Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: tQ9ltXf4JMpNBMPxN0oRNQfzUa4pTaqWTQQPo7UkIfM=
Subject key identifier: 3B:CF:2B:93:60:6C:B5:26:E5:06:A0:D0:4B:3F:6C:27:CA:73:1E:C8
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 01A0D9834A965D05E80B3AA760C014C278F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 1A76
Signing time: Fri 25 Sep 2026 17:00:55 +0000
Manifest this update: Fri 25 Sep 2026 17:00:55 +0000
Manifest next update: Sat 26 Sep 2026 17:00:55 +0000
Files and hashes: 1: 17NcvApuNSXy7j6b0yleIlW66rE.roa (hash: ELqpc8rB+esi/WJGkFsbXdMD1AmM+2FxKPDU9lOV9eY=)
2: M_-1yevGXxmg89kgZZwEjkECaGQ.roa (hash: Vo4/wHw48EoLaCQHDcS1MW43X+9bXlGsuQH6qGMPLug=)
3: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: beC1b4wygh9gFLf/hidNFeD7R0e1JdOykthzc8BNyc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:4a:96:5d:05:e8:0b:3a:a7:60:c0:14:c2:78:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Sep 25 17:00:55 2026 GMT
Not After : Sep 26 17:00:55 2026 GMT
Subject: CN=3bcf2b93606cb526e506a0d04b3f6c27ca731ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:8c:9d:f7:4b:4b:16:ec:c8:94:aa:cf:de:
27:64:09:a7:23:76:c1:cc:c9:32:aa:71:d9:a7:6b:
4b:77:07:9f:ca:b7:1b:30:a1:b2:57:55:fb:41:a4:
6b:1b:31:da:b6:52:4e:f2:da:1d:3b:ae:bd:62:48:
b3:31:7e:e2:f5:87:d8:85:23:aa:7b:a6:21:f7:7d:
ef:27:51:9f:94:0a:ff:a7:7b:ef:97:0e:8d:e3:ef:
cf:3f:44:56:0d:a2:23:4f:57:12:39:32:a6:a2:3f:
9d:9e:f5:08:fc:74:00:4b:66:99:5b:9b:17:44:ca:
f7:0c:53:eb:19:fd:9c:c8:30:14:ff:b1:c7:13:29:
9e:30:4a:28:34:7d:b7:cd:99:22:34:34:d2:f5:41:
7c:34:3c:eb:9c:ca:c0:da:bd:cc:2b:41:c3:4a:b1:
e6:e8:79:6c:a3:3d:8b:4d:4e:b0:06:f2:f0:84:e7:
29:eb:16:e3:3b:75:85:ea:46:4d:d3:30:33:bf:3c:
80:73:a1:91:7f:1f:f2:07:4f:db:9b:0d:c8:a1:84:
9c:4a:ab:4c:82:5d:0a:eb:7e:a6:57:88:08:25:c7:
56:66:3c:e2:f6:81:ed:cf:b3:52:f7:81:a3:25:9e:
04:0f:ad:7e:32:c5:93:c5:b6:74:a3:f1:e9:02:fa:
d4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CF:2B:93:60:6C:B5:26:E5:06:A0:D0:4B:3F:6C:27:CA:73:1E:C8
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:38:c7:0a:3c:d2:ae:62:91:a5:ad:20:ed:c8:76:e0:d2:64:
ff:da:92:e1:f1:b3:f2:61:9f:e7:f6:4d:d4:f3:c1:af:9c:e3:
65:c2:d2:f3:fc:aa:99:27:67:a9:69:8b:ac:86:f9:88:8d:06:
d4:ee:0e:f6:96:92:4b:5b:08:67:e0:27:a4:b3:89:17:67:84:
0d:10:4f:0f:f9:8a:80:83:0a:8c:13:0c:df:1d:46:1f:6e:1b:
b1:f3:58:bb:a2:e2:16:a1:58:06:48:1a:3e:1c:98:76:3a:a7:
77:7f:00:dd:be:aa:87:c4:43:88:16:eb:ca:c7:20:db:85:1d:
e4:e8:1f:d3:94:34:f9:db:62:b4:9a:ca:f7:de:80:47:8a:2a:
47:15:10:0a:06:e1:06:70:97:7b:6b:23:0f:fe:16:a7:18:90:
f9:13:27:ea:7d:0c:84:e3:30:49:a8:57:2e:ac:bb:72:6c:a3:
70:96:68:4e:a7:2d:b0:c6:44:64:b5:1c:74:a9:a8:53:e5:99:
b9:c0:c0:0e:ac:c4:9c:70:67:d1:dd:99:bf:cb:ec:01:f0:69:
70:af:bf:5e:c5:27:08:89:3f:5e:12:b6:d0:99:a3:fe:14:1b:
79:3b:41:2d:49:a3:3b:37:4e:af:8a:d2:9d:c2:64:96:e4:4c:
09:92:e4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:19:22 2026 by rpki-client