Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
File: QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft (raw, json)
Hash identifier: tyhJN4xbgXtXvyRExyIkBlbhFUTo1l8nDdVIIu9o6yw=
Subject key identifier: 8E:6E:D1:70:42:09:1B:3D:94:51:46:B1:90:2F:93:F3:8E:81:E8:B9
Authority key identifier: 42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
Certificate issuer: /CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Certificate serial: 01A0CE23C95B63A8F27273866214A50B1AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
Manifest number: 17FF
Signing time: Wed 23 Sep 2026 12:00:46 +0000
Manifest this update: Wed 23 Sep 2026 12:00:46 +0000
Manifest next update: Thu 24 Sep 2026 12:00:46 +0000
Files and hashes: 1: LR4OEFuXJFG601CBDAdGi2eJuDA.roa (hash: NMogK1dWSLWZg8KRXWYMDcVAVexU5Hc8nklyuTVzNTg=)
2: QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl (hash: ybh2KOp/8j/zWXVbuhsBji+fTmFSGHtKiyVe6Rqpl4U=)
3: yLjJ3nLSiELitR79aZqorJ0E2nc.roa (hash: xtAiyE7KLrMeKdwMrZXmwAda9WUSSp0xD353CtNzkqA=)
4: zmI7itrZiL_gDQE-LI8VX6mhi3M.roa (hash: oaucdw8kxMg4EQDLP4CSccRXkWAvO6YKuvgDiVYtKOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:c9:5b:63:a8:f2:72:73:86:62:14:a5:0b:1a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c4c90ed16aa20e49178420bfc84a883c12ac68
Validity
Not Before: Sep 23 12:00:46 2026 GMT
Not After : Sep 24 12:00:46 2026 GMT
Subject: CN=8e6ed17042091b3d945146b1902f93f38e81e8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c8:11:4f:e7:7d:62:fd:5b:e0:b3:73:a0:bf:
82:29:69:bf:4b:f3:08:9a:a7:d3:a6:9a:6f:4b:89:
a0:83:5b:22:aa:87:3a:c3:d3:9b:7c:02:cc:11:0e:
13:08:16:d2:d4:a0:9e:f6:ac:a2:c0:6e:d9:b7:78:
20:e7:24:df:2e:e0:4d:19:b0:e9:30:3b:3a:a3:64:
54:3d:8c:83:64:99:99:14:8a:68:9d:b0:6d:0f:ae:
7b:1b:33:cf:32:6b:c6:10:23:96:d0:8a:99:0e:01:
38:26:bc:45:70:c8:64:59:a8:70:0b:6d:85:0e:ca:
6f:79:c6:cb:af:2e:05:74:d5:7f:e9:e8:96:dd:c0:
c7:07:f9:2c:cc:c6:17:b3:84:1c:44:f9:7d:a1:e1:
38:75:19:87:ca:dd:cf:c9:5f:55:06:7c:5a:c0:39:
1c:16:06:60:50:24:a4:c3:5f:8b:98:ae:ad:8a:78:
d5:17:48:3e:da:ac:64:ce:cd:9c:84:92:8c:98:f4:
b4:f1:91:c0:53:cf:35:2c:a3:a2:0f:5c:51:5b:ee:
93:a5:0b:88:72:82:e7:79:70:1e:d8:12:6b:c9:06:
b9:4e:09:2a:e3:7b:cf:7f:49:9e:5a:0d:2f:5a:76:
fa:33:23:2f:e3:56:a2:a1:05:5c:54:bf:28:4d:3c:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6E:D1:70:42:09:1B:3D:94:51:46:B1:90:2F:93:F3:8E:81:E8:B9
X509v3 Authority Key Identifier:
keyid:42:C4:C9:0E:D1:6A:A2:0E:49:17:84:20:BF:C8:4A:88:3C:12:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsTJDtFqog5JF4Qgv8hKiDwSrGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/487c15-6f6f-407f-949f-a8e4e71bee51/1/QsTJDtFqog5JF4Qgv8hKiDwSrGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2e:d8:b1:94:14:a6:b8:b5:4c:c3:b1:a1:9e:e6:93:99:19:
49:9d:f5:50:77:b5:7f:2e:26:ee:35:56:1b:f2:07:44:c4:49:
32:a0:a5:f7:76:ed:95:00:d6:71:ce:dd:01:98:18:77:da:39:
73:03:37:38:13:35:32:71:4e:dd:5b:0c:3f:02:28:f1:63:e6:
e2:04:22:93:b1:e8:a6:12:0f:ad:2b:fa:ca:24:a8:3c:0d:cf:
98:38:b1:a1:d2:e5:d6:80:66:a9:6b:5f:ae:b2:08:31:6c:31:
73:44:bb:22:1a:f5:e6:54:10:ac:0d:e7:62:45:56:99:b1:3b:
bf:e1:74:02:c2:1a:a7:67:17:19:f9:43:26:5d:d3:e9:30:0f:
52:7c:a9:c1:f8:58:de:6b:b1:8b:ed:92:95:ae:a2:64:ba:0c:
89:9a:b1:88:6b:2c:d5:0f:a2:2e:cc:ef:e4:00:c9:fa:c1:68:
9d:bf:96:e2:2d:3b:83:87:90:16:48:f7:9e:f4:9a:c7:33:e6:
49:a6:82:5b:6c:28:49:f1:69:1e:ab:08:b1:cf:2e:63:df:43:
47:f4:fe:b8:c2:04:c8:74:96:7a:91:85:17:b9:43:c5:f4:aa:
1c:17:f7:b0:4d:ff:75:33:d0:fa:be:66:21:bd:bd:c2:7f:93:
ce:1c:bd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:09:04 2026 by rpki-client