Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
File: QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft (raw, json)
Hash identifier: k5RberFIyKh2mYAnas+ompvXuiYm1CJxpKklYNB8yyw=
Subject key identifier: BB:55:BF:F1:F9:EA:88:5F:17:D0:92:B2:33:AD:15:E5:41:D4:57:2B
Authority key identifier: 42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32
Certificate issuer: /CN=42e0d377ac225dde2de910cc7b816850f0b67132
Certificate serial: 01A0C6D7ADC09C2CCA34855E3EB892FDC965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
Manifest number: 0100
Signing time: Tue 22 Sep 2026 02:00:18 +0000
Manifest this update: Tue 22 Sep 2026 02:00:18 +0000
Manifest next update: Wed 23 Sep 2026 02:00:18 +0000
Files and hashes: 1: QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl (hash: YjI9dGhR48uV1V87PDU9HvTf7dQBe9ZX8tPufr8DoCE=)
2: eVVWCsR3SsLT4BetTTjquKU-q1M.roa (hash: aeSr2d45S0h29TxwaX3O5Y/8gj9nHZ8GIzMdMwCrt1Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:ad:c0:9c:2c:ca:34:85:5e:3e:b8:92:fd:c9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e0d377ac225dde2de910cc7b816850f0b67132
Validity
Not Before: Sep 22 02:00:18 2026 GMT
Not After : Sep 23 02:00:18 2026 GMT
Subject: CN=bb55bff1f9ea885f17d092b233ad15e541d4572b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:4f:b4:7a:e7:6d:84:05:8e:59:82:e6:1e:
52:4e:49:cf:22:36:cf:03:a5:89:a4:78:6c:64:80:
f5:83:05:b9:07:df:4e:d5:8b:0c:fb:b4:7f:c7:73:
42:c7:1b:72:72:59:46:d8:5a:24:ac:a9:29:25:6d:
d1:a8:e8:f2:81:bb:8a:11:24:7b:3c:a6:e3:5b:75:
0f:55:a0:9a:86:3c:2e:ce:65:66:3b:4f:8f:b3:7b:
d8:84:b2:b3:ec:35:d0:7d:fd:7e:ff:96:d0:d0:fd:
8c:b2:81:8b:7a:71:ed:09:39:1c:1f:e7:dc:cb:f0:
30:61:06:23:e5:05:a2:95:f0:ac:51:d6:33:80:9e:
b2:cc:1e:a8:4a:73:19:97:a5:ca:4e:83:44:a0:94:
30:f0:b3:53:2b:30:93:f7:84:f1:0a:43:82:36:ac:
bb:40:29:11:83:10:a3:70:c5:08:dc:be:dd:8d:f5:
22:d2:0d:b1:9a:d0:2f:c7:5f:5b:54:9f:1e:75:24:
c5:67:87:46:eb:c0:44:ac:e5:37:e7:bc:1f:cb:a6:
7b:03:08:18:5e:0c:60:95:0c:06:50:b9:9a:6d:0a:
20:05:c8:df:ba:77:41:9f:42:b8:33:22:ff:1c:0f:
ae:d0:5e:7f:a6:38:58:02:36:b0:f4:75:30:08:81:
00:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:55:BF:F1:F9:EA:88:5F:17:D0:92:B2:33:AD:15:E5:41:D4:57:2B
X509v3 Authority Key Identifier:
keyid:42:E0:D3:77:AC:22:5D:DE:2D:E9:10:CC:7B:81:68:50:F0:B6:71:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QuDTd6wiXd4t6RDMe4FoUPC2cTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/62b442-9b0c-450d-bf17-d8d26cf0deda/1/QuDTd6wiXd4t6RDMe4FoUPC2cTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f4:b1:aa:c6:39:4b:df:35:fe:67:9f:bb:1d:c2:03:07:6c:
f8:37:9e:a5:b8:6f:6b:95:25:08:63:f9:46:62:e7:fd:bd:fc:
a6:2b:9c:66:5b:41:4d:65:ae:0c:b5:92:b9:f4:22:80:75:6b:
72:9f:e4:4f:85:32:91:78:03:4a:b1:ff:69:c9:bc:81:13:66:
45:23:ab:16:ef:11:3d:e8:a8:ac:1e:a2:74:e8:72:1c:a6:ec:
6b:d4:bd:0f:b7:68:6a:78:b3:01:4d:4a:28:72:f5:cf:6e:0c:
93:c0:cb:38:a4:3f:20:67:3a:b7:ed:9b:a5:28:91:e3:2f:67:
34:1d:b2:52:f7:b0:55:45:8b:e6:b8:c3:71:50:7c:21:45:48:
83:ad:0b:ec:01:7f:c7:95:3f:cb:15:2b:33:7f:66:7c:0a:29:
fb:bf:97:45:d2:db:a7:cd:9f:0b:a3:24:3c:e7:10:b1:9d:e0:
38:d2:1d:4a:b4:9c:29:df:30:7b:04:18:5d:b3:4a:92:12:de:
3f:e0:c4:9f:08:20:a5:fb:69:3a:49:95:40:8f:6f:59:22:4a:
3e:70:a4:06:e6:5f:ee:60:7b:11:c7:56:ee:76:52:36:b5:21:
fe:9c:7f:c5:56:da:f2:0c:bf:cd:9e:a4:86:8b:9c:a1:10:2d:
ca:29:b5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:39:34 2026 by rpki-client