Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
File: q4gs1tGWrh-WhyrK54MhvnqSuOs.mft (raw, json)
Hash identifier: P4VOuxkan8KyTjEPjlPFKX4wH+NYa+bNUq+yABUaJfc=
Subject key identifier: 02:05:00:57:59:18:41:EB:AE:97:EA:B8:8D:E0:70:53:1A:B7:C9:55
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 01A13146B89E61202AA80B2CF75B2AA9D3CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
Manifest number: 1AA0
Signing time: Mon 12 Oct 2026 18:01:20 +0000
Manifest this update: Mon 12 Oct 2026 18:01:20 +0000
Manifest next update: Tue 13 Oct 2026 18:01:20 +0000
Files and hashes: 1: Nx1ZmF0LLUBVNb7pg5SUQFqkEEo.roa (hash: 7h8Dusgv5GisCOAGKVB6gWNCmRgBLzLbZbpY03tENm0=)
2: jU5U7jqkvSOJDTtaSPEMPVmYD9A.roa (hash: nFOTFG+7OrEIpqu+RBWcBN5R7HeTDegtuQdJz0N3Rss=)
3: q-cmnczAq_R4WQig-JxyBCeiu3E.roa (hash: QW62YPpx0nobzbNY1r86LME0OVZNaU0nQ5C4usrbmMM=)
4: q4gs1tGWrh-WhyrK54MhvnqSuOs.crl (hash: sS0Pugus4wBX5jgX9gNCKYEcJcy2njzo0q4diaVfFVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 18:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:46:b8:9e:61:20:2a:a8:0b:2c:f7:5b:2a:a9:d3:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Oct 12 18:01:20 2026 GMT
Not After : Oct 13 18:01:20 2026 GMT
Subject: CN=02050057591841ebae97eab88de070531ab7c955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:aa:8d:fd:a2:b1:ac:6e:59:9b:59:4e:e3:a1:
47:70:dc:cd:57:27:4a:4e:78:b9:61:3f:79:b8:b5:
a6:a6:6f:1e:d7:a1:0a:93:e8:5c:f6:8c:e4:1f:87:
ac:21:a2:74:40:c9:ea:ab:53:34:a5:d6:ef:23:93:
76:9a:27:85:94:15:98:53:bb:ee:87:dc:1e:96:ee:
58:04:78:18:0d:48:0b:4b:8e:4b:5a:09:a2:7c:01:
db:f0:9a:e1:23:0d:65:88:a6:1f:4e:0a:82:f2:fb:
8b:14:33:d6:24:4d:12:e9:00:26:9f:e0:9a:6d:70:
8a:af:4a:12:5d:c9:03:83:fa:1a:99:b2:da:5d:db:
a6:ca:46:f5:0a:5d:94:3a:ce:0b:c8:f2:3e:f8:ee:
ee:19:39:e3:a3:d2:8d:67:3d:00:a8:c9:f4:12:f7:
c8:cc:63:9d:66:37:6a:16:33:27:b3:b6:4b:a1:5e:
30:d0:a2:6c:4f:00:ef:fa:72:ce:9b:a2:1a:e2:f7:
99:3a:eb:b7:6d:b4:40:82:19:4d:d4:a7:6f:22:10:
1f:ea:cc:5f:73:52:b0:71:36:33:46:d6:da:cf:71:
83:b9:1c:1c:5f:45:22:63:3f:de:37:8b:f6:33:f2:
ca:c2:a0:b4:4e:00:54:a8:d2:7e:f5:54:d2:2d:f4:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:05:00:57:59:18:41:EB:AE:97:EA:B8:8D:E0:70:53:1A:B7:C9:55
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:8a:ad:16:30:aa:8a:25:85:3f:37:cf:be:c1:2c:18:9d:94:
4a:0d:ec:71:70:ba:2b:50:dd:c3:28:b4:ce:9c:83:42:60:43:
cb:9c:fa:b1:f4:d9:9b:f1:be:e9:de:37:b9:5e:cf:e2:b9:54:
4f:40:93:cc:46:6b:02:fb:d3:b6:59:0f:cd:85:e5:1e:9c:8d:
a4:ea:ea:dc:19:74:d4:9f:60:9e:a8:59:df:3f:49:25:ef:6b:
15:e2:42:d8:d6:24:91:21:5c:ea:30:fc:8d:6f:c2:45:ce:b0:
d1:64:eb:e0:78:47:2f:27:cb:d3:ec:61:67:2e:fb:6e:2c:84:
f4:c6:1f:2f:de:3b:0d:1d:5c:23:18:02:8a:4e:49:a2:94:0a:
ed:4b:df:6b:38:d3:58:46:c9:00:11:1b:55:16:2d:66:27:5f:
80:76:70:e0:c1:a8:a5:3f:af:a9:a9:9d:0f:56:13:58:58:54:
13:97:ce:e5:68:0a:bb:65:8e:b8:5c:87:91:33:9a:08:45:9b:
30:ea:99:0d:8c:8b:60:3f:a1:d5:ae:e6:52:73:da:4e:b2:27:
66:19:19:36:aa:1f:83:83:af:60:f0:7c:36:e0:1a:08:2c:66:
d2:7d:3a:dc:83:35:f3:6e:c0:5b:0b:60:42:d9:bd:88:ce:68:
79:7b:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:49:15 2026 by rpki-client