Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: tueROIOOJ6W/5GCFo8CcHiZMqKCFezcnR8LrkCSQgl8=
Subject key identifier: 6E:08:67:C1:D4:41:B9:9F:0B:44:7B:11:2E:FC:1C:23:62:FF:33:16
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 01A145A8AC8BDC78BEDB6D87A4217E2CC2FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 1646
Signing time: Fri 16 Oct 2026 17:00:44 +0000
Manifest this update: Fri 16 Oct 2026 17:00:44 +0000
Manifest next update: Sat 17 Oct 2026 17:00:44 +0000
Files and hashes: 1: hIE3MJ-PfD4h71yhIJF_dT9cfjg.roa (hash: m/R6WyfQpnIlnAIRvgibXC6ZmneIg9P6mlSw/7jNIRM=)
2: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: u8U26hsyQqykL6MAgADK3oDvbg8JqmCwP4urylyZtrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 15:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:a8:ac:8b:dc:78:be:db:6d:87:a4:21:7e:2c:c2:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Oct 16 17:00:44 2026 GMT
Not After : Oct 17 17:00:44 2026 GMT
Subject: CN=6e0867c1d441b99f0b447b112efc1c2362ff3316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:40:d8:0d:fb:19:2c:4a:c7:83:e1:8f:dc:
34:16:77:38:a6:b8:c1:fb:a2:ab:e7:e1:34:5b:6a:
27:0f:5b:5d:35:46:59:0b:a2:cd:b2:bf:4a:7a:d5:
35:b8:ac:27:28:5e:05:bd:70:2e:2c:6c:a7:b7:fa:
ac:20:72:8d:1c:f3:d7:e8:f5:10:41:3a:90:08:f2:
32:fd:8c:0a:b8:30:79:46:a5:57:37:63:98:8e:15:
8e:8e:74:31:b1:9a:d3:f8:8d:b1:3d:bf:2b:96:78:
9a:a0:94:da:dd:ea:8e:45:5b:cb:ca:1a:8b:c1:b7:
6d:15:f1:67:b3:30:ef:a5:a0:9f:b9:f9:ea:bf:54:
e4:78:62:9c:61:cb:f7:17:17:71:7f:bc:4f:66:f9:
f9:fa:f6:6a:5e:40:d4:2e:79:c3:9b:42:7b:c2:31:
22:4c:ef:07:7b:c3:dc:19:78:a2:5b:22:1d:f7:99:
9c:6b:07:2a:17:ba:d4:ff:15:2b:0d:7c:e1:62:6e:
33:60:32:fd:f7:34:6f:04:7d:ff:4c:2c:43:b9:78:
78:00:90:44:25:b5:e5:8f:2c:2e:08:e9:4b:1e:18:
37:10:98:16:9d:8a:9a:42:df:3e:26:eb:74:56:de:
5f:21:8c:a3:ca:82:2d:6a:c3:9c:9f:7c:48:a3:c0:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:08:67:C1:D4:41:B9:9F:0B:44:7B:11:2E:FC:1C:23:62:FF:33:16
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1b:a7:58:f3:b2:04:70:3a:8c:78:77:21:3f:89:7a:c4:1e:
94:d8:f4:e7:6b:ff:b9:1a:fc:7f:90:80:09:5b:18:7b:80:fd:
75:30:ad:25:55:a1:97:59:74:6e:30:d1:ae:e6:bc:59:f3:e0:
59:82:58:b2:df:14:62:f1:4f:da:9f:31:1d:91:b7:e0:dd:15:
5f:bd:9b:51:c8:a0:6f:1f:0b:2b:92:fb:df:36:d3:50:fd:ab:
ff:db:bd:64:e5:11:64:e6:ce:c4:bb:c1:fb:e2:b7:d5:17:7a:
22:57:3d:ba:f0:00:c5:e6:5b:90:70:f6:40:11:e3:64:ca:cf:
fe:24:9d:79:f9:b2:8e:14:20:fe:81:f0:c6:07:05:bc:4c:8f:
db:4c:0b:f9:b2:3a:67:2c:53:b8:99:c7:36:ab:5d:5f:00:fb:
f6:bc:8c:ac:d5:b5:06:b1:9b:5a:aa:ae:fd:5c:57:77:74:05:
8b:bf:f2:e3:28:d9:32:68:85:4d:da:9b:2c:af:fc:31:01:46:
49:41:3d:28:e3:a2:11:32:b4:2e:14:3e:96:ee:d6:a0:7d:b5:
ac:ab:49:38:66:53:b3:47:a2:cf:bc:0b:01:c1:34:6b:c8:d5:
e6:b8:54:16:93:c9:cc:c6:0e:3a:07:e1:2e:e2:c7:eb:e9:63:
38:0d:c5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 02:50:58 2026 by rpki-client