Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
File: QnPDfxOasLj9mBdxtNiMPGF1-aU.mft (raw, json)
Hash identifier: nz/uCzsMQqLbX7wsm0hR4m3XJ0qHCDqRQPy5wM+x/o0=
Subject key identifier: D1:53:6A:E9:4B:2C:5F:DC:55:FF:5A:5E:08:60:18:32:49:F6:42:7C
Authority key identifier: 42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
Certificate issuer: /CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Certificate serial: 01A12F57EADA25B2214D83EA995DC19CA3AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
Manifest number: 028A
Signing time: Mon 12 Oct 2026 09:00:53 +0000
Manifest this update: Mon 12 Oct 2026 09:00:53 +0000
Manifest next update: Tue 13 Oct 2026 09:00:53 +0000
Files and hashes: 1: Lqur6ZAGNL1ulbCAad6HGsiWQyE.roa (hash: bghFI/F9IV8PP3AOsFzer9ecqyhiQ6uXbQxrY4jrXXw=)
2: QnPDfxOasLj9mBdxtNiMPGF1-aU.crl (hash: o9e5aInbZxCz3ByzI0ymnSWtg+X03X2KcOWJ7+wf1nQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:57:ea:da:25:b2:21:4d:83:ea:99:5d:c1:9c:a3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4273c37f139ab0b8fd981771b4d88c3c6175f9a5
Validity
Not Before: Oct 12 09:00:53 2026 GMT
Not After : Oct 13 09:00:53 2026 GMT
Subject: CN=d1536ae94b2c5fdc55ff5a5e0860183249f6427c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:26:40:fa:d2:bf:23:f2:73:73:80:a3:e9:
fc:05:ef:03:98:b3:ba:f8:1f:56:12:e3:49:c4:ae:
88:5c:a6:b8:01:8f:a4:c2:74:9b:1e:44:e5:07:29:
a8:cb:7a:8a:63:e6:6e:e3:b2:1d:84:e4:cd:19:90:
2e:4f:56:8e:fa:98:5c:b6:f8:fe:e0:8d:70:d9:05:
98:4c:3c:37:f7:0e:4c:86:68:de:35:c9:f5:ed:f9:
a3:26:50:4a:37:e2:5b:e3:a8:92:2a:a0:b0:78:3e:
24:aa:5f:1c:29:40:27:91:77:ef:62:88:53:ae:4f:
68:53:5d:b3:67:7b:ac:bb:7b:a4:79:69:bf:82:72:
fa:0b:bc:6f:b6:a6:21:a6:6c:5f:44:22:ad:8d:23:
7b:32:06:c0:cd:2c:d3:52:35:d5:8f:1a:7f:78:8d:
8e:19:40:fc:4c:8e:ed:6c:3a:b7:a6:b2:38:e8:6c:
0e:f7:03:e0:23:e2:96:b9:2d:bc:f2:fe:dc:8b:5e:
db:0b:ca:4d:67:4b:75:23:ca:a4:ce:a9:2f:65:bf:
51:b8:00:ac:2f:79:f9:ad:ee:96:44:f3:dc:db:99:
da:8e:87:72:e4:13:a6:67:d2:0a:6b:02:1c:58:74:
ac:38:7d:8f:08:69:5f:81:03:15:46:47:7f:43:3f:
b0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:53:6A:E9:4B:2C:5F:DC:55:FF:5A:5E:08:60:18:32:49:F6:42:7C
X509v3 Authority Key Identifier:
keyid:42:73:C3:7F:13:9A:B0:B8:FD:98:17:71:B4:D8:8C:3C:61:75:F9:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnPDfxOasLj9mBdxtNiMPGF1-aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ac183e-3d9b-479a-9462-562628341df2/1/QnPDfxOasLj9mBdxtNiMPGF1-aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:61:0d:53:c9:bc:fc:19:08:fa:88:0a:e2:6d:33:a8:e6:c1:
03:e5:6e:9a:73:d3:3e:16:13:39:53:05:0f:3c:33:54:86:b9:
07:4d:72:a2:5c:e3:d6:c0:c0:39:bc:14:52:d9:37:10:57:77:
b5:53:26:e4:12:a4:cd:d3:e7:2c:f0:00:21:64:97:14:01:55:
d2:f3:c8:22:87:14:54:86:2b:70:76:6c:ef:db:78:ec:1a:b4:
f6:64:b9:27:df:aa:f6:31:59:8f:a8:9d:a6:e6:a4:a6:be:53:
2a:5b:e7:99:ee:9e:f7:b5:39:ab:94:18:3d:89:e9:12:ac:1d:
5c:d9:6d:82:e5:b7:50:7c:db:63:5c:b7:2a:cd:ff:0c:90:41:
26:4a:97:57:3c:c2:5d:69:1d:93:2e:1c:ce:cd:3c:2c:29:cc:
5b:0a:e3:79:1f:c0:3f:f2:2a:93:35:91:91:a6:5e:66:31:d8:
47:23:8d:4c:14:bc:6b:23:98:2b:d0:83:3c:12:ff:b8:2d:18:
88:3a:4c:f8:1f:ec:66:b2:70:87:18:92:80:ea:09:de:28:f5:
87:2e:16:e0:f4:c5:f9:e5:ac:97:d1:9d:01:31:2d:34:bc:34:
d1:e5:53:a4:0a:9d:81:40:1c:37:46:7d:53:94:65:02:33:ff:
24:61:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 11:06:43 2026 by rpki-client