Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.mft (raw, json)
Hash identifier: axNRFv38L4EwUJho1W76ivEcFRzSLLprUzf27LHTA6w=
Subject key identifier: 97:75:53:E4:18:A7:D3:F7:D0:58:8B:EE:D8:36:93:C1:9C:16:D0:88
Authority key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Certificate issuer: /CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Certificate serial: 01A0C2C454801C363F8CF374091D6F075A72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
Manifest number: 1286
Signing time: Mon 21 Sep 2026 07:00:41 +0000
Manifest this update: Mon 21 Sep 2026 07:00:41 +0000
Manifest next update: Tue 22 Sep 2026 07:00:41 +0000
Files and hashes: 1: bDniOy7bJDqEB7j18XhIORHd9P4.roa (hash: 7UeZ8ffZs41TrgD9TFvep3setoYXza5q1+hwG2ZnLPc=)
2: ce9B0xiqGv3-6XVsohVP_4mQ2nc.roa (hash: bZXcOl6PpFz9za7K+EZymB9rux3LD9nnlgPnINrzVx8=)
3: qBfHRT83fpy2-uXIk8Bno-HTUUU.crl (hash: 8Jho8pnqzSYYYW7pSRw/P+esNNmHjGy86XoEWZD4ORc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:54:80:1c:36:3f:8c:f3:74:09:1d:6f:07:5a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Validity
Not Before: Sep 21 07:00:41 2026 GMT
Not After : Sep 22 07:00:41 2026 GMT
Subject: CN=977553e418a7d3f7d0588beed83693c19c16d088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:67:44:6f:1b:73:55:8f:0c:09:f5:68:41:
a7:d9:d5:11:f6:84:02:9a:70:8e:b2:a3:9d:ee:4c:
53:7d:95:83:a8:f6:f1:6f:16:8c:14:80:40:72:6b:
a3:a2:0c:8c:47:24:e8:27:f8:54:41:f0:ca:80:86:
ab:bd:d2:78:07:e8:79:eb:cd:14:95:d5:7c:a2:f2:
76:d2:f3:fb:f4:eb:69:3b:2b:88:6f:33:67:08:d4:
e4:a8:59:50:d0:26:73:51:0f:b5:d9:28:53:fd:2f:
56:d1:b7:92:49:15:d6:07:02:f3:3f:dc:2a:59:71:
aa:02:5f:38:11:09:a8:11:e0:68:66:28:7c:69:3f:
ad:68:f5:96:44:4b:70:a5:aa:30:40:a4:d5:5e:fa:
72:91:99:89:fc:df:6f:c9:5e:c3:fe:70:40:b5:c9:
a8:68:2b:c4:df:03:e9:1b:2f:28:0d:83:8e:7a:3c:
17:6d:9a:ca:63:fc:7f:8a:00:6a:5c:f4:c2:c9:97:
28:83:97:4d:b3:85:88:df:d6:7e:cc:59:a5:26:ff:
3d:ae:2a:e7:ab:a3:76:05:00:5b:58:d8:c3:3d:9e:
91:bf:ca:7c:bb:16:2e:3b:8a:cd:10:8e:a7:50:cf:
fc:de:3f:6f:bd:67:f3:53:17:ba:8f:64:25:d8:2c:
b8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:75:53:E4:18:A7:D3:F7:D0:58:8B:EE:D8:36:93:C1:9C:16:D0:88
X509v3 Authority Key Identifier:
keyid:A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:46:3e:ae:0a:eb:9c:8f:6c:45:00:14:0d:de:83:3c:5d:b0:
ae:a6:c0:dd:5c:13:45:a2:6f:c9:0e:bd:04:88:a5:bf:8a:6e:
c8:68:20:c8:0a:2d:36:5e:d7:f6:25:1b:0d:dd:09:0a:56:93:
b4:fb:b5:04:c3:c0:80:34:42:a4:30:26:2a:30:55:7c:26:73:
fd:8f:71:92:aa:90:19:89:b0:69:c6:a8:7c:d3:13:ec:46:ba:
fa:04:10:11:3d:35:4d:e9:7b:b5:38:ce:92:0b:18:33:71:ee:
9a:f7:34:8c:09:6c:48:be:c8:f8:6e:e2:d2:3c:42:af:bf:a1:
e8:14:71:30:41:49:7a:fa:33:cc:b0:00:74:a2:f8:45:3f:02:
d1:96:4d:84:46:c1:51:03:56:6f:7b:1c:40:f4:d2:67:80:58:
9e:75:fd:7f:75:76:30:58:eb:83:1d:ea:9e:bc:cb:9f:bc:a7:
dd:61:e6:cd:dc:39:b9:cf:de:35:21:6d:69:21:26:6b:f4:23:
ce:1b:ef:6a:5a:7f:f0:e6:8f:d1:05:55:65:80:51:ad:14:50:
cb:54:59:a3:d1:00:c1:f2:7c:64:7b:c2:2e:6e:7f:49:c7:27:
a7:1a:01:86:44:24:9d:93:fa:0f:a7:f8:a9:fa:2f:93:6e:e2:
1d:f8:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:18:09 2026 by rpki-client