Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: n2UgXxkY3FjSXNjtSYMZbk2O83cKo7KbQ62kEmTHORg=
Subject key identifier: 87:0C:FB:C4:8B:9B:3F:1C:56:13:BE:ED:45:4B:DD:0D:43:8F:2A:7D
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 01A0C66B15851E771B89C91C8F6771F7FB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 00:01:41 +0000
Manifest this update: Tue 22 Sep 2026 00:01:41 +0000
Manifest next update: Wed 23 Sep 2026 00:01:41 +0000
Files and hashes: 1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: 8mA2DgQyD+SZUcK/UPSoX1wRtJSN6hfBeQBXkAtCQOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6b:15:85:1e:77:1b:89:c9:1c:8f:67:71:f7:fb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Sep 22 00:01:41 2026 GMT
Not After : Sep 23 00:01:41 2026 GMT
Subject: CN=870cfbc48b9b3f1c5613beed454bdd0d438f2a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:70:b2:f1:9e:36:9a:49:76:05:92:ea:ee:d9:
a6:d2:c9:c4:28:89:a5:c3:3f:cf:f7:82:84:d5:f2:
00:15:76:04:2b:ea:c5:6b:1e:3e:d5:ef:69:ee:2e:
cc:7d:2f:e4:fd:49:d3:f3:11:ab:ea:24:85:1c:03:
3e:b3:d7:b7:ef:cf:e7:0b:7c:7f:db:a8:60:15:13:
78:79:44:eb:70:62:9c:27:0c:87:6b:17:36:4d:2d:
2b:92:27:5a:12:c3:df:c6:ce:e3:b9:3b:41:11:9f:
b2:6f:f8:6b:cc:2c:8e:a4:d6:64:5c:fa:f3:09:f7:
ad:2e:3b:11:71:5d:05:1a:df:dc:c0:54:4d:2d:72:
2f:fa:41:a4:28:3a:71:25:80:59:b4:0b:c1:a3:08:
cb:f4:47:e0:0f:af:83:b8:6f:04:81:87:ea:26:97:
e9:bc:0a:b7:2a:37:09:03:3e:a1:41:ee:84:ef:d2:
f2:20:a8:c6:ae:12:92:83:5d:3c:3b:e9:0e:db:04:
b6:b9:31:3f:3e:33:2c:cd:58:2b:1a:8c:c0:fd:8d:
b8:0e:22:32:d5:ea:05:52:a7:8e:08:c7:1f:f7:84:
30:0e:eb:0b:a4:f9:9e:ca:2a:bf:54:11:2d:53:e0:
5f:e4:8a:35:10:10:02:27:4f:09:1a:2e:00:b6:37:
bf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0C:FB:C4:8B:9B:3F:1C:56:13:BE:ED:45:4B:DD:0D:43:8F:2A:7D
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:90:af:92:a4:a5:7d:59:d6:8a:b9:5c:56:eb:20:55:01:57:
25:32:41:52:83:eb:92:61:86:69:e7:92:af:d9:58:b3:58:87:
3a:db:68:be:21:06:0d:a2:5c:5a:62:ca:81:4b:2e:a1:38:ff:
10:36:a6:ad:ef:d2:8e:9b:9b:c8:49:73:a2:5a:2d:88:09:97:
56:29:fc:3e:ef:d8:24:fd:8f:b8:cd:9e:1e:1c:a2:4a:3f:e6:
df:a7:7a:13:70:c2:2a:76:70:05:f0:55:ad:eb:5b:bc:cb:bd:
65:1a:2b:14:ff:78:89:88:66:78:f3:04:c0:d2:7e:85:c1:02:
e0:9e:4a:7e:0c:81:70:0d:af:e1:5a:be:cb:f0:b7:9d:38:92:
2b:3d:08:7c:fd:5e:fa:4b:88:67:0c:66:10:be:69:cb:11:e3:
93:82:9a:59:b8:8c:48:35:18:d9:10:a2:5b:bf:78:d5:e1:09:
4c:7b:2b:c3:db:00:7d:a6:4b:cd:1e:a4:4b:9b:08:d0:5b:46:
66:66:67:53:e9:b5:5f:7c:6b:98:f1:87:2d:6c:ee:ad:25:b4:
07:de:69:78:78:13:07:0f:5e:80:f0:d1:c2:68:ec:b5:98:80:
6e:f7:a8:af:6e:12:6f:b1:32:40:bc:c5:ca:93:3b:f6:3c:ee:
54:a2:3d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:16:56 2026 by rpki-client