Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
File: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft (raw, json)
Hash identifier: xx4nbbcoGUMeVB6M6f5NHkBSWlLYtadhq4/pKYZSLwg=
Subject key identifier: 37:51:78:A5:24:BC:3D:39:F1:9D:95:6A:E1:51:3A:4D:31:9A:DF:3E
Authority key identifier: 41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
Certificate issuer: /CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Certificate serial: 01A0CAEB4092567EFA98FFA0ECE03307763C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
Manifest number: 0D32
Signing time: Tue 22 Sep 2026 21:00:10 +0000
Manifest this update: Tue 22 Sep 2026 21:00:10 +0000
Manifest next update: Wed 23 Sep 2026 21:00:10 +0000
Files and hashes: 1: M2qWTH73NkMquwfzQJVxK2FVK8I.roa (hash: 5PswSRa1E9ITddc7NsFeNUg4nkAmj5HsnCX0ziwfNao=)
2: QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl (hash: S5exMFmfVYbezIlEJK9NGRVsxlZXQp6a7LY2eR9+1bU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:40:92:56:7e:fa:98:ff:a0:ec:e0:33:07:76:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41d6451b923a07e365b2f190faa55a572dd0fafc
Validity
Not Before: Sep 22 21:00:10 2026 GMT
Not After : Sep 23 21:00:10 2026 GMT
Subject: CN=375178a524bc3d39f19d956ae1513a4d319adf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ea:4b:87:27:1a:fb:43:a5:27:b2:09:c9:9e:
17:06:31:57:1c:52:6c:8e:4f:fb:70:4f:64:c5:de:
8f:fb:ae:85:ec:68:3b:49:ff:1e:7c:33:5f:47:f0:
26:9b:c3:dd:6b:0d:dc:9b:18:bc:94:03:88:80:0c:
9b:9e:e5:a1:4a:fb:51:ea:9e:16:59:cc:b1:de:a0:
d7:ab:8d:9d:5a:e8:00:dc:40:5f:08:01:10:cb:61:
ec:83:ce:aa:1e:04:c1:33:d2:2b:a1:c0:5f:40:be:
1c:37:a1:43:bd:fb:68:91:e9:92:69:8b:2f:89:6d:
85:bd:d0:f8:6e:bd:fa:e2:b6:81:19:f1:da:75:cb:
4a:9e:14:98:9f:0e:40:11:41:85:f2:4c:fa:21:3e:
de:95:15:58:7d:91:d4:dc:f6:0f:a9:6b:b0:70:b3:
72:38:1b:c1:d1:80:1b:25:a5:68:48:ca:8c:ef:e8:
2c:a5:c3:8e:f8:70:ed:69:9d:ad:47:64:bd:96:97:
39:79:3f:65:cc:c9:28:4d:2a:f6:e3:70:56:11:46:
f7:ab:1d:e1:b0:43:0a:cf:3c:a2:f8:44:ce:f0:ba:
c5:2a:fe:d4:23:db:b0:c5:39:6b:16:70:a2:5b:54:
d3:c6:31:ce:b2:9f:c5:1f:20:5f:cd:eb:4c:48:f4:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:51:78:A5:24:BC:3D:39:F1:9D:95:6A:E1:51:3A:4D:31:9A:DF:3E
X509v3 Authority Key Identifier:
keyid:41:D6:45:1B:92:3A:07:E3:65:B2:F1:90:FA:A5:5A:57:2D:D0:FA:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dee744-0854-4cf1-af6a-f56c84943a7d/1/QdZFG5I6B-NlsvGQ-qVaVy3Q-vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:89:31:68:1a:57:d8:93:1e:16:cf:4d:1e:73:d4:9e:b8:b6:
5f:8b:00:e5:86:3a:64:62:42:e5:a5:82:c8:12:65:12:5b:32:
89:99:b5:27:d6:22:5e:1b:b6:4d:44:fe:56:65:aa:e3:89:81:
19:d1:8f:b1:11:01:d4:97:b9:b7:f5:ac:2d:0e:b3:6a:58:e9:
5c:0e:09:27:df:a9:b8:9b:70:63:2d:a0:04:d8:65:86:39:ba:
5c:97:d8:83:18:9e:70:3b:7b:57:8b:9f:ea:dd:ac:d2:36:b8:
57:3c:24:b5:53:db:7f:2b:5b:13:4b:ca:3d:c1:2b:70:d6:73:
02:5e:20:72:eb:a2:57:6d:6d:18:12:21:02:51:0f:01:c3:ca:
e5:21:9f:c4:8a:d4:c5:db:14:45:ba:4c:f4:23:52:8e:5f:6f:
9d:82:7f:65:86:e2:34:4e:c5:82:05:20:03:e9:e1:86:45:01:
a8:fc:89:64:10:f6:53:35:91:ff:2b:00:db:80:f6:3b:e7:5d:
ea:6b:8a:31:d0:e9:06:0b:64:b1:bc:df:e4:57:63:05:ff:8f:
f8:fa:e0:3c:a5:34:74:0e:2d:eb:4c:94:8a:a9:c3:f1:be:2b:
1c:47:0b:11:73:2c:94:fe:3b:20:78:52:e9:96:da:4d:72:fc:
d3:c7:0f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:28:43 2026 by rpki-client