Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
File: q29qNuwpYNTQXz2dyxh7m5BOpZs.mft (raw, json)
Hash identifier: AJ4m2pteBSMRzk8TeqSOt33sk6k/d5r/h5DtG5OPHeE=
Subject key identifier: CF:B4:C8:00:68:62:CB:48:8B:0D:AD:6D:5A:7D:20:33:C4:54:BE:22
Authority key identifier: AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
Certificate issuer: /CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Certificate serial: 01A100FEBEB14996C2291E4AAEBEB8216458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
Manifest number: 0A84
Signing time: Sat 03 Oct 2026 09:00:57 +0000
Manifest this update: Sat 03 Oct 2026 09:00:57 +0000
Manifest next update: Sun 04 Oct 2026 09:00:57 +0000
Files and hashes: 1: XRR6ABUa1P3i6raSX-yQmGnDjr8.roa (hash: +lCokKi8ekNLJ79hVMEJ7Z8KfB/ISkSlERz40oRMdHY=)
2: YasjItyYLr7ldXZzoAE4Tqx_wK0.roa (hash: OuG7rFmV3hcieE9XEH+njL33ISFbow8zG5iA5JYMNV4=)
3: nYyVLm0gMDde0qblfT3ncHKAnz8.roa (hash: jNbahQjR6FvDEsOWUHlprHyKe5vIEPV9UxOl9Q91iVk=)
4: q29qNuwpYNTQXz2dyxh7m5BOpZs.crl (hash: tkvq8TW8Rsso392W+TfvSYwndXx67JNpptX3D0NwWpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:fe:be:b1:49:96:c2:29:1e:4a:ae:be:b8:21:64:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6f6a36ec2960d4d05f3d9dcb187b9b904ea59b
Validity
Not Before: Oct 3 09:00:57 2026 GMT
Not After : Oct 4 09:00:57 2026 GMT
Subject: CN=cfb4c8006862cb488b0dad6d5a7d2033c454be22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:e5:ac:0a:3b:1f:5f:70:b4:f8:4d:7b:23:
59:b6:3a:55:ce:0e:27:15:fc:b8:ad:48:40:48:fc:
69:5c:33:85:38:55:23:0f:57:5e:6c:02:cd:82:fb:
78:84:9f:38:0e:51:b9:cd:f2:93:f8:8a:8c:5b:98:
3c:87:68:e5:b4:65:fb:94:45:be:de:64:67:49:4d:
32:83:54:59:e9:3b:d2:63:44:09:9b:ab:71:dd:3f:
2c:25:2c:7c:bd:66:e4:85:35:e9:6b:86:eb:29:96:
27:ba:7a:d8:d3:ce:97:e0:2e:a4:ce:c4:7e:67:e2:
8b:b4:86:1f:ce:be:89:3b:3b:08:db:2a:a4:a3:60:
37:06:7b:b0:33:6a:76:c0:53:bc:8c:84:31:cd:ac:
15:00:bd:b2:51:50:30:c5:cc:5d:5b:60:82:63:32:
5a:dd:a6:12:70:99:7f:22:47:96:95:92:86:cb:e9:
1d:d6:dc:0c:6d:d4:0e:96:95:76:28:fb:ca:30:91:
de:7c:b3:8b:2b:ec:88:0d:ad:03:cd:9c:a5:9f:e1:
37:f4:82:49:cf:ef:32:08:ba:c9:38:93:5e:06:ff:
2d:dc:a2:7f:68:f3:03:f1:37:73:ed:89:a7:48:90:
3e:61:e9:a3:79:31:85:e3:6d:67:c2:9e:c0:59:00:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B4:C8:00:68:62:CB:48:8B:0D:AD:6D:5A:7D:20:33:C4:54:BE:22
X509v3 Authority Key Identifier:
keyid:AB:6F:6A:36:EC:29:60:D4:D0:5F:3D:9D:CB:18:7B:9B:90:4E:A5:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q29qNuwpYNTQXz2dyxh7m5BOpZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4d9bad-d2ac-4179-8945-94bb83a20029/1/q29qNuwpYNTQXz2dyxh7m5BOpZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:67:63:7b:53:c6:f1:30:8f:f7:f1:c8:b5:17:ff:90:5e:54:
48:5b:64:2c:e6:6a:22:1f:7e:61:b2:5f:4c:64:e3:1d:41:2e:
d6:98:35:ea:9a:5e:a8:1b:b9:3f:86:f3:34:1b:df:05:e5:1c:
14:7c:d7:f2:c2:46:d0:73:88:28:a9:76:63:45:11:39:5f:7f:
23:8f:e2:54:76:ca:33:15:34:2c:86:f1:a9:75:50:b9:7e:d2:
9b:9c:fc:9b:1f:08:f7:26:d9:6c:90:7e:71:77:af:74:81:99:
93:43:94:92:a3:1a:80:64:f7:00:40:2d:4d:a2:e6:8f:de:e8:
27:f4:c8:32:01:6a:ab:9e:30:ca:b3:d4:b7:74:c1:e3:06:a8:
64:c7:5c:04:fb:6e:f8:77:e1:a1:ef:ce:80:ee:ab:ef:75:06:
ac:1a:80:4c:3d:bb:45:6d:a7:97:74:04:9d:b5:85:6d:fe:6f:
4a:d3:bc:bc:14:22:5f:b0:90:fd:b1:e3:38:44:62:0a:e2:9f:
b1:62:f7:8c:3a:00:c6:3a:aa:e9:b7:71:30:29:eb:69:0a:27:
e6:a4:6b:db:85:8d:ca:7b:1a:24:6d:29:fa:e8:8b:09:88:b0:
41:ab:19:a6:b6:e5:20:d9:6d:ee:f6:76:49:5e:8e:3a:f8:90:
fb:f3:1d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:04:45 2026 by rpki-client