Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
File: qryfZKSO6lUh4en6qBB5jwiVRrY.mft (raw, json)
Hash identifier: k4Vi1dnbGN80PLl2hrKU/KAj9o5jCcNR9dgF9DDazAY=
Subject key identifier: 52:27:FC:C3:53:6F:14:A4:BC:43:59:43:AA:D7:EE:3F:20:C2:B9:19
Authority key identifier: AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
Certificate issuer: /CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Certificate serial: 01A0C7B3D8B50E1659EEE6E0A054595F391A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
Manifest number: 01C2
Signing time: Tue 22 Sep 2026 06:00:47 +0000
Manifest this update: Tue 22 Sep 2026 06:00:47 +0000
Manifest next update: Wed 23 Sep 2026 06:00:47 +0000
Files and hashes: 1: k4UjBMhNQbPGGmHnVoiBgJBmSf0.roa (hash: VIQo5uhjjTbtUBi5ti8/TlUnmadL+OWUvZa3u0tyfm0=)
2: qryfZKSO6lUh4en6qBB5jwiVRrY.crl (hash: bO5VYQdO6zAsB+Lg7MmW5KpUcIFE8T+p8fUXQ4axidw=)
3: zVSrTTqebRmSnsneDFxGS3_YpGc.asa (hash: fmf7CqwekntqfwrIibO6rpKxFjgw/RTj5EEUnDmjI/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:d8:b5:0e:16:59:ee:e6:e0:a0:54:59:5f:39:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Validity
Not Before: Sep 22 06:00:47 2026 GMT
Not After : Sep 23 06:00:47 2026 GMT
Subject: CN=5227fcc3536f14a4bc435943aad7ee3f20c2b919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:dd:b9:57:05:39:da:fe:76:37:9c:81:9e:
42:3f:cf:8b:57:22:a5:61:2f:f0:62:e4:d1:b6:90:
37:d3:11:e0:1a:cc:5c:20:11:54:5d:d4:4b:1a:7b:
d6:9d:5b:c2:0a:cd:98:32:a6:71:5e:c6:25:fd:ff:
14:b3:ef:2e:38:f8:72:7d:2c:66:05:a5:ad:cd:ab:
c6:ad:21:8e:4b:e1:ac:4f:79:67:7b:12:01:3e:63:
7d:3f:37:c9:34:0c:2b:65:5b:2b:2a:7f:e3:37:6e:
41:5c:4b:21:00:48:21:a8:32:a6:65:40:d0:4f:44:
7a:de:39:17:0a:57:31:ac:e1:32:4f:3e:f7:a2:99:
a6:58:60:c2:43:c2:b6:c4:0d:81:00:aa:fe:66:5f:
84:7b:99:02:c3:40:d4:b3:ae:77:8e:16:60:76:54:
3c:a5:69:cf:ae:6b:2a:4d:ac:d3:8d:5e:ad:09:12:
b3:f7:f1:c3:39:40:52:6b:d7:0d:7e:79:94:5b:f1:
2a:d0:ba:d7:49:41:f6:71:fe:32:01:46:d7:21:53:
d9:e8:cc:94:f7:3c:80:31:f1:46:0a:62:5d:ea:f8:
d4:73:d7:3f:20:dc:f5:66:56:db:9b:46:a9:90:05:
1c:aa:a7:cd:42:86:ca:7b:47:5f:5c:07:b8:cb:34:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:27:FC:C3:53:6F:14:A4:BC:43:59:43:AA:D7:EE:3F:20:C2:B9:19
X509v3 Authority Key Identifier:
keyid:AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:47:da:6d:fb:0e:f3:f6:82:44:51:62:b3:cb:92:1e:03:c6:
5a:a9:da:d8:05:4c:08:f9:99:25:8f:33:7b:a9:d2:cd:f0:b4:
e5:43:78:a2:2e:30:cc:35:f6:81:34:1a:d8:5b:8e:92:7c:49:
16:06:2d:64:76:09:0e:4e:29:2a:cc:7c:ad:57:84:d6:30:60:
a4:7b:45:40:72:9c:fd:e4:b6:ce:fd:c6:50:06:16:8e:0c:d4:
fd:4d:fa:ec:20:77:2f:87:67:5d:6d:57:dd:81:2c:e3:19:06:
a4:82:6a:36:e0:48:73:5b:13:d2:3a:31:98:fe:98:5c:83:a3:
0a:6c:c8:aa:3b:0c:84:12:71:e2:67:36:6e:74:dd:95:ca:75:
72:2a:85:c9:36:55:8f:43:90:47:2d:64:a0:79:3a:b0:fd:26:
e9:30:af:1b:12:90:c9:7f:ec:7f:98:23:9c:fc:f2:40:87:af:
bc:8c:c2:aa:3e:67:db:42:c0:48:e9:f0:05:34:a2:af:0e:0c:
a4:64:9b:80:e5:f5:1b:45:f6:23:b5:ff:ec:94:31:16:cb:6c:
e0:e9:c1:83:41:53:cf:b0:72:67:ef:9a:10:0d:ad:11:b0:39:
d6:dc:86:8a:0e:16:4c:df:2e:01:06:fe:67:6a:cb:a3:bf:be:
42:33:f0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:26:09 2026 by rpki-client