Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
File: qwGK2gxETq14L6SLw3_Q-I__pXY.mft (raw, json)
Hash identifier: H3cTtpbrdkEkUq5lRKfq7mXACNgeowdb9s5Tpq3CePY=
Subject key identifier: 86:81:71:78:72:60:1D:D6:67:90:8C:2E:96:81:E2:DB:7A:C5:67:7C
Authority key identifier: AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
Certificate issuer: /CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Certificate serial: 01A0BEB0C2D1C0748F8703301E73C6F0BC1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
Manifest number: CC
Signing time: Sun 20 Sep 2026 12:00:50 +0000
Manifest this update: Sun 20 Sep 2026 12:00:50 +0000
Manifest next update: Mon 21 Sep 2026 12:00:50 +0000
Files and hashes: 1: HbP-7QLw7QBmNNFKl1-VjRoKQYQ.roa (hash: HNxpWcVsRSYnzq6dU7camseM1P/zhpgAzT0swheRdUc=)
2: jfC085keId6PPgSN100bJz3yx4g.asa (hash: D12cwI3Gjb7k60jjJhIM7YbS9niQbydMpfO41Z+Y6mg=)
3: qwGK2gxETq14L6SLw3_Q-I__pXY.crl (hash: H02ZBZiIg8RQ4l7RfJWeQkAUjMxfj0ggCbg4t7sQ2sI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:c2:d1:c0:74:8f:87:03:30:1e:73:c6:f0:bc:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab018ada0c444ead782fa48bc37fd0f88fffa576
Validity
Not Before: Sep 20 12:00:50 2026 GMT
Not After : Sep 21 12:00:50 2026 GMT
Subject: CN=8681717872601dd667908c2e9681e2db7ac5677c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4f:26:4b:ee:7f:af:ab:21:fb:17:a1:a5:a0:
4f:96:06:87:a5:0c:b1:80:f4:c4:34:17:c3:87:b6:
a7:ad:88:5f:eb:dc:6c:69:8b:d1:b9:3a:67:16:9a:
96:c1:bd:a1:b5:7e:2b:fd:48:cc:63:7a:96:33:f9:
e4:d1:35:42:89:3c:e1:3d:a3:aa:61:95:95:c9:bd:
73:1a:6c:02:42:75:1d:d9:32:2d:24:ef:21:41:d4:
49:45:7b:d6:68:21:25:34:ca:18:ce:b5:59:8b:ae:
85:ec:67:7c:4c:2e:50:a1:9b:ec:dc:c2:25:a3:5f:
a4:73:0a:23:0a:cf:6e:e1:69:87:fa:a9:71:3f:9a:
b2:9b:ae:df:28:21:af:09:b8:61:fe:f4:a6:0d:1c:
26:d1:48:19:ab:e1:1b:a5:9d:8b:b7:10:1f:59:d5:
23:24:69:e7:19:17:dc:03:cb:85:df:41:b3:71:c4:
1d:34:c0:94:43:a6:d7:3b:52:5f:7e:6b:51:28:ed:
d6:b4:26:b8:01:3b:bc:1d:5c:e2:19:59:6f:fb:79:
ec:46:8c:79:54:52:46:02:1b:3f:e1:9d:dc:17:4f:
cc:fe:ed:10:3d:70:01:37:5e:af:80:a4:d2:e5:7c:
d6:57:a3:9e:8c:04:a3:3e:ed:5f:3a:5d:bf:8e:d4:
e8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:81:71:78:72:60:1D:D6:67:90:8C:2E:96:81:E2:DB:7A:C5:67:7C
X509v3 Authority Key Identifier:
keyid:AB:01:8A:DA:0C:44:4E:AD:78:2F:A4:8B:C3:7F:D0:F8:8F:FF:A5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwGK2gxETq14L6SLw3_Q-I__pXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/679033-5b74-48b1-8d7f-cc153468e198/1/qwGK2gxETq14L6SLw3_Q-I__pXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f5:69:d2:a9:fc:e0:2c:30:5e:22:a2:1e:d9:6b:6d:7c:ce:
18:93:fe:66:36:aa:d5:69:49:79:c5:b5:3d:10:09:c4:31:af:
5e:98:25:e2:6c:11:d7:bb:9a:a4:a4:3b:3f:ec:8f:bd:95:55:
9f:91:d4:a2:2e:da:d9:62:56:f3:0f:3e:95:0f:0b:53:52:2a:
63:15:53:00:6c:65:4d:d5:b1:dc:f2:b2:00:ff:2c:2b:71:22:
38:42:9c:f3:2f:2a:76:85:e3:45:af:bf:cd:23:c3:25:95:ea:
28:36:5a:ee:92:f2:97:f9:b5:e6:69:19:98:b8:7b:5b:1d:02:
e7:cf:87:fc:93:01:14:ce:c6:0c:de:80:1d:50:84:f9:b9:47:
67:1e:d0:41:22:78:cb:f1:e4:c0:84:1d:de:82:c3:d1:83:97:
fe:17:07:3e:e0:fc:13:e9:bc:0e:4c:27:fb:5f:5d:53:47:d4:
39:89:6d:8b:bf:b8:c4:51:90:1a:54:b7:a3:5b:92:fb:9e:40:
fd:28:dc:64:87:4c:4c:e7:b0:06:4c:aa:8c:42:db:51:71:1d:
cc:b1:b9:19:55:c7:44:d8:9d:41:51:25:b2:3a:dd:09:dd:b2:
19:dc:c3:1c:23:7e:35:7c:09:15:ed:2d:8f:d3:bd:dd:14:ad:
25:68:56:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:33:56 2026 by rpki-client