Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
File: QSasSvr9JpiBwQrS7KL03vjtvSE.mft (raw, json)
Hash identifier: WGqo8k6SZwzkCxGwQAemKxtDEJebFxSmd/pEaBb9xiU=
Subject key identifier: DD:08:E1:FE:F0:B7:AC:C1:A1:01:10:25:BD:F4:38:FF:FB:64:2E:0A
Authority key identifier: 41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
Certificate issuer: /CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Certificate serial: 01A0E73FF55C29C7384D188DB15F6E17D815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
Manifest number: 1A7A
Signing time: Mon 28 Sep 2026 09:02:03 +0000
Manifest this update: Mon 28 Sep 2026 09:02:03 +0000
Manifest next update: Tue 29 Sep 2026 09:02:03 +0000
Files and hashes: 1: QSasSvr9JpiBwQrS7KL03vjtvSE.crl (hash: 7M5hidhCJqR+WAW0HTzUPV2XCWWQoX5tEhlxhBUeuSE=)
2: WWEiiRclZJiJc4Yp9PYYvoQpmSA.roa (hash: hrQ5qgVNUSC0WxamoxJ9EGRyxZYAj1wkc81Qc600uiM=)
3: zXqwVcwlXpQqAoueTVMdXtH7SG0.roa (hash: jcregEqkWYaC2zgOmhpk2TEJDFYrMRRaV054ziFvW/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3f:f5:5c:29:c7:38:4d:18:8d:b1:5f:6e:17:d8:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4126ac4afafd269881c10ad2eca2f4def8edbd21
Validity
Not Before: Sep 28 09:02:03 2026 GMT
Not After : Sep 29 09:02:03 2026 GMT
Subject: CN=dd08e1fef0b7acc1a1011025bdf438fffb642e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:0f:c5:8d:d9:9e:1a:e2:a9:df:30:c5:c0:
11:5b:60:c4:fa:64:93:b7:d2:bd:0f:f9:2e:06:3a:
73:c5:36:c0:02:a7:07:67:9a:b7:98:ea:5f:40:00:
6c:3c:a1:e6:bd:03:05:a9:24:6c:1f:7d:50:62:29:
b2:3a:2c:48:e3:e6:d1:1f:64:a3:67:76:b2:b5:b6:
2a:b5:34:7e:b2:a6:80:63:e2:ad:5c:33:4a:5d:ca:
1d:c8:d6:ee:de:d4:7a:e2:b5:cb:42:ab:58:a3:56:
cd:e9:94:bf:8f:0d:55:6b:e9:c4:0a:9e:7a:8a:cd:
da:80:d3:33:31:1b:10:ee:a4:c0:18:30:a9:2f:c3:
f5:07:fc:60:d3:fa:8c:ba:b6:4b:8d:1b:56:28:48:
49:49:2a:14:a3:ed:1a:b1:20:d9:83:25:a2:33:cf:
16:35:ed:ef:3a:05:be:e7:04:cc:69:b3:7a:18:43:
74:19:ae:a4:68:92:e1:9f:2d:92:d1:a3:1a:52:f6:
b0:4f:67:c0:ae:02:fc:33:30:38:85:0b:6e:69:0a:
bf:e0:3a:72:68:4d:b2:88:00:fd:f4:7b:95:aa:7c:
bb:10:cc:8d:6e:77:89:50:06:48:da:b7:30:eb:ad:
a6:c9:69:08:8d:c3:4b:e7:cd:ed:9a:77:a1:7f:35:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:08:E1:FE:F0:B7:AC:C1:A1:01:10:25:BD:F4:38:FF:FB:64:2E:0A
X509v3 Authority Key Identifier:
keyid:41:26:AC:4A:FA:FD:26:98:81:C1:0A:D2:EC:A2:F4:DE:F8:ED:BD:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSasSvr9JpiBwQrS7KL03vjtvSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/94dd2a-5046-4883-91da-c399be031b4a/1/QSasSvr9JpiBwQrS7KL03vjtvSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:d3:70:27:25:bc:e4:61:80:cd:d7:98:6f:31:3f:91:43:d3:
12:cb:fe:43:b6:46:6b:fe:fe:35:37:03:a5:07:ae:dd:55:f6:
c6:9e:95:75:7f:93:74:f9:8f:a7:d7:40:72:57:ab:29:90:4a:
da:57:24:43:25:b4:80:86:aa:02:dc:70:ce:75:44:fa:36:a7:
ad:77:2a:e7:9d:53:d8:e0:e7:a7:60:c9:bf:97:7e:27:ac:cf:
20:a3:9d:5f:3a:70:8b:93:3c:f0:8f:91:d1:e4:5a:43:15:1f:
83:74:a0:e3:38:83:33:62:f6:8f:a3:3e:7c:96:5e:a8:3f:1c:
13:49:6d:b4:98:d1:8e:cf:1a:fe:f0:53:d4:17:f1:13:17:c8:
c0:e3:15:3e:33:89:af:7e:b7:51:98:3f:f1:66:bc:4b:f1:6e:
95:ef:51:d6:5e:7d:ed:c4:77:ef:a2:f6:e5:e2:c1:c7:9f:eb:
0f:04:17:22:ac:28:ea:ae:fe:4c:ac:b1:23:6d:cf:ba:47:88:
56:a5:df:95:d6:fe:fe:4b:26:42:51:04:77:d7:13:6f:2c:29:
5d:ae:3e:3e:65:4c:55:79:fb:e2:1c:a4:de:ad:88:36:47:2f:
b6:54:ec:3f:34:78:cc:c4:55:05:04:a6:b0:5b:59:73:4b:7a:
ca:1e:e4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:19:54 2026 by rpki-client