Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
File: qQhIeg1_TGIo0NzBKaKoMg242_E.mft (raw, json)
Hash identifier: i/QxBC8B7p38XJ9WCZ1RkQGk5iMYzt0LHmQXGxJt+II=
Subject key identifier: 31:D4:17:ED:D5:C1:21:1D:2E:2C:6E:86:1C:E1:C1:72:CA:3C:24:DD
Authority key identifier: A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
Certificate issuer: /CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Certificate serial: 01A0C88F78F0EBE53133EA7D35AC877F0B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
Manifest number: 2A
Signing time: Tue 22 Sep 2026 10:00:40 +0000
Manifest this update: Tue 22 Sep 2026 10:00:40 +0000
Manifest next update: Wed 23 Sep 2026 10:00:40 +0000
Files and hashes: 1: 1d-v5UPcBJhyCd2pyPy5E0gynEw.roa (hash: 0Ks7OWy4fQ6txceig4Bqr/8jiGLEXTtFfCjk7QRIjoA=)
2: dIMwJtrv09wJ_HCOoXJcE_rOxVo.asa (hash: paYNUqYIys6Nx3Xe4ebAhqNGHaC2aNSP1Rw6N+AbV08=)
3: qQhIeg1_TGIo0NzBKaKoMg242_E.crl (hash: JZXxGaXplzn8PUHNjBoNFte4Tsw/nnLchkcqu3qhLmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:78:f0:eb:e5:31:33:ea:7d:35:ac:87:7f:0b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a908487a0d7f4c6228d0dcc129a2a8320db8dbf1
Validity
Not Before: Sep 22 10:00:40 2026 GMT
Not After : Sep 23 10:00:40 2026 GMT
Subject: CN=31d417edd5c1211d2e2c6e861ce1c172ca3c24dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:74:c3:01:fa:8b:19:e7:64:4e:8a:52:a4:c8:
d4:c0:1e:44:62:3f:22:3d:26:48:15:0e:26:07:b1:
7a:d4:ff:69:1e:60:c8:b0:dd:10:4b:09:93:9f:40:
fd:d7:ab:21:31:44:04:b1:d6:2e:e5:97:ec:92:97:
08:15:eb:c7:df:d1:c6:19:b7:dc:4a:79:d0:c2:1f:
bb:46:36:fd:ae:86:51:39:02:29:b5:74:cc:5e:60:
60:e6:6d:c7:03:29:81:ac:85:83:85:b0:a3:64:2a:
d5:bb:87:47:47:9f:5d:de:a8:32:4b:9a:b8:53:5f:
12:84:c6:75:e7:ec:63:bc:b9:52:1e:33:da:a2:69:
cc:a8:9e:df:78:04:75:47:51:5c:a5:a5:c3:d7:06:
16:ed:dd:0d:f4:b9:98:80:cd:87:66:62:a7:3e:10:
38:17:7a:2b:5d:3a:f5:86:17:a2:ec:14:ba:f8:ca:
4f:ec:fd:10:d8:95:cb:8f:17:77:21:52:db:6f:e8:
fc:5a:cd:87:1c:3d:c1:0c:60:54:e9:41:1a:33:f1:
cb:7e:61:ad:6e:64:12:c3:6c:64:1c:bd:f4:bf:5e:
14:0e:e1:a3:6b:c8:95:99:91:df:0d:2d:8f:9e:1d:
4c:a2:ed:62:01:90:af:68:21:24:81:7c:40:46:c3:
91:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D4:17:ED:D5:C1:21:1D:2E:2C:6E:86:1C:E1:C1:72:CA:3C:24:DD
X509v3 Authority Key Identifier:
keyid:A9:08:48:7A:0D:7F:4C:62:28:D0:DC:C1:29:A2:A8:32:0D:B8:DB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQhIeg1_TGIo0NzBKaKoMg242_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/edbdc7-f7db-46a3-a8e3-e58000a93b21/1/qQhIeg1_TGIo0NzBKaKoMg242_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e8:a4:94:82:9f:25:bb:2f:55:95:f0:a1:16:4d:89:83:f2:
4e:e1:df:53:86:24:82:0d:eb:27:b6:a2:96:18:b6:8e:ff:d8:
e6:7e:3d:15:e3:bb:00:6e:98:8e:cf:b8:df:3e:e4:28:3b:11:
67:97:ca:db:14:72:82:86:4b:dc:21:98:86:34:5c:b4:9f:4e:
1d:00:60:d4:dc:5d:07:eb:13:06:5f:b2:b7:c0:ff:41:39:6b:
bd:6e:8a:ad:38:11:2f:ee:31:d8:06:27:2b:64:19:f5:74:51:
a9:57:ab:7b:48:54:f8:3f:73:57:b7:4a:68:98:9d:17:19:cb:
a7:d0:85:47:4a:6b:59:62:b6:d5:be:fe:9f:cc:4a:46:5f:dc:
04:5d:3e:4c:c8:dc:e6:17:3a:a6:9f:84:17:09:93:31:b3:8c:
26:7c:4a:81:16:bc:54:af:08:39:b8:9c:2d:d2:6d:4d:a4:18:
65:2b:05:78:ad:a0:19:2c:5f:bb:10:3d:76:bc:9d:d1:de:38:
6c:24:c5:90:32:2a:87:1d:ba:a9:7d:cb:09:4e:41:d5:74:2d:
b2:87:73:e6:4c:6e:5b:4a:12:73:f0:68:dc:5a:eb:2e:11:76:
41:0d:d7:b0:c5:5e:ba:19:e9:73:97:7b:2f:66:b7:58:64:9f:
f2:17:93:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:41 2026 by rpki-client