Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
File: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft (raw, json)
Hash identifier: IiUSwHiVhNAQr+dsDcs5gylkpa8r1W3RTlBR56vnhsQ=
Subject key identifier: D6:15:E1:21:6F:3B:67:87:DE:82:4F:79:E9:6B:59:9C:A3:EF:C1:A1
Authority key identifier: 42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
Certificate issuer: /CN=4200982284a050d941dbebbd04b5d0c914f635b7
Certificate serial: 01A0D5DDA725AECA17FF3B2A36BD799D7045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
Manifest number: 083E
Signing time: Fri 25 Sep 2026 00:01:08 +0000
Manifest this update: Fri 25 Sep 2026 00:01:08 +0000
Manifest next update: Sat 26 Sep 2026 00:01:08 +0000
Files and hashes: 1: QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl (hash: DwW8x6W0B/9+fTAVPHPxe5uw4ThUTiha1gzOL6AHkQ8=)
2: icpya8TDb0FzzKEJ_mm4QXCGGWQ.roa (hash: I9sUESWGZ24iKUQ4IL7Zk0ga/wiaveYK50sRzohqVDo=)
3: odNrW4lU42BAvPE84otnwCnAcjo.roa (hash: F1kft2u6AJ9vT8iumt/E/kv8R0gxEkszQiPaKkBRYw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:a7:25:ae:ca:17:ff:3b:2a:36:bd:79:9d:70:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4200982284a050d941dbebbd04b5d0c914f635b7
Validity
Not Before: Sep 25 00:01:08 2026 GMT
Not After : Sep 26 00:01:08 2026 GMT
Subject: CN=d615e1216f3b6787de824f79e96b599ca3efc1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:f4:1f:80:89:9c:89:81:bd:1b:bf:31:76:
88:35:7c:aa:2d:3a:92:86:68:eb:64:e1:f7:8b:3e:
10:90:e4:18:3e:03:18:14:b4:45:f8:ae:b0:5c:fe:
14:06:19:8f:ef:62:83:b1:c4:b7:00:c0:c1:83:d9:
23:1e:76:92:2d:ae:41:1d:52:6d:5b:a3:b5:51:47:
72:33:14:d3:33:eb:be:8f:17:57:c6:4a:74:21:5c:
07:8a:8b:c7:cb:20:45:29:de:91:19:41:1a:f6:3a:
00:bd:71:07:1a:78:6a:6e:ea:4d:b0:98:08:1c:57:
5d:fb:cb:d6:c0:e7:1e:a1:3c:18:14:5e:2d:79:f9:
a4:27:d3:7d:b1:82:f4:d9:92:0c:c6:92:a8:5d:37:
8d:78:67:49:35:e6:9e:61:23:79:25:ac:82:c9:9f:
12:30:2e:a8:db:6b:80:ea:65:13:93:74:70:47:9a:
d8:d6:e6:3a:05:c0:24:1d:55:c0:90:c0:17:d5:8c:
32:12:70:ab:ea:69:25:5d:d4:7b:1e:52:44:79:4a:
59:8a:5c:ef:72:c2:53:30:65:3d:4e:76:8f:a1:d0:
d8:8a:cb:e0:f9:6f:52:4e:88:3c:d8:b3:f7:03:3b:
06:99:a5:ee:42:52:df:e3:65:28:05:2d:23:f3:d9:
36:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:15:E1:21:6F:3B:67:87:DE:82:4F:79:E9:6B:59:9C:A3:EF:C1:A1
X509v3 Authority Key Identifier:
keyid:42:00:98:22:84:A0:50:D9:41:DB:EB:BD:04:B5:D0:C9:14:F6:35:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/c68819-2f9e-44ce-8810-51dc2b096def/1/QgCYIoSgUNlB2-u9BLXQyRT2Nbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4f:5c:87:7e:69:1d:58:5b:ff:8a:c3:66:e4:82:df:0a:26:
94:b2:a4:2a:cb:9c:2e:15:2c:4c:36:6e:70:ed:3c:ab:ef:da:
48:eb:89:d7:6d:56:cc:d4:62:30:a4:11:5d:96:53:1f:66:ec:
3b:2f:7f:8c:e2:ec:22:05:7a:46:d3:16:0e:d1:91:b5:12:5d:
24:ae:2b:4d:74:ab:a5:ee:9d:cd:b5:de:86:fd:a6:ce:4d:57:
ac:0e:86:17:c4:e7:cd:56:20:f4:c5:01:f4:d3:a5:bc:13:84:
1e:76:f0:a0:56:f2:a4:cc:7d:59:06:bb:e6:b8:b5:46:14:00:
05:75:ce:cd:ca:1a:89:51:d1:68:c2:96:92:b6:b7:4d:65:64:
60:2d:1c:3d:7b:95:d2:0b:f9:e0:7a:fd:95:45:bc:cc:de:8b:
3c:bf:1d:d3:c9:5d:db:91:ae:78:cf:38:3b:83:e0:94:a3:9a:
0d:84:aa:71:ba:2a:d7:c3:35:d1:87:46:62:a8:e5:3a:c2:a7:
42:eb:14:8a:b1:ba:a6:ef:73:72:b1:d8:38:6c:87:40:27:4e:
7c:bd:9d:91:c4:ce:4d:91:13:ad:fb:17:e3:35:76:43:0a:9d:
ee:96:4e:42:22:46:17:61:16:c9:e6:54:b0:b3:b5:e6:da:d1:
d9:6b:14:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:59:10 2026 by rpki-client