Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json)
Hash identifier: mgZpLRrYhZOaXyOFNThMcfaUg2oh9itxTR003A3Rdq0=
Subject key identifier: C0:32:52:34:E9:4A:34:2D:97:46:E7:BC:92:B6:3E:DD:BF:48:43:0D
Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Certificate serial: 01A0DB71DF2561E5A9F6F165A1D109B6C66E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
Manifest number: 0C36
Signing time: Sat 26 Sep 2026 02:01:07 +0000
Manifest this update: Sat 26 Sep 2026 02:01:07 +0000
Manifest next update: Sun 27 Sep 2026 02:01:07 +0000
Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: oZGM68ukEQAfOlCSDe22znwTjPsQ9wy+04TJsznuCgk=)
2: XPXEvulv6BRs4b2afB3vj1ysfjA.roa (hash: qNzZm+qCRmlx5vY5iWeolu3onIP1zfzskLuFaO1O8gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:71:df:25:61:e5:a9:f6:f1:65:a1:d1:09:b6:c6:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86
Validity
Not Before: Sep 26 02:01:07 2026 GMT
Not After : Sep 27 02:01:07 2026 GMT
Subject: CN=c0325234e94a342d9746e7bc92b63eddbf48430d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:2b:d1:dd:96:b6:5a:35:1b:79:ae:f7:39:
89:79:57:06:40:b6:36:41:79:a6:4b:09:0d:29:63:
d3:9c:a6:ab:79:4a:fa:b7:2f:9e:74:2b:4d:79:4f:
c4:28:73:27:af:71:12:85:05:0d:1e:2e:c0:a2:af:
9f:92:55:d9:1f:71:71:a7:4d:c1:d6:d8:f6:ad:a1:
37:4d:59:46:32:ed:d7:d6:19:41:6d:21:2f:cc:72:
45:90:30:4f:42:d2:8f:8d:1e:cc:c0:1c:ec:52:05:
52:93:3f:22:ec:35:a1:1f:58:22:e7:1b:da:37:4c:
ea:97:1a:72:70:bf:33:99:18:fe:8e:d4:04:08:04:
9d:4d:61:e4:f8:79:99:1a:2a:b1:3c:b7:09:28:b3:
1b:3e:a1:12:cf:41:e1:be:a2:8d:ae:07:71:41:00:
ad:95:64:f2:7c:5a:52:32:86:98:34:12:3c:7d:c5:
cc:9e:45:92:3d:44:83:97:57:ad:fa:87:21:68:c9:
23:6e:05:64:00:52:0e:0c:36:98:ac:57:e0:22:62:
e7:09:24:3b:65:09:24:f5:a0:a9:c8:a8:24:ee:39:
0f:b3:fd:4b:38:8c:f6:33:cd:d9:60:c3:73:08:4e:
cf:a1:68:23:f6:6c:7a:5f:2c:cc:dd:85:83:52:c7:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:32:52:34:E9:4A:34:2D:97:46:E7:BC:92:B6:3E:DD:BF:48:43:0D
X509v3 Authority Key Identifier:
keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a3:85:72:4c:ca:28:1e:60:a2:39:1b:20:0f:d3:cf:22:6d:
ef:f5:c3:23:14:27:ca:a6:33:bd:3e:66:86:57:93:77:4c:3b:
1a:c2:18:15:78:2d:cd:2a:86:5e:09:10:0d:bf:76:1b:e0:54:
13:6e:32:90:c0:19:b4:f3:5d:8b:a3:71:02:26:3c:82:d7:cb:
b3:51:18:4a:5e:07:49:08:60:a8:72:77:d9:83:45:de:43:f9:
45:91:af:1b:c3:65:25:b2:44:ac:41:77:38:63:63:a3:0c:85:
51:24:65:f0:9f:80:2c:1d:23:dd:26:0b:7a:e6:1e:62:c0:ef:
e8:e1:1f:37:5c:46:5d:63:90:56:13:1e:af:9d:af:c1:c2:19:
df:60:31:22:01:81:22:75:31:18:70:39:ac:8d:35:7e:78:20:
68:a2:81:00:03:61:c1:d5:9f:d2:c0:17:57:67:e6:ca:fb:8c:
49:9d:6f:9b:8d:cc:8d:b1:e1:c5:49:c9:8f:99:fb:c7:e3:a1:
7e:24:51:39:a8:f9:b6:a5:3f:9f:c8:e3:fa:8c:90:cd:dc:97:
52:69:35:ae:0f:6f:a9:c5:a9:76:76:cd:f1:4c:54:d6:d9:4c:
84:56:6a:61:66:d8:be:cb:63:61:f0:da:47:83:98:d4:d2:53:
f5:34:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:30:25 2026 by rpki-client