Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
File: QeQtgw7KmKUz9DctoWnJx5LDk7I.mft (raw, json)
Hash identifier: wcVv6hDK/YaOVTgdVGpsLD+PpyCMmwN7lDWMiAMPOrY=
Subject key identifier: 45:C6:6A:11:90:79:CC:DD:FA:63:6A:E4:74:91:3E:AC:B6:34:7E:8A
Authority key identifier: 41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
Certificate issuer: /CN=41e42d830eca98a533f4372da169c9c792c393b2
Certificate serial: 01A12CC57718B7834FE638A9E95C9120A0F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
Manifest number: 1A9C
Signing time: Sun 11 Oct 2026 21:01:40 +0000
Manifest this update: Sun 11 Oct 2026 21:01:40 +0000
Manifest next update: Mon 12 Oct 2026 21:01:40 +0000
Files and hashes: 1: QeQtgw7KmKUz9DctoWnJx5LDk7I.crl (hash: 041yJ9YWyRp/kOHhVdq6fM5y3A1OCtuQvrY+vevaIQI=)
2: muJold8C5TUMixIVaL6rH1BS38A.roa (hash: FbxuoRz2634QOjJkP7NzNJtkodYJ1wTVSJlQ4uQWs58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:c5:77:18:b7:83:4f:e6:38:a9:e9:5c:91:20:a0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e42d830eca98a533f4372da169c9c792c393b2
Validity
Not Before: Oct 11 21:01:40 2026 GMT
Not After : Oct 12 21:01:40 2026 GMT
Subject: CN=45c66a119079ccddfa636ae474913eacb6347e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:48:44:1a:77:d3:41:2e:e4:78:90:b7:a0:
bc:c6:ef:49:e9:b9:8a:e4:23:53:49:40:05:ef:09:
77:35:fc:0f:48:73:c5:4d:96:85:e6:e8:8e:84:c6:
22:48:7a:26:c2:a9:f5:f2:e4:50:87:db:0a:d9:ec:
88:09:0c:ce:8e:76:28:b2:16:99:22:81:59:e3:a0:
fd:15:49:49:06:cd:06:57:86:be:d6:23:ce:77:23:
28:1b:94:d5:52:69:1c:8f:98:90:bd:3e:39:e1:65:
8f:63:d9:fa:d6:82:c0:79:89:2f:b9:13:eb:2c:7c:
54:e6:7a:d5:1b:1f:1c:8c:99:31:ac:42:f3:3c:ce:
c4:fd:e9:57:5f:d4:97:9b:f3:70:23:b4:b5:41:3f:
a2:aa:00:88:ac:34:03:bb:af:1f:2d:89:1b:60:d3:
60:81:0c:82:23:c4:4f:2d:30:c3:95:ad:f0:a5:00:
ca:a5:16:83:22:8c:9a:a8:7c:0f:65:9e:a8:94:64:
ae:71:b6:d0:f6:99:e5:6f:18:4a:ce:ff:b6:02:15:
5f:4b:d3:f3:ec:f7:8b:ee:c8:73:b1:31:7f:35:e1:
c4:1e:49:17:17:c2:d2:2d:70:84:ae:44:36:69:7c:
43:fc:d0:92:ca:96:c6:ff:b5:ff:f4:97:7b:84:e7:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C6:6A:11:90:79:CC:DD:FA:63:6A:E4:74:91:3E:AC:B6:34:7E:8A
X509v3 Authority Key Identifier:
keyid:41:E4:2D:83:0E:CA:98:A5:33:F4:37:2D:A1:69:C9:C7:92:C3:93:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeQtgw7KmKUz9DctoWnJx5LDk7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4956df-91dc-4490-8333-1ad61ede0a4a/1/QeQtgw7KmKUz9DctoWnJx5LDk7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ea:70:27:8d:14:8c:fa:7f:ff:96:a2:20:c5:48:04:bb:92:
71:da:28:a6:44:2f:46:a8:98:36:32:fb:5f:18:a3:84:6e:54:
5d:05:f1:3d:a4:f4:1d:77:1c:62:50:6f:6d:3a:77:6c:3d:97:
a9:f5:e8:dd:0e:eb:aa:ad:d7:2f:06:0c:82:17:4b:39:2c:fd:
2f:89:af:01:ac:2a:1d:c3:83:19:11:ea:2a:47:6f:e1:47:02:
2c:6f:48:07:3a:da:d0:c7:05:b3:57:d3:0d:1a:ff:23:2a:5e:
b2:08:b7:ec:46:aa:d4:58:bd:73:da:66:95:8c:86:cd:42:09:
9c:d5:b3:b0:27:78:e0:37:48:38:c6:d6:a3:9c:77:2a:a5:53:
9d:0c:4b:cc:78:06:7f:32:e9:bf:c9:a9:be:99:75:80:07:f9:
37:21:a5:39:50:99:f7:0e:10:9c:5b:01:aa:16:71:e0:6a:88:
80:8c:42:e4:ce:a1:a8:58:22:c4:38:62:cc:7f:db:38:95:4d:
c1:12:46:e7:25:05:ed:4b:6e:3a:38:cd:47:cd:94:3f:35:71:
a5:86:7b:51:af:78:b8:28:84:5c:b1:7d:79:ae:a4:c3:c5:9f:
b5:ec:19:17:9b:be:09:1a:6a:aa:0d:7a:02:1d:aa:9d:4e:d7:
c1:89:54:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:22:36 2026 by rpki-client