Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
File: Qkq4x890A7ViChuBPmrR2g2stE0.mft (raw, json)
Hash identifier: 6XaRzgB53m1RUEf69rYDecQMMFTuME7wmpZ+/QD5W88=
Subject key identifier: 38:DA:EC:3F:C6:67:D5:9B:29:3E:96:A7:7B:41:A9:BC:1C:E5:7B:F1
Authority key identifier: 42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
Certificate issuer: /CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Certificate serial: 01A12B7AF196CB32DB4F77366894F4DC2BCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 15:00:39 +0000
Manifest this update: Sun 11 Oct 2026 15:00:39 +0000
Manifest next update: Mon 12 Oct 2026 15:00:39 +0000
Files and hashes: 1: Qkq4x890A7ViChuBPmrR2g2stE0.crl (hash: MAmveBwOMUTCBdaUle2QBkJ8/FQh0/swEfMDRmoj+zw=)
2: dzTzYf-TKYJMVkOvvaBfstjTJ9w.roa (hash: ZIgS2/isxUOPCfVNIh153dBZ1pmUGjEqXD0BSekDaHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:7a:f1:96:cb:32:db:4f:77:36:68:94:f4:dc:2b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424ab8c7cf7403b5620a1b813e6ad1da0dacb44d
Validity
Not Before: Oct 11 15:00:39 2026 GMT
Not After : Oct 12 15:00:39 2026 GMT
Subject: CN=38daec3fc667d59b293e96a77b41a9bc1ce57bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:98:7a:7f:dc:35:15:f7:e4:6f:83:23:32:5e:
e2:98:ce:90:a9:83:ad:90:97:cc:d9:74:1c:28:30:
3a:0f:15:42:ee:af:82:a7:23:92:24:ac:9e:ac:ad:
28:a6:ea:49:a4:b2:b6:68:63:69:64:0d:bf:a6:2a:
59:ad:c2:30:c9:c5:0d:eb:3b:68:6f:3d:c1:5b:c6:
5c:2b:59:82:b7:0f:f0:6d:78:83:ae:40:92:55:66:
9c:0e:ca:10:17:5a:29:7e:80:58:bc:f8:fb:de:62:
e3:1a:54:cc:cd:8a:18:aa:ce:5b:1c:fa:5a:ec:f3:
91:25:30:65:4d:bc:80:12:ad:d8:b9:ee:ba:5d:93:
e6:b6:5d:3d:8b:0e:76:b1:56:e6:35:45:06:3b:41:
15:32:85:86:5e:84:dc:2f:7c:d6:df:cb:8f:20:7e:
8c:3e:a4:ea:75:20:01:7c:47:4c:f0:9c:c2:14:73:
5b:d7:8b:0c:b5:86:21:ad:4a:ee:1d:04:1d:e3:f5:
cf:75:6a:14:68:86:b6:9a:ae:f8:76:6f:b5:9d:0e:
da:af:51:b7:24:f3:fd:9d:3b:13:d0:77:9f:ac:14:
4a:98:bd:f5:d8:8b:89:68:14:66:fa:f5:3e:c5:09:
56:62:11:e6:40:ac:5f:03:41:28:7c:b3:ad:95:0d:
c8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DA:EC:3F:C6:67:D5:9B:29:3E:96:A7:7B:41:A9:BC:1C:E5:7B:F1
X509v3 Authority Key Identifier:
keyid:42:4A:B8:C7:CF:74:03:B5:62:0A:1B:81:3E:6A:D1:DA:0D:AC:B4:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qkq4x890A7ViChuBPmrR2g2stE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3b3215-5721-4345-841b-2ad9308f1f6c/1/Qkq4x890A7ViChuBPmrR2g2stE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:63:86:ca:1b:1a:23:f6:36:f5:cf:79:45:61:ed:c3:f1:08:
dc:ac:f5:25:20:4e:d7:b5:10:23:bb:f5:f4:78:25:d8:2e:54:
98:98:0b:f9:e7:49:ed:22:fa:37:10:0e:ce:3c:76:e5:dd:6b:
0e:37:95:f1:5f:59:7a:81:48:00:17:81:63:3c:99:ba:36:f6:
ed:6a:25:5a:27:63:11:a8:a2:78:48:bf:ff:1b:34:eb:a0:1c:
b3:23:cf:b5:13:44:0c:48:b3:f8:79:34:0a:f2:30:e7:03:29:
9a:b0:dd:db:32:49:73:e6:bc:e3:6b:0e:43:61:2d:c3:3c:d2:
7e:43:61:a5:b3:5d:6f:76:f2:a1:b6:bf:3b:f4:64:59:50:a0:
5c:ba:38:c9:26:fe:3b:46:cb:14:1f:52:04:8c:6c:bd:a0:34:
61:23:13:81:c9:c5:d0:34:5e:84:cc:dc:f7:75:7c:92:ea:3a:
d3:15:52:f5:9c:a8:9f:e2:63:69:18:15:d1:b5:0f:76:93:aa:
b6:c9:0d:f0:9c:07:57:1a:9f:8f:0a:90:54:fb:f4:5d:60:09:
61:9d:36:dd:92:66:c5:56:6a:96:94:15:b0:e6:5c:30:4c:0c:
9a:18:df:a6:68:00:40:47:5e:56:8b:cf:e3:d3:91:c8:5e:3e:
60:99:af:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:55:29 2026 by rpki-client