Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
File: qMb9tmtdmLoA1OKngcNRTGUuc1s.mft (raw, json)
Hash identifier: xVOUJEr/Vv9bEaY75RQcPGNpBkrEJJ+1DIdgIshyPBQ=
Subject key identifier: 4A:5D:E7:CE:82:EA:62:CB:76:C4:A8:09:8E:B7:4D:DD:0F:D1:26:B7
Authority key identifier: A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
Certificate issuer: /CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Certificate serial: 01A0C2C493655593A11E3834BEBDB3161235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
Manifest number: AF
Signing time: Mon 21 Sep 2026 07:00:57 +0000
Manifest this update: Mon 21 Sep 2026 07:00:57 +0000
Manifest next update: Tue 22 Sep 2026 07:00:57 +0000
Files and hashes: 1: SD6sHxAt1pjK9oQLSlV57TTHq-c.roa (hash: euvAKqoAmy9xNvQKqBSo3raivfnNgWWSIa+OmOt9HVY=)
2: qMb9tmtdmLoA1OKngcNRTGUuc1s.crl (hash: rk/kls315NXsbAoV8bMtY8R+DohlVpM6mKcMVXtyqhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:93:65:55:93:a1:1e:38:34:be:bd:b3:16:12:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Validity
Not Before: Sep 21 07:00:57 2026 GMT
Not After : Sep 22 07:00:57 2026 GMT
Subject: CN=4a5de7ce82ea62cb76c4a8098eb74ddd0fd126b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:71:22:46:12:09:a4:76:b5:17:c2:0e:21:
6f:fa:a3:44:42:30:06:dd:9f:d6:ba:86:d3:72:74:
e5:e3:fb:6c:2d:ee:20:0c:05:f0:8d:a9:99:70:43:
dc:cd:c6:3e:09:e9:75:ff:82:72:8e:8a:c4:36:76:
d2:5e:75:b9:c4:c6:e4:fc:15:68:8e:b5:8a:cd:13:
02:cc:35:15:b2:60:32:b5:5d:6d:5c:a4:10:19:89:
01:a4:94:f6:97:e8:0f:96:48:19:71:60:c6:cb:97:
cc:8d:36:9d:22:74:bf:66:b8:91:d8:d1:d6:f2:69:
95:f9:ad:72:7b:15:e4:54:47:02:17:29:9c:be:4e:
25:58:c3:1f:b1:7b:e9:af:14:d9:e1:07:80:9f:f8:
d0:ee:9d:b1:f2:cc:17:35:d4:9f:b9:81:61:b9:e9:
20:96:23:4d:55:13:5d:98:be:f9:77:96:20:90:ec:
2b:0b:7e:3e:9a:e3:a9:d9:c0:0d:fd:81:7f:66:85:
4a:68:92:43:a2:6d:b8:e9:7c:57:90:d6:89:66:70:
2f:a5:8b:b4:96:c4:e4:e0:7b:fa:57:2b:c5:bd:67:
8a:a1:cf:7d:99:b1:2d:0e:fd:b1:96:25:80:8f:14:
1b:ac:0b:03:37:16:30:a8:36:fc:1c:55:3a:d3:f1:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5D:E7:CE:82:EA:62:CB:76:C4:A8:09:8E:B7:4D:DD:0F:D1:26:B7
X509v3 Authority Key Identifier:
keyid:A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:63:d3:d9:04:c0:bc:bb:08:26:10:b1:86:d5:c3:ef:e4:72:
ea:bf:4d:6f:04:e3:88:58:68:ea:7d:ed:36:21:79:fd:2f:cb:
9f:b5:a4:bf:8b:ae:5f:8d:47:b9:44:8d:d7:02:d1:5b:93:30:
2a:ab:ba:fe:4a:65:a7:ee:e5:31:f6:62:37:a2:f3:87:9b:e1:
11:ed:3a:a3:f6:77:0a:2b:6b:8d:1d:67:a4:6b:6e:11:09:c9:
c1:6b:7b:b9:5c:6e:5a:03:ed:f2:96:9a:97:fc:d7:73:85:da:
16:c2:43:4f:1d:4d:82:6b:f5:d8:ce:4c:68:6c:f6:aa:27:b7:
03:fa:78:43:65:6f:f2:1a:30:e0:6b:ff:51:03:5e:36:f3:5d:
86:7d:22:33:b5:1d:84:07:dd:e8:fa:15:b5:09:a5:3e:1b:92:
01:66:49:7a:8d:63:f9:de:2d:08:02:41:87:63:07:a4:63:03:
63:1b:4d:f8:bf:6c:80:d4:47:4c:8d:3b:39:81:a7:9a:c7:ed:
8c:5c:fd:83:d7:c1:d8:7f:24:8c:73:36:8a:71:e0:3a:75:17:
ad:54:bb:d5:e1:f2:f1:6d:70:b5:00:26:90:19:c5:cc:72:9f:
d8:ed:14:28:39:ef:fb:4b:ab:79:b8:96:b2:07:6e:7d:04:c0:
2b:a1:5d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:53:47 2026 by rpki-client