Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
File: qGW64ld4vu2IgMCN8tPzf8N6vB4.mft (raw, json)
Hash identifier: 5+VH6DtorgZGHqd6n1ntA9VY+Ntl+m1gMCDjAz4Ynr0=
Subject key identifier: D8:97:78:9B:EC:83:71:43:50:13:F8:16:FD:BB:3F:94:CD:B0:88:45
Authority key identifier: A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
Certificate issuer: /CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Certificate serial: 01A0D1920BFA04C1E776802DCC0FB75FBD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
Manifest number: 0E42
Signing time: Thu 24 Sep 2026 04:00:04 +0000
Manifest this update: Thu 24 Sep 2026 04:00:04 +0000
Manifest next update: Fri 25 Sep 2026 04:00:04 +0000
Files and hashes: 1: F46yJZ1_ZtncXoXA1gqtcgSgxks.roa (hash: 4xB/U3VlaMjmD/USOo57UOd/gQlGLMP8wxFd8TZyukw=)
2: HDDUkhzgUOHlF7zi4DlC9_ywpGI.roa (hash: ob4GjBCgXhSHBsKltA+N4Bhya5B54UhmYsdP2O0rGB0=)
3: MdEs2m-IrHBQCFgn-JlK3Bk7udc.roa (hash: Mo1ibwxe067q8YpdjNU7MlbnD4U4Cl8kB+EULAl5HTk=)
4: RBsCiDLoRPUa1sEuFbaN0WsP-WA.roa (hash: 2UgnVxLlLuAenOg0pXBuNFTqN4KE476l2bQbrokLRSM=)
5: SZxwFn-rv4YHYIn11rPhhdZalEE.roa (hash: qGdnGUtcjilIGvYv6gZqj/DBGuFNWX/5F8NZ1f7ELoQ=)
6: dQp1_bF-2hRgZhoSUp2j8-OiYAI.roa (hash: Ktp1XPuBOcTSPdwju+u+aKIoeTI5yi+j2Ty+pydNaPA=)
7: qGW64ld4vu2IgMCN8tPzf8N6vB4.crl (hash: O6K0UJQN2hNipTqPrqoCQiglt22FKKO5uOJ5+WsuTvg=)
8: vzfccsFprMOY9JYnROqdf595jyk.roa (hash: 9XgNIgYKyBtoz7QowqkqXgsGwcOR4Db53f7gkwA+doE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:0b:fa:04:c1:e7:76:80:2d:cc:0f:b7:5f:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a865bae25778beed8880c08df2d3f37fc37abc1e
Validity
Not Before: Sep 24 04:00:04 2026 GMT
Not After : Sep 25 04:00:04 2026 GMT
Subject: CN=d897789bec8371435013f816fdbb3f94cdb08845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c8:f9:2e:7d:a5:bf:52:60:6d:79:52:0a:c2:
8c:72:42:02:8a:19:e8:0d:52:fa:86:93:c4:2f:88:
6a:1f:7d:0e:dd:ac:e8:84:80:4a:6b:cb:5c:e6:de:
72:cc:20:83:6b:77:59:0c:39:2f:2f:26:27:ce:b0:
a7:88:62:10:ec:5d:0b:6e:cd:99:d9:a2:14:e6:ff:
0e:69:22:2f:de:2f:19:10:46:ad:be:51:d2:d8:4b:
43:33:87:50:05:24:19:c4:21:c4:38:d5:63:27:5c:
5f:8a:a0:76:bc:6a:12:49:bf:94:8b:04:a0:da:3a:
33:62:65:7e:a2:e3:ec:f4:21:c3:9e:f9:23:03:1b:
fb:97:3e:ea:8e:0d:dd:29:72:20:57:25:09:93:6f:
77:69:a6:20:cf:66:4f:d4:5c:85:13:19:9c:3f:87:
b1:a1:9b:83:65:df:b1:90:7d:e8:ec:31:45:7c:8e:
44:1f:b6:30:3b:2b:ef:6c:2c:5c:55:cf:7d:19:dc:
8e:e4:21:23:b6:13:c5:ab:77:63:ef:63:b1:0e:de:
8c:c7:9f:da:6b:b0:77:e1:f7:9a:0a:7b:99:0a:5b:
09:18:b4:d8:0c:6a:cc:e9:1e:80:ad:d8:9b:27:61:
ea:63:9c:6e:8b:23:04:6a:d9:93:8d:ba:bf:df:27:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:97:78:9B:EC:83:71:43:50:13:F8:16:FD:BB:3F:94:CD:B0:88:45
X509v3 Authority Key Identifier:
keyid:A8:65:BA:E2:57:78:BE:ED:88:80:C0:8D:F2:D3:F3:7F:C3:7A:BC:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGW64ld4vu2IgMCN8tPzf8N6vB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6444d1-5f00-4e50-8019-1b6f750cf9a2/1/qGW64ld4vu2IgMCN8tPzf8N6vB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:3a:72:30:fa:56:28:0d:73:e7:c4:e9:42:25:07:5d:20:ce:
7d:69:41:91:03:b1:e3:cf:e2:56:28:50:43:1f:69:fa:94:b9:
75:a3:9f:b8:60:56:45:a0:f2:97:ce:1c:77:f7:16:54:98:44:
bb:68:d3:28:ff:f9:91:71:c3:14:d8:30:ff:71:fe:a1:f1:91:
1b:3e:45:01:c8:dd:62:04:16:5c:ba:3a:8f:b3:af:f9:d3:6c:
b2:67:e5:3d:8b:9c:3d:18:0f:a6:b2:1a:fb:2d:43:04:6f:c8:
4e:b3:dd:6f:06:3b:ba:8b:5e:af:fa:af:fa:19:a0:46:ac:cc:
b8:01:79:78:15:5d:18:98:4d:81:a9:b8:20:32:f7:fd:13:13:
76:2a:61:40:48:87:89:7f:4c:6f:17:f9:52:f4:1f:8f:64:60:
73:06:62:4c:9c:5a:9c:d6:91:15:e3:8c:d5:63:c4:30:03:41:
da:d7:85:7c:43:72:ad:02:c4:60:96:9d:ad:68:79:64:04:4a:
d0:f7:eb:61:76:08:7c:73:1e:66:0c:59:b8:f1:09:25:d4:0d:
82:67:bb:43:95:63:fa:13:e6:42:b4:c0:fa:7f:61:a6:d5:5e:
36:87:62:09:5b:8e:b1:0b:08:56:cf:b9:f0:e5:aa:22:11:29:
a8:0e:69:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:47:57 2026 by rpki-client