Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
File: qap8qvmnyjedaW0a3VfA7dBVP_k.mft (raw, json)
Hash identifier: tqNl1/+ShhP5DkePQ1sIxJuR3EqG297MllgNPTWLXog=
Subject key identifier: A3:E8:05:0D:23:62:BA:CA:19:BC:91:64:CD:98:6A:06:9F:1E:86:9F
Authority key identifier: A9:AA:7C:AA:F9:A7:CA:37:9D:69:6D:1A:DD:57:C0:ED:D0:55:3F:F9
Certificate issuer: /CN=a9aa7caaf9a7ca379d696d1add57c0edd0553ff9
Certificate serial: 01A0CA7DE0B7B70230FB99ECCD7BA9C1C55B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
Manifest number: 01CE
Signing time: Tue 22 Sep 2026 19:00:42 +0000
Manifest this update: Tue 22 Sep 2026 19:00:42 +0000
Manifest next update: Wed 23 Sep 2026 19:00:42 +0000
Files and hashes: 1: GCbuRd6csJQHzpB8lvnWZve0UIs.roa (hash: auu2xsjWmwNZtuETF+y7lmmBrOPk6zT22UOZl16juME=)
2: qap8qvmnyjedaW0a3VfA7dBVP_k.crl (hash: jgD/qheX/PX+ow6q2RkrFjfVoKoL0rMCcyEB7gBdc+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:e0:b7:b7:02:30:fb:99:ec:cd:7b:a9:c1:c5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9aa7caaf9a7ca379d696d1add57c0edd0553ff9
Validity
Not Before: Sep 22 19:00:42 2026 GMT
Not After : Sep 23 19:00:42 2026 GMT
Subject: CN=a3e8050d2362baca19bc9164cd986a069f1e869f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:ea:af:08:eb:31:18:86:c9:05:4f:c8:9a:
fb:02:99:17:43:83:49:cb:17:65:53:61:3b:ca:9a:
af:9b:48:f6:71:b2:d4:fc:3a:1e:a7:d4:40:7f:5d:
89:26:fa:8d:3a:a9:73:5f:3a:eb:6b:a0:b4:32:ea:
6c:a9:7a:93:56:c2:1c:e0:b7:e2:85:7d:8b:23:27:
71:05:e6:f3:1c:32:bc:90:17:f1:bd:e7:d2:0d:76:
f6:c1:77:79:1f:a5:8c:ee:46:e0:dc:e1:db:bb:6d:
20:81:70:22:b9:0c:38:6b:8e:9e:81:51:a3:fe:b3:
ca:66:53:d5:f2:98:f8:3d:52:8b:7b:46:f9:44:1a:
0f:1d:ce:8e:79:91:81:89:e5:0c:c1:d6:69:91:55:
0a:5a:0e:d5:db:1b:0a:83:65:3b:7e:b0:e5:b1:54:
46:55:31:ae:59:29:95:07:e3:33:6b:48:df:4e:38:
3e:e0:13:32:4f:3f:52:8e:49:64:88:64:57:f4:be:
49:02:5c:b4:86:11:2a:37:46:1b:df:20:95:4f:a9:
bb:30:32:18:1a:4e:17:75:a4:91:ac:21:1a:bf:64:
b4:58:10:92:7a:42:ee:5d:00:32:b5:51:88:56:e3:
f3:52:96:fd:23:99:b2:a1:8f:15:cd:c7:ea:13:b2:
25:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E8:05:0D:23:62:BA:CA:19:BC:91:64:CD:98:6A:06:9F:1E:86:9F
X509v3 Authority Key Identifier:
keyid:A9:AA:7C:AA:F9:A7:CA:37:9D:69:6D:1A:DD:57:C0:ED:D0:55:3F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:fc:9c:51:7c:ec:6a:58:94:ee:0d:a0:28:26:00:9f:b9:bd:
5e:21:a1:09:0a:24:64:c7:fd:93:28:a9:b3:6e:09:46:b8:63:
07:76:1d:72:df:9a:ca:79:09:07:8a:6e:09:36:c5:59:6b:f6:
21:3a:34:38:c0:87:5f:2a:86:c7:78:26:54:09:32:4b:f6:bf:
d6:ed:df:57:6c:89:62:b3:a2:db:a0:fa:e6:a6:65:51:bc:e1:
fb:f2:a9:a4:62:e8:62:76:60:a9:88:53:0d:17:c8:78:51:bc:
3f:81:12:76:86:2c:52:bd:b8:50:94:25:ee:7d:74:90:34:2a:
19:2e:a1:0d:79:5f:06:78:75:d6:c2:ef:7f:a8:2d:26:2b:7b:
3a:b9:b1:51:6d:4f:f0:e7:8d:e8:d1:ed:5a:ff:e5:89:39:04:
2f:7e:98:36:c8:a1:89:3f:04:88:af:61:85:1f:02:b2:2b:36:
e7:f2:11:6a:c5:8e:7f:b5:20:52:13:3d:ca:c9:b8:6f:54:cb:
85:be:f5:bd:6c:de:c7:a9:a2:1e:28:06:1f:f8:5c:f4:0c:ff:
ec:75:80:42:f4:63:28:c9:7c:b2:ad:12:ed:06:a9:ec:c8:96:
ae:96:96:c6:23:c6:7b:6b:08:67:a2:03:8e:f7:f3:c7:f6:96:
1b:95:3c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:32:37 2026 by rpki-client