Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: TDUYCSKCD0enNBJ4X2IU6wCHPT/QC/Te7W/vXedchk8=
Subject key identifier: D6:07:6E:BA:AA:72:68:CD:10:96:03:1F:D3:32:6F:FB:5F:62:4F:36
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 01A0C28D8B14296415FF31FD1540CB8FD090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 0432
Signing time: Mon 21 Sep 2026 06:00:51 +0000
Manifest this update: Mon 21 Sep 2026 06:00:51 +0000
Manifest next update: Tue 22 Sep 2026 06:00:51 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: S5GaGFVQtxm+ONBTVkVtCRL8wlXfvx0ErnxpelsnGcE=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:8b:14:29:64:15:ff:31:fd:15:40:cb:8f:d0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Sep 21 06:00:51 2026 GMT
Not After : Sep 22 06:00:51 2026 GMT
Subject: CN=d6076ebaaa7268cd1096031fd3326ffb5f624f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3c:0e:a2:59:9e:83:ae:38:ca:73:6a:3f:b3:
3a:83:60:c7:94:d5:41:a5:9f:2c:b6:e9:1d:4a:5f:
82:c1:2d:58:d7:0f:e2:61:15:a2:63:65:0e:46:31:
88:cf:47:b8:4e:5f:a5:b1:ee:20:89:7d:49:28:c0:
48:3a:ce:b5:e5:35:99:b2:82:3b:bb:01:f2:c8:c9:
eb:0a:30:45:f0:88:99:d2:42:46:76:ee:1f:97:ae:
e3:91:0a:10:76:ad:46:bb:ea:ec:dc:02:df:4f:52:
35:9d:c9:a9:05:29:54:84:ad:df:9e:b3:ab:b4:0c:
37:4c:1f:fe:84:95:9a:41:d5:c0:c1:c3:ee:b9:57:
d4:e1:af:07:16:1c:a3:8d:4f:9f:48:d6:64:62:2b:
65:fa:58:f0:bb:19:f3:e6:73:be:3a:cd:f6:eb:29:
d1:25:a3:9f:94:33:9c:38:02:07:92:96:9d:c5:db:
cb:80:47:6b:66:2a:8c:45:24:6a:c8:62:f1:2f:c8:
28:45:33:4b:50:d9:f1:b6:93:86:45:29:bf:e2:bb:
59:f9:39:2a:76:db:1e:ff:74:1c:a9:fe:85:77:a1:
a4:e8:6a:77:0d:ee:70:66:87:d3:86:b4:48:f0:69:
eb:0c:c7:7e:14:82:ea:4b:a8:0d:34:4c:2d:7d:c0:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:07:6E:BA:AA:72:68:CD:10:96:03:1F:D3:32:6F:FB:5F:62:4F:36
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5c:49:7c:6b:8f:2b:b4:b6:20:16:43:64:04:7d:50:1d:50:
cc:77:57:2a:f5:fc:5a:df:6a:cb:26:33:79:54:9f:01:06:11:
6f:fd:5c:1f:6f:14:29:64:86:d9:15:b2:4a:c0:84:80:e6:4b:
72:e0:83:5d:0c:1a:c9:ec:85:c3:d8:92:06:da:fe:de:59:82:
e7:95:db:8a:92:6f:22:75:e0:df:63:20:2a:78:98:d1:70:11:
69:21:b4:60:63:da:8a:b0:c1:83:b4:39:ca:5b:b5:95:cc:52:
ce:3c:e5:31:fd:4b:dc:be:f9:1c:32:d8:90:d5:92:17:c8:d0:
96:29:04:99:5a:06:93:b6:9a:91:3e:f0:48:ff:dd:df:1a:7f:
3f:e9:42:c6:0b:60:48:3a:3e:3b:b9:9e:b7:04:1c:60:3a:3f:
77:4a:bb:4c:67:81:c6:a9:7d:38:31:f3:8a:02:48:ec:a4:f1:
9f:07:70:73:38:72:8f:8e:54:c8:20:ed:a8:db:59:8d:62:85:
fe:65:3a:ab:e5:82:28:44:6d:d6:06:12:0c:17:1a:45:d4:24:
ad:c8:59:e1:3b:91:09:cd:e8:cf:cb:09:d7:d5:ab:76:1a:09:
aa:19:af:5b:f1:79:fa:b6:7e:da:32:24:f7:ce:23:9f:ce:ed:
d6:5d:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:16:55 2026 by rpki-client