Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: MSPRUfalxxaivsLwyawN5qzywEDBeCeSDtwSRBZAVbY=
Subject key identifier: D2:3C:B5:0D:FA:40:30:F3:F8:7C:4D:EA:45:87:A0:86:8C:23:DF:E7
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 01A0CA7DEC8A435B2452754C1885C43DA4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 075F
Signing time: Tue 22 Sep 2026 19:00:45 +0000
Manifest this update: Tue 22 Sep 2026 19:00:45 +0000
Manifest next update: Wed 23 Sep 2026 19:00:45 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: sfKemiRwTt3/QSCkTVdq6QK4vwG62HFJzrknwr7aakw=)
3: kniFntdxPbS1jBvN0hKNK7QT914.roa (hash: Hc1QVDwdt4HeTUIYJSo4nwn3K1JUnhk+8tjIWHMrCAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:7d:ec:8a:43:5b:24:52:75:4c:18:85:c4:3d:a4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Sep 22 19:00:45 2026 GMT
Not After : Sep 23 19:00:45 2026 GMT
Subject: CN=d23cb50dfa4030f3f87c4dea4587a0868c23dfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:fa:b4:9a:bd:13:5b:cb:c8:5b:a5:a9:ff:48:
ec:f5:5d:68:17:bd:02:1f:35:3b:a8:1f:f4:9c:00:
83:c8:9a:1b:dd:4c:46:d0:8b:ae:f4:30:22:e5:71:
f8:da:f8:7a:a1:27:c3:67:b4:84:ae:95:ee:63:ac:
f3:85:0a:4b:f2:e1:7b:49:7b:0b:06:4e:be:c6:23:
f7:c0:f2:46:56:7c:78:22:9b:e0:35:1f:2c:cf:fd:
4c:74:79:09:c6:8e:09:75:d2:20:df:97:a6:c2:f5:
d9:8b:0c:80:6a:53:e0:74:fc:c1:50:76:e9:13:b0:
0e:67:ca:50:35:90:6e:b4:56:11:5d:96:a8:9b:f3:
18:db:61:2c:84:ea:89:8d:d5:c8:ef:13:92:1b:f4:
66:51:0d:6d:c6:f6:28:51:46:44:e4:53:e0:b6:e6:
d5:23:c2:86:40:7c:b0:f9:c7:2e:f0:ed:d3:fa:7f:
31:45:f1:b7:da:1f:86:24:86:41:d5:13:be:7c:14:
08:c5:e8:3d:f8:06:b2:b8:ab:31:22:87:7f:bc:13:
82:89:98:5c:e3:22:c4:25:25:09:18:b9:d8:10:c3:
1d:aa:5b:7c:23:5d:2b:8f:ca:7e:38:dc:70:3a:ef:
93:9b:13:ac:4b:8d:7f:b9:a3:f3:b0:8e:82:82:26:
e2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:3C:B5:0D:FA:40:30:F3:F8:7C:4D:EA:45:87:A0:86:8C:23:DF:E7
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:83:e5:e1:6d:ee:26:0b:d4:27:1f:27:61:05:33:60:38:3a:
da:8b:f3:cb:46:89:d3:50:2e:79:0d:68:aa:e8:9c:36:49:99:
9b:59:32:b2:32:47:84:a3:09:8b:f7:c5:f9:d4:5c:8a:44:82:
60:1b:65:32:38:91:5a:2b:5b:85:67:2e:cc:32:3d:4e:bd:63:
6d:02:4d:fb:1b:90:d5:15:9a:63:db:ec:75:91:a3:e3:b9:45:
d5:a1:67:a1:00:7d:2e:13:95:f9:ae:88:08:d5:76:ff:ca:0d:
92:18:a6:a5:d2:63:b5:dd:e6:52:9d:fc:1f:34:ba:02:0f:cd:
51:ee:89:fd:c4:79:7e:e2:bf:64:ed:53:b1:5b:67:5a:45:08:
db:a0:65:ef:c2:72:51:05:31:01:b3:9e:61:0e:df:16:9e:92:
fb:9d:36:ac:d1:18:77:fd:56:e7:98:96:fc:a7:fc:9a:13:e7:
cc:23:32:60:c1:f6:6f:f6:1c:83:31:cc:20:18:36:23:11:16:
f0:f8:8b:65:0a:2f:f5:d7:f1:a1:fe:98:27:bb:63:e7:e9:78:
f4:42:7d:33:ed:55:df:b2:1d:cd:43:c2:e6:24:5f:4e:86:4d:
b0:3b:82:64:9c:b8:ef:5a:28:e8:4f:96:86:63:de:2b:6b:18:
67:c5:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:23:18 2026 by rpki-client