Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: WpWZGO5jwC1uplehq+8bw4Lb93fUVfY9fGwmj3HKsJM=
Subject key identifier: 36:EC:D1:E3:69:14:A4:AF:DE:EA:0F:0A:E9:EE:74:C7:35:24:7B:83
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 01A0C09EDCE1D4AB300320865D8CAE68BE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 1A68
Signing time: Sun 20 Sep 2026 21:00:31 +0000
Manifest this update: Sun 20 Sep 2026 21:00:31 +0000
Manifest next update: Mon 21 Sep 2026 21:00:31 +0000
Files and hashes: 1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: hwb0wKG52Mf7ZyYIDQSTZYnYUwazVB6kZOerdIt5p18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9e:dc:e1:d4:ab:30:03:20:86:5d:8c:ae:68:be:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Sep 20 21:00:31 2026 GMT
Not After : Sep 21 21:00:31 2026 GMT
Subject: CN=36ecd1e36914a4afdeea0f0ae9ee74c735247b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:ae:af:3f:7b:6a:95:d6:8d:3b:5a:ba:e7:
4f:75:f3:66:ad:68:93:27:31:e0:81:71:a0:2e:cb:
54:44:d5:a6:66:c4:e2:f1:c2:c1:5c:af:b3:dd:23:
be:56:1d:ad:0d:03:76:cc:a3:73:b0:71:73:e8:f1:
b6:82:7a:7a:fa:33:80:38:d6:ae:7a:0b:4a:6b:e4:
17:f0:ef:16:43:2f:6a:d8:5e:59:a8:80:24:e7:b3:
38:08:ee:74:2c:8a:d5:e3:a2:54:4e:21:70:51:45:
c9:d1:41:89:63:09:bb:74:9c:73:30:82:f1:d9:40:
c6:16:38:b8:4e:cb:b8:ad:60:cf:79:8d:a9:bf:19:
a1:5e:e3:71:9d:1b:83:96:2d:97:7b:e3:ce:fc:b2:
2f:55:40:3b:11:76:5f:f1:90:82:83:3a:13:a3:15:
23:f5:28:bd:10:c1:00:be:31:09:e3:88:bd:60:07:
9e:d8:c4:c2:34:7e:f8:b3:ad:b5:7d:b1:f7:94:5b:
07:ee:f0:c9:bf:0a:c1:35:87:ce:88:df:61:6e:f9:
de:0b:a6:98:17:72:ea:0f:10:90:b6:29:62:2f:4e:
49:5a:52:ec:07:ed:e1:1b:cd:0e:bd:d8:55:8e:a6:
ff:62:33:66:5b:fa:b3:42:3c:46:f8:75:5c:e2:9e:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:EC:D1:E3:69:14:A4:AF:DE:EA:0F:0A:E9:EE:74:C7:35:24:7B:83
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6d:a3:72:39:ac:19:5c:27:a3:19:a1:b4:69:37:54:5a:fd:
c6:2f:f5:d5:d9:43:5f:89:df:b8:b3:19:74:a4:0e:e9:49:a8:
1c:2a:dd:49:59:a1:00:cd:7d:e7:cc:2c:d1:0a:ba:20:c5:03:
4b:46:1c:ff:a5:e5:8f:b6:7a:1e:24:05:77:2b:d7:f6:0c:6e:
7e:ab:88:d5:80:bb:62:ab:d9:48:26:a1:d6:2b:69:63:da:58:
68:4d:9d:28:07:54:cb:5f:cf:22:d9:60:30:c7:ba:21:15:84:
29:b2:39:92:37:ec:b2:4a:55:46:22:43:b2:d6:28:b6:8f:01:
40:35:0c:4a:38:46:c1:80:3b:b9:3d:f7:3c:94:56:58:c9:40:
bb:eb:a5:96:f8:97:94:08:31:35:03:4a:af:a6:d6:fe:f7:5d:
33:d0:ee:6a:31:91:10:38:6e:a2:d0:5f:09:bc:33:01:5d:ce:
73:4e:1a:22:40:26:15:b1:5f:b3:ee:0f:31:ee:d3:a5:7f:9c:
c2:c0:38:5c:d8:45:ac:9e:c0:05:46:d6:c7:29:42:f2:21:bf:
42:bc:de:3b:b7:a0:71:dc:c6:28:44:23:ff:2b:8f:70:55:49:
4c:52:88:c0:9f:f4:2a:d0:0b:58:1f:28:b2:bb:f7:67:7e:d7:
22:91:aa:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:18:13 2026 by rpki-client