Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
File: qMb9tmtdmLoA1OKngcNRTGUuc1s.mft (raw, json)
Hash identifier: 3f7893lV093mDFyxvCYnGqbdpReAWLbBg1rz5+JzcYo=
Subject key identifier: CB:60:14:37:DD:C1:AD:26:BD:57:FA:6A:8F:0C:C7:30:70:BF:21:F4
Authority key identifier: A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
Certificate issuer: /CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Certificate serial: 019FA8D084465DE96CF32A28312D75A20107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
Manifest number: 1D
Signing time: Tue 28 Jul 2026 13:01:05 +0000
Manifest this update: Tue 28 Jul 2026 13:01:05 +0000
Manifest next update: Wed 29 Jul 2026 13:01:05 +0000
Files and hashes: 1: SD6sHxAt1pjK9oQLSlV57TTHq-c.roa (hash: euvAKqoAmy9xNvQKqBSo3raivfnNgWWSIa+OmOt9HVY=)
2: qMb9tmtdmLoA1OKngcNRTGUuc1s.crl (hash: +P04dGV5tszyh5fBdSqtBXkLokM/xihGr9+Dqxyk/XU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:84:46:5d:e9:6c:f3:2a:28:31:2d:75:a2:01:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Validity
Not Before: Jul 28 13:01:05 2026 GMT
Not After : Jul 29 13:01:05 2026 GMT
Subject: CN=cb601437ddc1ad26bd57fa6a8f0cc73070bf21f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:47:ba:e4:8e:d0:91:2b:c9:fe:1f:3d:bc:
72:8d:58:12:0e:c4:0a:16:e9:d3:36:8b:e3:1b:f4:
f7:01:9e:d1:66:5d:f0:fd:ac:c9:42:37:77:1d:fc:
af:89:75:ac:23:4a:36:b9:c1:0c:a4:60:93:4c:8b:
0b:a8:13:11:e3:01:6e:42:1e:d1:5e:db:f7:2e:90:
ad:a3:2d:e6:c1:be:49:cd:7e:97:e0:21:aa:77:62:
7c:c7:99:e9:eb:00:3e:a0:7a:5c:64:4e:bc:81:8d:
2d:63:58:1f:5e:71:17:c4:de:c3:7b:50:76:70:37:
92:da:90:74:95:24:98:40:7a:e0:75:ab:e7:74:dc:
29:f1:30:ca:df:f8:33:49:a7:f0:8c:b0:65:37:c4:
cd:17:80:ec:8e:12:26:61:b9:fd:5e:07:39:7d:1e:
d9:42:00:9e:e7:0e:03:0b:e9:4c:c8:e8:fd:4c:d4:
b9:7a:3a:db:00:d0:9d:85:a5:16:25:d8:ac:09:a9:
7b:f2:b9:01:82:75:0c:d4:ba:c4:e4:08:b5:5e:a8:
14:cd:d0:dd:e9:69:be:cf:cd:2f:4f:a0:fb:37:7d:
31:50:67:c8:83:2f:e9:4c:16:d8:fe:94:c4:1e:fe:
46:94:2d:e0:f0:a0:e8:cb:9f:a4:70:eb:ed:7e:96:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:60:14:37:DD:C1:AD:26:BD:57:FA:6A:8F:0C:C7:30:70:BF:21:F4
X509v3 Authority Key Identifier:
keyid:A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e6:2c:87:10:bf:55:75:c9:34:f6:6d:85:e1:79:08:bd:11:
fc:67:94:13:35:a9:50:4b:af:3a:25:c0:18:ca:9c:40:51:e2:
d5:21:fa:5a:55:2b:a7:f4:5e:5a:4b:8a:ab:43:22:ac:95:a5:
48:3b:70:5a:59:ba:f1:d1:79:f2:8e:0a:19:25:90:db:57:cd:
2f:92:f9:50:26:a6:df:13:22:20:df:40:74:38:aa:62:2c:18:
72:f6:18:4e:7c:1e:2e:ad:fb:fb:75:49:7e:84:21:65:cd:2b:
01:82:62:d0:c9:3a:83:25:15:aa:a5:f6:25:ac:7e:7d:e0:7c:
e1:c1:af:05:1a:ed:8b:42:6b:fd:c7:3d:50:5a:0e:2e:00:d5:
e5:c7:17:28:2b:8e:e1:91:dc:19:4a:9d:80:b9:df:44:01:1b:
a3:bc:47:e8:10:80:c6:1b:2a:14:1e:51:c2:93:04:b7:18:95:
55:7a:36:e6:ae:04:73:37:3b:d0:9a:82:49:d0:4a:ea:08:05:
77:f0:de:02:f5:80:cd:3c:69:ce:d8:d4:19:dd:ee:25:ba:da:
0e:81:eb:a4:70:5d:6f:a5:26:36:75:14:6f:09:34:9b:86:76:
1d:78:52:11:b1:59:58:46:cf:31:4b:03:d4:df:42:0d:a3:c7:
bc:c7:45:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:00 2026 by rpki-client