
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
File: qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft (raw, json)
Hash identifier: 91WNRlRxwSj6UiRmeuHsdxmTAhM/bSJo6TpYM2Cwy4I=
Subject key identifier: 42:88:CB:EF:AA:95:FF:6A:1F:22:00:7B:D8:96:DB:DC:6C:7C:2C:A6
Authority key identifier: A9:2B:26:C3:8B:76:2C:9E:54:99:EF:DF:F3:AC:D5:98:62:8B:EA:CF
Certificate issuer: /CN=a92b26c38b762c9e5499efdff3acd598628beacf
Certificate serial: 01A0BEB0FF19D6D1378FCBBE8F1A36C835AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:01:05 +0000
Manifest this update: Sun 20 Sep 2026 12:01:05 +0000
Manifest next update: Mon 21 Sep 2026 12:01:05 +0000
Files and hashes: 1: NI385oVhm3QWY8htYFFjFZ1jYzc.roa (hash: sk6wuFdZcfLmM6VcAQviz4agp5zQex1ujsQrgI5Apto=)
2: qSsmw4t2LJ5Ume_f86zVmGKL6s8.crl (hash: 8xHnaTEek+TyaNlfw5CRZPBDcVhYRREmw1ABsfL00eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:ff:19:d6:d1:37:8f:cb:be:8f:1a:36:c8:35:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92b26c38b762c9e5499efdff3acd598628beacf
Validity
Not Before: Sep 20 12:01:05 2026 GMT
Not After : Sep 21 12:01:05 2026 GMT
Subject: CN=4288cbefaa95ff6a1f22007bd896dbdc6c7c2ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:d2:14:0e:b6:03:8f:57:50:0a:2c:df:28:
92:bc:5a:08:57:9b:dc:67:b1:75:f6:69:d3:84:7c:
2b:79:53:1d:c0:96:bb:b8:de:91:a5:81:71:28:55:
bf:16:14:c6:0b:d9:93:17:26:a7:fc:7f:0e:c1:fc:
2d:0f:a7:f0:bf:5f:15:64:68:60:89:d9:b4:33:69:
9c:e1:74:ab:e2:32:3b:c9:83:2a:60:ac:ee:03:e8:
97:1c:c1:a2:a3:0d:84:38:fc:93:2d:6a:33:92:91:
80:f6:48:b4:cd:be:f9:6e:3b:7d:d0:46:58:ed:34:
fc:77:79:48:c3:73:0f:0c:ef:c3:95:35:42:3b:1c:
6f:10:f9:d8:a6:bc:9f:92:88:31:aa:9c:3d:e7:dc:
1a:df:cf:88:6d:ba:35:a7:05:45:a2:a9:8f:ec:70:
8e:6d:19:e0:f9:61:85:71:d8:ed:a1:9a:a8:9c:3a:
f4:04:40:c5:0a:55:5a:33:6a:4d:43:03:2a:bf:cb:
0b:69:0b:66:d7:75:d8:49:fb:3e:e9:ca:ac:2b:ab:
74:81:ed:bd:01:d9:82:25:9d:47:ad:8c:75:b8:69:
c6:12:01:79:bd:50:26:af:74:c9:d5:b8:4e:26:15:
0b:78:12:0c:22:14:be:a6:52:7f:68:80:0f:10:13:
11:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:88:CB:EF:AA:95:FF:6A:1F:22:00:7B:D8:96:DB:DC:6C:7C:2C:A6
X509v3 Authority Key Identifier:
keyid:A9:2B:26:C3:8B:76:2C:9E:54:99:EF:DF:F3:AC:D5:98:62:8B:EA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSsmw4t2LJ5Ume_f86zVmGKL6s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/04ef71-f122-47ce-8a40-cc0f9707140e/1/qSsmw4t2LJ5Ume_f86zVmGKL6s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0c:dd:f6:31:88:fe:ea:fe:0c:e4:ae:0d:9d:18:b0:3d:93:
ab:7e:d1:8a:9b:cd:49:86:d1:5e:dd:1f:2c:e6:e1:90:f2:ee:
e4:54:b2:b1:3e:c3:b2:96:d4:f6:0d:38:fe:68:d5:ad:3c:c7:
9a:ef:0a:04:18:b6:56:86:1e:5a:34:c5:38:cc:7f:e2:7a:a5:
6a:2a:6c:8f:10:8d:87:72:05:90:f9:83:51:32:71:b0:f0:20:
85:6e:65:97:ac:f6:26:c6:10:92:10:ee:e5:1b:5d:6c:43:93:
04:1e:5e:54:e7:d5:73:dd:f0:97:3a:62:53:bc:53:ff:ba:3f:
e6:17:47:25:6c:07:a4:80:9a:2a:1a:c6:ca:bb:1c:42:e0:59:
83:f1:a9:9c:22:99:3a:e4:cf:93:98:f9:31:35:0e:cc:03:5b:
2e:c2:6d:24:28:90:14:e8:1b:5d:c2:5b:4c:20:be:1d:93:06:
28:db:13:64:db:c6:3e:dc:44:f7:51:85:e7:99:f8:af:1c:5b:
31:5e:5b:f0:af:b3:e0:6f:1f:35:de:0f:f6:f5:4b:ca:e6:36:
d7:96:62:a0:26:86:fa:5e:fe:98:4d:3d:5c:41:8e:e7:a3:51:
ef:11:78:84:90:4a:07:74:56:02:84:9d:3c:56:8c:d3:60:15:
e2:87:46:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:06:35 2026 by rpki-client