Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
File: qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft (raw, json)
Hash identifier: eTvHmsHN/Vi+rZ/zpMBx6Ku2X5JQHOtSSMZz4M83R4g=
Subject key identifier: 2A:5A:98:BA:4B:8C:14:F5:A7:23:9B:44:DA:B5:7B:FB:94:6B:E7:99
Authority key identifier: A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
Certificate issuer: /CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Certificate serial: 01A0C47BD253682E8E7848AC66D9200388D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:00:44 +0000
Manifest this update: Mon 21 Sep 2026 15:00:44 +0000
Manifest next update: Tue 22 Sep 2026 15:00:44 +0000
Files and hashes: 1: 1-uaXjZ6yrrtJqfNtsY2-IfoHC9A.roa (hash: ZnV7OIgyRpJomB9RH+WRj4jIbkVriTkEGmB17bdQUdY=)
2: UiuaMadIa34ZVH4JPpb_7TjTz3A.roa (hash: 81//4wt6oj+yRk5h9sBjg6Uv03FMVzZyifdZ80jFUsU=)
3: qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl (hash: Kd5Xz9Ft3OdsmEYiWGXHiinWwtCcNDijnEtEy3aCnug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:d2:53:68:2e:8e:78:48:ac:66:d9:20:03:88:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Validity
Not Before: Sep 21 15:00:44 2026 GMT
Not After : Sep 22 15:00:44 2026 GMT
Subject: CN=2a5a98ba4b8c14f5a7239b44dab57bfb946be799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:5b:4f:07:19:49:52:9f:f1:42:a0:88:da:
79:52:6f:73:df:86:3c:29:6a:c8:a2:99:48:e6:96:
31:fe:00:89:a5:70:0a:ed:03:bd:14:de:b0:03:d8:
3a:ec:a5:49:82:8f:fa:b5:a9:12:c1:6f:e8:a3:5f:
f4:3f:12:25:92:5d:a8:61:96:c9:56:44:3e:63:8c:
0c:7e:b2:96:2e:87:c2:9c:24:22:4a:03:bb:17:94:
88:86:2f:50:b0:ec:18:50:5c:5d:c6:da:90:3d:d6:
46:0d:e7:5b:3a:cf:bc:23:9a:df:b1:ed:39:a0:b6:
34:e5:a6:00:b6:cd:8c:f0:ca:05:38:22:df:7f:1e:
9a:5d:66:e2:12:33:0a:b8:f7:bc:0e:f4:12:89:55:
07:ba:8b:6d:8e:6e:61:a1:8c:37:b7:8f:05:43:ff:
90:2e:45:05:5f:84:f5:14:58:8e:18:40:e3:9e:eb:
c5:54:89:97:56:79:e5:1f:8d:15:f9:cd:bd:f1:e7:
78:7b:82:f8:4b:c5:06:1a:c8:ea:51:07:55:63:3a:
9f:fa:02:bb:7b:3c:82:e2:41:0b:18:24:6d:e7:c5:
88:60:69:e0:16:1d:13:c1:dc:87:7e:80:99:7e:cc:
8c:1a:81:95:59:77:e3:5d:8d:b6:d1:c6:00:cd:9c:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:5A:98:BA:4B:8C:14:F5:A7:23:9B:44:DA:B5:7B:FB:94:6B:E7:99
X509v3 Authority Key Identifier:
keyid:A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:81:38:f3:ea:03:d6:7f:19:c5:cd:7a:af:31:b9:98:bc:76:
25:d5:7c:f7:68:ea:d9:c8:92:cc:73:41:09:06:2e:ae:15:51:
c5:50:f7:62:a7:dd:49:93:32:d2:98:e0:4b:25:9b:7e:8e:8c:
18:bd:29:fa:c5:8a:c4:34:08:d5:9c:4b:0b:65:94:4e:a2:e2:
a8:3d:21:98:00:08:bf:de:0e:2e:06:a2:3e:94:ae:9f:17:23:
8e:79:0e:7c:9d:fc:86:2e:d0:98:43:6c:ef:29:f9:69:fb:f2:
5a:0f:60:c9:08:59:6b:b5:28:e9:06:42:9b:0f:a8:85:6b:8e:
99:05:55:f2:b8:d7:c6:fe:51:e5:23:a4:65:a2:c7:3b:c7:2c:
46:a3:87:eb:b2:3b:d0:78:ab:44:28:9a:6e:10:41:e0:16:56:
39:95:8e:e8:bf:a7:07:e5:c0:49:60:35:b0:ae:00:b3:90:31:
d4:f8:3c:92:25:0d:fd:85:83:41:14:2f:12:eb:ef:37:ef:fb:
45:95:12:bd:01:6b:d1:58:6c:54:13:c5:1b:39:c3:6a:e6:43:
ce:3e:e3:6a:ee:c7:b5:c0:9b:bc:ea:64:d6:a8:42:5c:fc:68:
e7:ea:24:65:9e:7e:d6:a6:67:a5:e4:43:06:77:74:a0:8b:d9:
16:08:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:56 2026 by rpki-client