Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
File: QHznj0rDupAqDDjcAaDF8hJlGbA.mft (raw, json)
Hash identifier: t7m70GskXpRFA6WQFU2rzX43dnt/SiNpcq2dD6zPbqc=
Subject key identifier: 0C:F6:E1:FE:03:07:78:A4:AF:A0:81:87:8C:27:E6:3D:26:56:BD:8A
Authority key identifier: 40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
Certificate issuer: /CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Certificate serial: 01A0E2BD771279A04D3E899F4F1C40275A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
Manifest number: 0EE3
Signing time: Sun 27 Sep 2026 12:01:02 +0000
Manifest this update: Sun 27 Sep 2026 12:01:02 +0000
Manifest next update: Mon 28 Sep 2026 12:01:02 +0000
Files and hashes: 1: QHznj0rDupAqDDjcAaDF8hJlGbA.crl (hash: i68IA1/VzuCzTldu0YtMSPHmE+rYpOZ+OJBD3yiU/bA=)
2: UKN4qXdB5emZZX9TzM0PF4jJuRs.roa (hash: Y842Sm+wv4FkMHDbdNeBmo19SEMhJtIByCHRBpFd6qo=)
3: qOyavHaQUzWIgFJKhwDzN8qp-NU.roa (hash: 6+GcU7ai/o4JeNdvfA796blKNzslNJ8s8dxyOTcoPxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:bd:77:12:79:a0:4d:3e:89:9f:4f:1c:40:27:5a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ce78f4ac3ba902a0c38dc01a0c5f2126519b0
Validity
Not Before: Sep 27 12:01:02 2026 GMT
Not After : Sep 28 12:01:02 2026 GMT
Subject: CN=0cf6e1fe030778a4afa081878c27e63d2656bd8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:38:e0:37:47:fd:65:00:86:18:12:cf:91:
f4:0f:c8:a1:f4:62:82:4c:92:05:d4:33:45:be:bd:
04:85:ab:3a:9a:86:b5:c1:c2:73:e0:a9:f1:26:9f:
a6:d7:3e:4e:ea:96:82:19:df:a9:ba:c4:ae:1b:4e:
b7:7b:b0:76:fa:9c:ec:ee:c8:8b:90:30:33:66:59:
48:2a:3d:7a:9d:78:39:bf:2a:8f:fa:e2:e5:75:10:
14:99:6f:92:7b:3b:11:e2:6b:51:2a:f2:95:a3:02:
ca:de:91:30:ad:60:cb:9f:67:7b:23:15:05:48:63:
7a:22:fb:49:bc:7a:7b:db:4c:36:2f:fc:3b:7f:b1:
ab:a8:76:25:b7:31:61:d6:8d:a0:31:ce:b5:1f:ba:
47:2c:3a:e2:cb:d4:15:57:f4:df:8c:fa:c5:1c:10:
86:3f:4a:0b:4e:ed:1e:06:b7:46:5f:d6:6d:f1:0a:
f7:18:65:44:38:36:12:90:e9:fd:dd:bb:4e:95:4a:
63:43:1b:ca:a6:36:d8:4b:71:e7:f3:f5:2d:34:62:
ab:e8:e1:04:f9:17:ad:c0:5e:c0:a2:e6:8e:4e:d7:
65:80:26:e6:b4:58:18:06:09:19:aa:a2:0f:35:2d:
44:5b:7e:fd:73:60:9e:4d:cc:a9:72:b3:a0:73:2e:
e4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F6:E1:FE:03:07:78:A4:AF:A0:81:87:8C:27:E6:3D:26:56:BD:8A
X509v3 Authority Key Identifier:
keyid:40:7C:E7:8F:4A:C3:BA:90:2A:0C:38:DC:01:A0:C5:F2:12:65:19:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QHznj0rDupAqDDjcAaDF8hJlGbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a87ea8-c3b6-472d-a96c-a971a334faa4/1/QHznj0rDupAqDDjcAaDF8hJlGbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:12:ab:8a:10:78:9e:04:a4:fb:29:2e:b1:ac:f6:31:7b:b4:
19:6e:33:d5:7c:e7:00:6a:19:67:85:a5:21:5e:6c:e8:bf:d8:
66:02:94:23:ec:5b:2e:09:a9:e6:2d:6c:23:e1:9d:d1:56:83:
1d:57:0a:0b:13:90:1a:8d:05:8d:c5:0a:87:a5:a7:70:c1:a8:
4c:cf:3d:a6:29:ca:0c:7d:e6:15:50:64:ca:9e:a9:7c:48:d4:
ee:ab:c6:d5:65:67:4f:e6:35:5b:51:d8:80:2d:4a:42:dc:1a:
a5:90:bd:2a:6e:c8:b5:48:cd:ac:c6:3e:77:e5:54:a4:c6:0a:
be:03:2c:d8:45:63:18:61:ca:a3:e8:ac:60:fd:e3:12:f1:37:
6e:a6:8c:e9:e3:ee:7e:da:c3:6c:0f:8d:65:b3:30:19:67:74:
b5:07:4e:89:a8:37:6c:7b:3a:7b:a0:ae:30:e3:e1:ce:6e:c5:
1e:1b:fd:b9:00:8d:52:09:60:1c:8b:90:ed:5a:ff:07:15:b3:
37:d7:18:bf:a6:c9:6a:e5:38:ab:a0:fa:17:ec:36:e6:b9:64:
e1:b6:b0:be:2d:76:34:81:d0:0b:db:3d:6f:db:71:40:3f:25:
44:52:f4:88:6c:6c:c4:21:ec:35:1b:fe:04:e4:16:71:3c:9d:
7f:c6:a5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:22:37 2026 by rpki-client