Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: dRBdXDOajISjmZYYiOrHPo331aPqVN02FazhM0sQJj8=
Subject key identifier: 6A:D5:8B:BB:53:0A:E9:0F:D1:1B:F9:3E:04:2A:DA:F5:4E:E3:90:5F
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 01A0CA46E8D1E9BE83A6056A7EDE0EAB520A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0BFF
Signing time: Tue 22 Sep 2026 18:00:39 +0000
Manifest this update: Tue 22 Sep 2026 18:00:39 +0000
Manifest next update: Wed 23 Sep 2026 18:00:39 +0000
Files and hashes: 1: PYhdlsUvc6cMikLsj2CZu44GozA.roa (hash: TWRSUVS4O6iaQs3ZX5NWtc+VI0J6VDPVPjsAdIWPgM0=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: fUKtg6iwsOgdqN0LOgbNxPWMc2X8z+r2MeZ7rS3lqww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:e8:d1:e9:be:83:a6:05:6a:7e:de:0e:ab:52:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Sep 22 18:00:39 2026 GMT
Not After : Sep 23 18:00:39 2026 GMT
Subject: CN=6ad58bbb530ae90fd11bf93e042adaf54ee3905f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:36:4b:46:1f:78:f8:9b:10:09:4e:73:cc:
2e:e4:96:cf:72:3f:27:5a:b6:c6:41:b4:68:32:bc:
50:a4:29:c1:68:4e:36:fa:5e:a9:ab:da:ba:fd:bf:
ec:95:1c:75:8b:a9:96:68:73:5f:23:b7:15:6b:c4:
13:36:99:81:5d:5a:b9:9c:68:ac:a6:05:98:e9:14:
fb:fc:40:57:0d:92:fe:c9:27:eb:96:d5:f0:b3:5c:
78:36:4c:41:bf:58:80:a6:11:0c:2b:70:75:a0:18:
99:f5:11:81:1e:15:99:65:4a:7f:73:eb:e0:e1:b4:
2d:f3:fb:e7:d1:57:ff:c1:ae:d2:73:24:ac:54:19:
af:b1:1e:72:88:55:ea:9c:f7:17:82:d5:37:e9:e7:
c7:17:2f:a9:12:af:5d:de:a9:a7:5f:de:6e:05:36:
8c:f7:bf:c4:d9:ad:e8:33:10:b1:95:aa:0a:9e:83:
4e:a3:a5:85:64:5b:f0:7b:3c:bb:a2:45:eb:db:86:
d3:52:10:49:b8:00:3b:5f:ae:30:dc:e0:cf:32:75:
d2:f9:5b:56:7c:4a:25:b9:09:76:8b:a0:88:52:3e:
3b:57:03:d8:06:ea:4d:82:5f:36:f0:5e:e4:a9:af:
30:0e:8f:1a:07:aa:ad:62:6c:88:aa:62:db:50:54:
29:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D5:8B:BB:53:0A:E9:0F:D1:1B:F9:3E:04:2A:DA:F5:4E:E3:90:5F
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:18:47:2d:22:a6:78:2b:84:7d:24:7c:0d:f7:a7:0d:01:52:
c9:03:5d:63:e2:14:91:30:f2:88:3b:0e:2a:f6:89:3f:e7:49:
06:3e:9c:db:13:c5:2b:53:61:12:58:f7:4f:b4:e9:a2:51:19:
bd:ad:cf:3f:eb:39:09:2d:10:7c:85:bc:a9:51:b1:61:c3:19:
8e:36:78:64:4c:92:47:96:22:2f:0d:42:3e:38:3c:73:28:5c:
20:da:ef:92:5a:f6:b4:68:33:88:5b:b4:5c:cc:47:41:20:67:
d9:54:90:8d:a9:cb:62:f4:5d:60:f4:60:fd:09:87:2e:e7:37:
17:95:f6:35:cd:83:06:67:8a:45:c2:e3:ed:1d:e6:40:3a:30:
59:f7:0f:97:85:ab:cc:b1:71:11:f5:be:2a:7b:ba:28:53:79:
f5:18:c0:5b:8f:24:1c:78:46:85:f3:fa:02:0e:74:4a:b8:a8:
9e:88:b0:f5:8d:63:31:ef:d0:cf:26:3f:8d:40:d8:e4:02:6d:
47:43:eb:96:3d:e0:ab:2b:a5:a3:0d:fe:fd:f2:61:5c:ce:5f:
69:2f:fc:1f:ed:f9:c3:38:cb:51:9a:c1:4c:06:47:a4:d6:21:
e6:f4:07:60:b1:71:86:d4:65:ee:c2:41:d0:91:0e:cc:75:7e:
4e:8e:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:58:38 2026 by rpki-client