Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: /F7W1UFomolVisvqIkIPdryhULRK2rT8Zt3RUJ5d8ko=
Subject key identifier: A0:F0:6D:3A:E3:DC:CE:8B:CE:33:60:82:83:E4:0E:7E:0E:57:BC:50
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 01A0EBC0C7749AED8601A65B8C7DE4E76A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 1A81
Signing time: Tue 29 Sep 2026 06:01:14 +0000
Manifest this update: Tue 29 Sep 2026 06:01:14 +0000
Manifest next update: Wed 30 Sep 2026 06:01:14 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: rvpLWbsw8Idct0Uwp//7akl2PUQJb44IHfV/bnaRokc=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:c0:c7:74:9a:ed:86:01:a6:5b:8c:7d:e4:e7:6a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Sep 29 06:01:14 2026 GMT
Not After : Sep 30 06:01:14 2026 GMT
Subject: CN=a0f06d3ae3dcce8bce33608283e40e7e0e57bc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6d:0b:05:7b:d6:cf:ba:d8:d9:8c:bf:50:0c:
08:e5:6d:97:d9:3a:ae:fa:a2:e5:f8:d0:a2:52:96:
51:a9:c0:2a:57:93:8d:20:f7:9c:6e:ac:cb:ad:4b:
d9:69:af:e7:4b:9e:b3:43:c6:8b:3c:6f:b3:c9:db:
3b:02:e9:94:a4:40:d0:43:a5:85:a5:51:ce:20:04:
ac:22:b8:43:ba:45:cd:9b:ae:d7:df:3b:cf:90:31:
53:09:a2:ed:b5:a1:83:3f:c0:40:d8:28:64:aa:e9:
d3:35:03:b0:5b:77:ae:77:9d:b2:4a:85:52:7a:4d:
7a:24:43:69:f6:4d:cb:04:e2:91:ad:d3:17:fe:dc:
9c:00:cf:ac:10:a3:22:7c:79:44:7b:21:21:d4:3d:
60:11:79:ed:a6:3a:74:06:b7:17:a7:c0:35:13:f3:
12:41:ee:be:34:25:e9:ce:fe:dd:98:ac:50:36:59:
25:71:67:e2:ca:4c:b1:95:91:c8:b4:6a:e4:1c:9f:
e7:57:86:30:b7:2b:a4:55:ea:bf:71:a9:54:15:df:
71:61:90:df:7c:95:24:1e:3e:b7:35:f5:b5:1b:36:
e2:09:18:6e:07:9c:17:2c:8a:46:d8:44:a6:4e:a3:
d5:da:8c:16:56:60:9e:48:ed:11:2f:e4:d2:83:aa:
be:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F0:6D:3A:E3:DC:CE:8B:CE:33:60:82:83:E4:0E:7E:0E:57:BC:50
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:64:df:0a:14:fb:c1:c3:d7:e2:1c:8a:2e:2d:4a:06:37:59:
cc:03:11:6b:8f:a9:c7:17:7f:f5:65:75:03:32:b1:b7:e2:cc:
87:2d:03:01:45:cc:28:49:ec:c1:0f:1c:82:b3:ff:89:ca:2d:
6e:77:d7:4b:d8:f8:83:7a:bd:4a:2e:fa:64:75:e3:e0:38:37:
5d:ed:a1:54:1a:c1:c2:17:49:42:86:a9:34:8c:01:e0:1e:07:
b0:02:16:73:3b:31:bd:81:9e:a2:4e:26:65:5f:05:e3:4e:28:
c8:a8:a4:c4:17:96:56:71:c1:9b:c6:90:ab:c4:9e:ab:be:a6:
3e:ab:24:25:85:7a:9e:37:12:2b:a1:a9:09:9f:54:25:8f:b6:
5d:34:c9:98:73:04:8f:2d:5c:78:18:f7:d4:0b:17:3d:a0:2d:
de:90:48:f5:f9:a4:5e:94:15:92:b0:68:68:7c:63:26:fd:0a:
14:f9:fe:95:2d:e3:5c:ee:03:69:ee:14:53:7d:24:dc:c8:72:
39:76:f7:cb:73:23:95:ec:bc:fa:ea:e9:54:46:83:8a:cb:a8:
2b:3c:4e:08:7f:ab:7d:38:7a:a5:37:06:aa:8a:33:50:56:2e:
c4:70:5f:1e:af:95:16:88:e7:7b:3b:4f:d8:f9:43:e4:71:0f:
41:43:0a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:34:31 2026 by rpki-client