Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
File: QGqSJQwoWA8q1MwcNXsColp5DPc.mft (raw, json)
Hash identifier: w5UQthlC7j8/WXYrU04kpeNmcKHrzRfA9unCrIsKX6c=
Subject key identifier: F9:DD:17:AA:9F:28:27:5E:DC:EF:DB:AC:18:D6:40:BD:DC:27:0B:CE
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 01A0CBFE2EAA57B7474E3A6D3B29C88D63AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 02:00:27 +0000
Manifest this update: Wed 23 Sep 2026 02:00:27 +0000
Manifest next update: Thu 24 Sep 2026 02:00:27 +0000
Files and hashes: 1: QGqSJQwoWA8q1MwcNXsColp5DPc.crl (hash: YpXCKwgnfN3PzxWv4op564pt44MpuJvnVEfn1TyMkKA=)
2: QJ1CsNmZtrMfqsM-LahkitaRmoc.roa (hash: 16917vIR1cAkmi46t8D1rEf6dQGk7zBSOY9QqyvHf5E=)
3: ebTS1fW1SEP7XDg0_jVaH-IhfjI.roa (hash: DDgrDiLhVwMu1oS2zAdeQKa6HlRGjZ92/REsC3Si5kE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:2e:aa:57:b7:47:4e:3a:6d:3b:29:c8:8d:63:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Sep 23 02:00:27 2026 GMT
Not After : Sep 24 02:00:27 2026 GMT
Subject: CN=f9dd17aa9f28275edcefdbac18d640bddc270bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7d:25:e0:83:61:4b:a9:67:74:18:3d:b3:81:
21:43:32:f7:3c:49:16:ed:43:0b:21:5f:68:9a:42:
26:fa:48:1d:d6:44:d0:c4:b5:16:a9:93:9a:f6:d5:
41:a4:5a:57:1e:47:cf:3b:ba:d0:3a:bd:3a:5e:ea:
a0:2d:35:4d:b7:e3:38:a4:2e:fa:12:27:3a:96:87:
e0:78:a8:b5:e2:0d:8a:49:0c:03:2b:79:d3:c4:69:
2a:52:7d:44:f7:9c:9f:b7:55:7c:3d:53:51:38:c8:
b7:37:2b:6c:c1:d1:cc:ad:d3:45:f2:cf:af:9d:ba:
56:79:04:90:83:2b:c5:1f:45:06:bd:31:3c:46:ae:
2a:47:70:b1:cd:08:98:5f:34:bb:96:90:10:5b:6a:
55:1c:97:37:ad:52:08:14:65:2b:e9:e7:b9:cd:9c:
8c:6a:fe:39:1a:78:10:0d:f7:08:51:89:9e:cb:1b:
0d:54:ee:f2:98:56:68:51:08:c2:2e:70:1a:54:b1:
ea:42:ab:ec:25:fc:fb:79:78:a7:c9:50:00:ad:01:
90:b4:a9:b2:06:19:5a:b1:6d:c0:2d:73:9c:0c:36:
88:d1:51:d9:7d:af:12:7c:25:b2:d3:f8:41:87:17:
a9:b9:b7:45:fe:c6:09:b2:a3:cd:db:e3:cc:dc:ab:
57:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DD:17:AA:9F:28:27:5E:DC:EF:DB:AC:18:D6:40:BD:DC:27:0B:CE
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:75:b1:d4:65:7b:eb:8d:b8:98:f6:8a:86:ab:58:23:db:98:
6d:0b:31:53:96:42:f6:0f:bd:9b:0c:cf:5d:07:2f:fa:11:4f:
5b:9d:a5:b6:1e:31:bd:30:8c:35:61:74:72:15:ff:e2:95:59:
d1:f1:86:d2:f6:78:53:82:7b:c5:70:23:2e:41:79:18:ec:87:
eb:6c:22:2f:14:a9:13:19:95:d2:86:bc:f6:be:dd:5d:f2:2c:
12:87:6c:65:71:5f:6f:4d:85:d7:7a:2c:e8:3f:63:2e:20:15:
2c:54:22:b0:af:1d:3d:83:22:ba:9b:40:26:7a:d2:9a:15:af:
87:58:e5:0a:b5:ec:85:44:61:af:7d:fc:d5:9d:0c:0c:bb:c0:
bc:dc:c7:ea:24:28:47:cf:00:a5:48:ff:10:30:b1:c9:39:df:
e9:11:4c:f8:dc:ea:30:a7:69:a1:5a:9d:ff:3b:9f:1e:8d:bb:
64:b7:12:24:d8:6b:e5:8c:93:c6:fd:54:34:93:00:43:fe:05:
9c:e2:87:8a:9e:62:d5:56:cd:7b:9b:42:5d:c7:d1:0d:00:3b:
17:89:d2:b1:ed:be:40:42:cb:80:4d:f6:58:f1:77:99:3f:9d:
44:f9:ac:4f:95:b1:54:be:61:be:56:c6:67:7c:84:19:d1:7c:
56:34:9e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:39:40 2026 by rpki-client