Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
File: QsMDcZht9dVk7mcHRxe2agL_VxI.mft (raw, json)
Hash identifier: lww+Nmo4qaxYyxCmaYfIFfKkOO45Y9iM6kccbNL8bk0=
Subject key identifier: DD:D1:AB:A4:CB:7F:48:AC:03:F8:B7:E6:46:19:BC:36:AF:C7:FA:E2
Authority key identifier: 42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
Certificate issuer: /CN=42c30371986df5d564ee67074717b66a02ff5712
Certificate serial: 01A0EBF9325D57FCE34B980FC44D4E990712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
Manifest number: 196B
Signing time: Tue 29 Sep 2026 07:02:52 +0000
Manifest this update: Tue 29 Sep 2026 07:02:52 +0000
Manifest next update: Wed 30 Sep 2026 07:02:52 +0000
Files and hashes: 1: QsMDcZht9dVk7mcHRxe2agL_VxI.crl (hash: jQowva8epZbYNgirSPrSPuyJwxaHmTBRCShESSwRp0E=)
2: kIdKfcVB8xoU-jL0GS61sHZEdFc.roa (hash: 0PfvIN3m+RMyfBShY3gPVZh53Z/48yCnaRs0eMSULZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 07:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:f9:32:5d:57:fc:e3:4b:98:0f:c4:4d:4e:99:07:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c30371986df5d564ee67074717b66a02ff5712
Validity
Not Before: Sep 29 07:02:52 2026 GMT
Not After : Sep 30 07:02:52 2026 GMT
Subject: CN=ddd1aba4cb7f48ac03f8b7e64619bc36afc7fae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:da:84:db:a5:6d:29:f2:37:9c:65:f7:09:d9:
3c:3f:ec:d6:d5:78:fb:50:1f:fb:f8:be:b4:86:66:
41:de:b0:cb:ae:89:c0:e0:32:bc:b8:45:fc:a8:74:
e7:23:62:be:fc:9c:8a:f4:f9:0b:78:75:24:39:cf:
a1:de:3f:c0:bf:81:bc:19:3e:eb:93:ad:9b:e8:4d:
4c:c2:91:7b:a9:3f:bf:58:bf:48:3a:4a:e8:13:93:
0a:61:b8:f6:4a:c5:e4:3d:14:2c:69:5e:ae:37:9b:
37:a2:8a:f5:2e:21:14:93:30:7d:9a:65:25:eb:7c:
90:2b:ac:06:17:d1:53:dd:af:f8:4d:1c:c5:78:34:
17:56:79:93:71:d3:eb:b3:21:a7:af:bb:1e:45:a1:
11:82:8d:bc:c6:66:fd:03:fa:14:69:24:7c:4d:1b:
4b:8e:54:ed:f0:3c:bc:ea:c8:3a:06:fe:59:35:6f:
c8:61:5d:44:d9:28:4d:10:99:f2:e6:2e:3a:55:3f:
f3:50:87:ca:b4:63:4c:c3:e8:ca:47:1d:d8:aa:9c:
4b:7e:fb:3b:74:32:ab:c3:1e:f9:5f:0f:da:2e:5c:
8c:3e:cc:f4:5f:21:fb:b2:8b:df:01:ce:fd:16:bc:
d4:4d:78:b1:27:98:fe:12:5f:78:f1:6a:04:b9:89:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D1:AB:A4:CB:7F:48:AC:03:F8:B7:E6:46:19:BC:36:AF:C7:FA:E2
X509v3 Authority Key Identifier:
keyid:42:C3:03:71:98:6D:F5:D5:64:EE:67:07:47:17:B6:6A:02:FF:57:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsMDcZht9dVk7mcHRxe2agL_VxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/8ba0dd-2fbb-4a6f-9a37-c2454ce28d48/1/QsMDcZht9dVk7mcHRxe2agL_VxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:57:42:69:27:07:a2:7a:8e:99:58:3b:ea:80:15:d1:bc:8e:
95:79:a7:0d:06:e9:fa:6e:96:68:7e:cd:4b:0a:cb:db:ae:e4:
5e:2f:07:4f:e2:ca:d9:78:e5:53:8c:41:82:2a:85:e1:04:a1:
9c:34:01:eb:af:9e:44:d2:6f:cf:fe:93:29:ea:71:d1:fe:70:
a5:65:bb:0b:cb:8e:c4:39:7d:d6:d9:4c:16:5d:f7:46:40:e6:
1b:60:32:b4:63:85:27:a8:02:8c:fe:cf:1b:d5:ff:c2:41:3e:
5a:b1:11:36:a7:88:b7:88:6d:e3:e5:a4:ac:7c:a6:e7:17:2e:
3e:3c:39:45:e5:f9:fd:14:3f:e9:1b:cd:ba:41:5d:e4:e4:bb:
d3:9a:5b:a1:a7:d6:4a:1b:d1:e4:c0:73:14:a2:c1:c3:aa:f5:
e7:42:d9:c1:e9:ea:82:66:54:b1:92:3c:62:76:3d:b6:30:2d:
05:54:03:24:a8:a1:2a:ec:2c:a7:78:c7:9c:f2:e1:db:c2:f9:
01:a3:a0:1f:c2:cb:cf:13:fc:7b:23:26:f7:b4:fd:6e:e5:bd:
ab:0a:54:a1:db:71:a0:17:19:43:b6:7e:93:dc:27:44:aa:4f:
75:18:ef:69:05:d6:e3:8d:f8:a3:d2:89:48:0e:78:b8:d4:cf:
99:f9:9b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:09:32 2026 by rpki-client