Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
File: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft (raw, json)
Hash identifier: 5RpJLJngBLCWchY+qkjo+buP8/6AhjEajXO2iaS/F7Y=
Subject key identifier: 2E:C9:30:C6:EB:4A:40:80:3F:8A:99:25:E2:FA:F6:52:05:00:F5:85
Authority key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Certificate issuer: /CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Certificate serial: 01A0BDD4C582BB53A774E05CA75ED920F0C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
Manifest number: 0218
Signing time: Sun 20 Sep 2026 08:00:32 +0000
Manifest this update: Sun 20 Sep 2026 08:00:32 +0000
Manifest next update: Mon 21 Sep 2026 08:00:32 +0000
Files and hashes: 1: IZkDUCigInWdeV2VhafZmgrDhxk.asa (hash: fVSaR3R0qI7sWBf1eA/UjYaOluP3hVc1HKfEAv11/p0=)
2: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl (hash: lHaxH4rgYxg/IoxIE8DPsOBs7SBKbV9ayoW6KLeMKhg=)
3: rhdyAw8cgf05vzajT2FBLQ9vMv4.roa (hash: BXOL4wyuX+9APrFFUb6u0yh2z5n++kBGSbyspApqvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:c5:82:bb:53:a7:74:e0:5c:a7:5e:d9:20:f0:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Validity
Not Before: Sep 20 08:00:32 2026 GMT
Not After : Sep 21 08:00:32 2026 GMT
Subject: CN=2ec930c6eb4a40803f8a9925e2faf6520500f585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:fd:7c:3a:45:96:e6:9b:44:82:0e:ae:2d:
ee:e3:41:fa:cb:33:b6:96:fd:28:5b:dd:78:96:a6:
84:d9:c8:af:f1:5f:24:ec:ae:45:db:38:0a:99:0a:
f5:fb:7b:3e:28:0f:b4:b0:b3:60:01:7d:62:03:7f:
ec:0f:fe:eb:f9:07:a2:e1:bd:ba:16:ae:b5:a6:a6:
22:bb:62:9d:f7:75:4a:ed:b5:4b:1c:d0:ce:46:23:
07:62:19:8a:86:8e:1f:54:12:3b:e4:51:01:78:f0:
ea:b2:d0:48:c1:3a:8c:4f:f3:23:e5:05:02:35:47:
61:f6:e3:1b:10:2a:a8:40:65:28:cc:3b:05:7b:c2:
a4:5a:91:95:31:c2:71:70:ec:e8:f3:5c:c7:3a:5d:
f2:62:26:db:0c:b4:1f:29:0a:d7:4b:73:1f:15:f4:
02:ea:48:d1:95:95:24:59:28:ec:20:83:ec:f2:af:
39:a6:52:f9:02:0d:1d:1a:34:a6:9c:2c:93:ba:b8:
c4:34:15:af:58:1a:6e:2c:b8:15:d7:66:c1:79:8d:
19:2a:56:c5:cb:40:42:3a:61:1e:f7:f5:14:f0:94:
1d:b0:74:b3:89:b1:00:5d:da:3a:a1:43:02:b8:05:
eb:24:35:0d:5c:a5:e2:95:0f:2a:1f:02:ec:e1:5d:
9c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C9:30:C6:EB:4A:40:80:3F:8A:99:25:E2:FA:F6:52:05:00:F5:85
X509v3 Authority Key Identifier:
keyid:42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6b:02:d6:58:dc:e9:c9:d3:3c:83:4c:6a:f1:f8:e7:10:e2:
f6:ba:74:72:10:a9:a4:40:33:b4:06:7b:3c:87:73:95:1b:94:
c5:9f:08:fa:f9:14:46:23:3f:1f:b2:cb:3c:76:f4:9f:4b:57:
1e:47:4f:a4:8c:bb:04:ad:df:bb:13:0b:87:53:00:99:05:3d:
8a:9a:f0:90:91:f9:28:0a:c8:32:21:09:00:25:c1:ac:3d:7a:
d0:17:aa:f6:a7:f5:e3:c5:ef:e8:98:82:e8:ad:2f:59:5e:8a:
db:41:7c:59:a1:d4:2b:e3:07:c5:2b:b4:3e:7d:89:60:ad:e3:
9d:f2:77:a6:fa:f3:36:ba:66:a5:5f:73:e9:2f:af:e6:cc:80:
19:e5:6b:19:91:9b:fe:10:82:8f:27:ea:2a:d3:33:66:34:e5:
8b:e9:e9:83:26:d9:c4:e0:a9:62:a8:a7:e8:6f:2d:1e:d9:16:
72:cb:2b:e7:6c:37:3d:20:ad:31:ed:c4:45:7c:c6:92:f1:b6:
38:c8:cd:b5:99:85:71:3b:75:bf:63:24:62:f0:a1:9b:56:d5:
45:61:6c:84:9c:1b:4e:ee:0e:c6:8c:7b:40:cc:04:ec:0c:a3:
af:95:d1:89:17:5c:50:82:f4:b5:ba:c6:50:fb:4d:39:e9:00:
cc:d5:8e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:09:41 2026 by rpki-client