Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
File: qaHWsnXkY50IGRt8RqsjlCgod0Y.mft (raw, json)
Hash identifier: pad5u/XZf1hYgCAcNOmDH7XEfF/x/JBAAWPklZDD3kU=
Subject key identifier: 4E:2B:18:DA:A8:C4:C4:A9:20:BC:70:CB:B2:60:E7:AB:E7:0F:C5:0F
Authority key identifier: A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
Certificate issuer: /CN=a9a1d6b275e4639d08191b7c46ab239428287746
Certificate serial: 01A0DBA97F18A40F33BAF56B91AF1AB9A8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:01:53 +0000
Manifest this update: Sat 26 Sep 2026 03:01:53 +0000
Manifest next update: Sun 27 Sep 2026 03:01:53 +0000
Files and hashes: 1: ab6rMUVn3A5Dtq5dYI7GOWhDpls.roa (hash: hYA//IrWljegAbclM/Dg53bUXQQ8j8qJOOVapxZlnWw=)
2: e95uvzijUfA8PskqB29MCQITY0c.roa (hash: 5t2e4qTsbvRPuZzQuH0LgBYqoRjK8h1rvy0dZQHvLOQ=)
3: h4HTnmNQ40S0AlgZb0tILyqRtAs.roa (hash: x8PyCmmrpbL3asDF+bPUyXhIWSTsgb0lr6OUsDywpqw=)
4: qaHWsnXkY50IGRt8RqsjlCgod0Y.crl (hash: ksGZFBKW0yqrM7MK/s5xbPan3yRtsc3DYI2GuTxDjuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:7f:18:a4:0f:33:ba:f5:6b:91:af:1a:b9:a8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a1d6b275e4639d08191b7c46ab239428287746
Validity
Not Before: Sep 26 03:01:53 2026 GMT
Not After : Sep 27 03:01:53 2026 GMT
Subject: CN=4e2b18daa8c4c4a920bc70cbb260e7abe70fc50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:6e:bb:0a:93:10:85:5e:0d:c2:75:6c:72:
cc:fb:ae:89:a3:ff:fc:60:38:7b:72:02:a0:7d:60:
97:5f:09:8a:52:b8:41:a9:d8:83:30:cd:78:70:2a:
07:4a:17:4a:74:18:95:3f:c9:0d:37:7e:00:25:db:
82:3c:e2:d7:cf:9a:97:b6:d3:62:bf:03:0f:ad:c8:
d2:17:f4:c1:cc:e7:4e:38:4b:0a:dc:8e:a8:c7:8b:
22:7d:4b:7a:b3:09:a4:95:49:14:e9:0e:dc:54:a9:
a6:a9:7e:f6:3c:a8:44:d7:bc:ed:95:80:53:93:53:
5e:9b:60:31:0b:e6:87:92:3d:d9:4f:15:07:a5:d4:
20:87:91:77:3a:84:bb:68:ae:53:0c:d9:3a:09:84:
11:15:bd:50:7c:23:45:d3:99:f4:5b:d8:48:4e:30:
2c:97:b5:fa:cd:40:66:fb:18:a4:b3:d4:54:c6:29:
b0:62:8f:63:92:ab:da:4e:b9:1a:27:bb:e1:ff:46:
00:af:31:1c:81:b8:b1:03:b8:6b:5b:2d:94:c3:a1:
95:de:9b:fe:56:fc:b6:b8:9b:90:c6:76:d1:7a:b4:
0d:5a:4b:b0:94:5b:76:25:75:a0:08:cb:90:93:d1:
79:5c:ca:a2:2a:d1:c5:3b:71:71:a7:3f:55:b2:fe:
10:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2B:18:DA:A8:C4:C4:A9:20:BC:70:CB:B2:60:E7:AB:E7:0F:C5:0F
X509v3 Authority Key Identifier:
keyid:A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:14:39:a1:e4:c9:a7:e7:08:d1:d8:1b:96:74:8d:53:bf:fc:
e4:0d:07:87:4e:af:e2:3c:42:60:a1:4a:42:12:45:a8:ce:63:
7d:92:cf:44:d7:7e:62:1c:13:27:a7:2c:4e:5a:1d:d2:b6:d9:
22:62:cb:cc:a1:3d:79:42:82:74:ff:ef:44:fb:40:15:23:43:
41:b0:b9:b3:7b:a1:31:e3:ce:86:8f:60:2c:5b:fd:81:54:53:
84:ac:f6:80:1e:55:c4:41:b8:a2:a1:09:b9:b5:9e:14:b5:ff:
1a:14:b9:f1:a0:f6:ac:82:5c:ce:6f:a4:cc:03:0e:59:56:7d:
6a:7a:05:7c:94:8e:0c:bc:e3:75:1e:c2:b3:98:1c:c0:38:df:
3d:1d:06:8c:3c:69:75:f2:0a:34:08:a7:4e:ca:ea:f2:47:b9:
2a:6a:72:b6:2a:12:ee:fa:25:a7:09:56:19:11:68:52:19:ae:
34:0f:ab:7f:7c:77:9c:5a:4f:42:10:13:8b:98:c5:b6:9b:a8:
5a:08:ec:ac:a3:82:5d:b0:80:6c:cd:61:4f:0a:e9:2d:c4:dc:
84:4d:93:c3:0c:49:64:06:5b:93:73:a8:18:b1:2d:1d:51:a4:
88:f2:d3:16:65:b6:fb:8b:00:ed:a8:0a:b4:e4:cd:4b:8d:ce:
4b:fc:23:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:21:52 2026 by rpki-client