl64beH2m5IPmLgVtNvWuxmY1Bwf/2BVrzA=
Subject key identifier: C8:71:4E:82:3C:B6:DC:32:B7:2B:6F:A2:B2:6C:FD:EA:12:0D:90:05
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 01A12EB42E720A31BB42C17B4D314F9FDB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 18EB
Signing time: Mon 12 Oct 2026 06:02:02 +0000
Manifest this update: Mon 12 Oct 2026 06:02:02 +0000
Manifest next update: Tue 13 Oct 2026 06:02:02 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: Rs3bL06f5CvEUFhI9m+bxVNWtzsTA6wu7ML99QafjjQ=)
2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:b4:2e:72:0a:31:bb:42:c1:7b:4d:31:4f:9f:db:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Oct 12 06:02:02 2026 GMT
Not After : Oct 13 06:02:02 2026 GMT
Subject: CN=c8714e823cb6dc32b72b6fa2b26cfdea120d9005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:92:6d:ec:47:94:38:c9:ae:fa:87:c6:e9:4b:
45:8e:04:90:60:b1:f1:05:7b:fb:75:d4:77:3e:ae:
a8:45:51:b9:1e:ce:01:e3:42:40:ec:29:ff:66:d9:
45:02:52:3a:38:9c:96:cb:cf:77:40:7d:78:9b:f5:
0e:c5:3d:eb:d9:77:87:b7:fa:8a:33:14:5e:02:3d:
20:c6:04:d8:58:07:88:4d:c2:6c:81:99:0d:f1:6a:
9d:ef:00:96:e2:45:11:e4:75:49:58:ef:4d:a0:e0:
ac:a8:2d:60:28:3f:46:8a:e3:e4:6d:82:25:5d:e8:
bc:a1:3c:b0:f9:bf:56:7b:de:c7:00:01:16:6f:0d:
cd:8d:b0:71:0d:c4:ff:ab:7a:12:98:4e:d9:f4:9d:
85:43:00:ae:d9:bb:e0:8f:56:6b:f6:0e:d9:e5:14:
32:b4:5a:87:69:f4:03:14:7c:a0:09:de:07:7e:cd:
63:cd:40:02:3d:a9:96:bd:a9:ff:ed:e8:43:ee:eb:
ed:41:c9:9c:53:20:b6:c6:21:5a:83:98:ec:af:b5:
2a:e4:8b:a4:2e:34:7a:2a:f1:8a:fa:b2:fc:65:c6:
a6:86:9c:59:56:fb:6a:66:63:4d:72:f1:ec:ad:78:
0d:73:ef:79:9f:7b:24:09:98:63:69:9f:b3:fb:b7:
37:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:71:4E:82:3C:B6:DC:32:B7:2B:6F:A2:B2:6C:FD:EA:12:0D:90:05
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:38:85:d3:c6:9b:bc:6d:16:49:39:2e:9c:4d:74:af:eb:53:
db:78:d8:2d:35:6f:c0:b1:dd:21:17:91:ec:fb:9d:d7:45:52:
ae:2a:4d:93:1e:50:45:bf:02:49:02:71:fb:88:9b:e5:97:98:
58:70:66:76:8f:95:9a:6e:64:a0:9a:ba:53:d4:54:66:90:81:
80:8b:ed:67:e2:5a:fe:44:0f:ca:66:61:a7:68:85:34:cf:4c:
18:a8:89:85:54:d7:29:b3:bf:06:0a:27:c8:6c:2c:9f:d7:e9:
55:be:29:bc:0a:02:1e:cc:f7:69:e3:fe:33:86:d8:bb:b9:02:
2f:86:35:8f:37:67:62:c3:ea:4f:8f:7a:6a:6e:59:68:92:bf:
72:65:76:34:20:cd:65:87:ff:7f:de:ae:21:63:23:18:69:23:
cd:7a:34:4b:22:95:73:c5:f4:4b:8a:1a:a3:73:73:02:21:42:
bc:aa:ce:77:46:f5:25:7b:fd:b1:4a:53:c7:dd:b4:05:ff:05:
11:ea:f3:a6:38:56:2d:ea:a7:ab:6c:9a:a5:2d:fd:94:14:6d:
48:75:23:6f:a7:4f:18:b7:76:c6:be:52:62:f5:e7:92:5e:89:
fe:b2:9a:ab:ca:ac:38:13:f0:3c:33:4b:2e:b8:aa:56:82:f5:
37:4c:c0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:04:51 2026 by rpki-client