Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
File: q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft (raw, json)
Hash identifier: Wrn120Ae+svUXJWpquvfjafhsUpwtc3zISLxIaCtCd4=
Subject key identifier: 62:02:FA:97:3D:18:20:48:E8:86:39:BB:78:78:93:FD:72:30:4E:B1
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 01A12AD66D4F782493E6D11B6C3B13A4AEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
Manifest number: 1AFE
Signing time: Sun 11 Oct 2026 12:00:58 +0000
Manifest this update: Sun 11 Oct 2026 12:00:58 +0000
Manifest next update: Mon 12 Oct 2026 12:00:58 +0000
Files and hashes: 1: q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl (hash: WYOw4XPH7DejlIEUYj5hr8eGE65eP+tFGa5YN6TjgVs=)
2: seBFYYQv0cvrV-jBttwLxGx-GgQ.roa (hash: ckniHG5YK95jMkTsaGk+p/q7us5X85VQ/bIV+gQNUtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:6d:4f:78:24:93:e6:d1:1b:6c:3b:13:a4:ae:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Oct 11 12:00:58 2026 GMT
Not After : Oct 12 12:00:58 2026 GMT
Subject: CN=6202fa973d182048e88639bb787893fd72304eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:73:08:46:d6:c5:f4:94:9b:1c:cc:23:d4:
12:a9:be:54:36:cd:8d:b9:52:8b:f3:af:7a:8c:27:
01:00:36:47:3a:ee:a7:02:de:74:13:e2:c4:f5:5b:
cf:49:54:e3:fa:23:03:0e:1d:91:7e:c0:51:2c:6e:
8d:db:44:01:10:8c:a3:4f:2a:60:d7:b9:1b:ba:3b:
5b:bd:ed:70:68:0d:fa:ce:73:54:b2:d7:94:a5:da:
3d:c6:3e:7b:c4:ef:5d:e1:e1:57:28:1b:20:7a:f4:
6c:d3:a0:13:a6:04:04:30:1e:f8:2a:0a:21:e9:34:
80:43:64:01:53:3a:fa:d8:1c:3e:6c:67:e0:ca:67:
93:35:24:94:28:78:64:96:91:97:a1:03:c1:b9:2f:
72:00:f8:33:9d:7c:81:fa:b4:01:c3:d7:2f:0f:96:
1d:8f:3b:b6:0d:ab:64:00:ef:44:be:9d:c3:23:40:
c4:14:77:66:53:43:68:f2:6f:aa:c3:e9:6f:28:3f:
47:22:5b:e7:8b:82:4b:1c:b5:ff:23:72:4d:a4:e5:
45:52:7d:58:01:62:dd:62:c1:91:3a:5f:d8:e0:62:
66:74:11:22:1d:14:3c:3a:50:2f:e8:da:c4:5f:e2:
f3:c0:1d:b4:92:bb:80:45:cf:fc:f9:9a:a4:e7:40:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:02:FA:97:3D:18:20:48:E8:86:39:BB:78:78:93:FD:72:30:4E:B1
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e8:6e:2c:f3:e5:97:12:5a:c5:7a:24:2f:85:6c:84:2b:a2:
84:2d:6d:cb:bf:6b:9a:7b:46:1f:03:48:16:ff:43:37:ac:e1:
31:97:f4:9a:00:f8:9e:18:b3:6a:63:fe:76:4f:3f:21:00:83:
1d:d7:18:53:3b:0f:e8:ae:ba:fa:36:bf:93:18:d0:66:3e:9d:
6c:f6:20:4b:a6:ce:c1:b8:7f:4c:da:1d:8d:6a:c0:b0:0b:93:
6d:5d:fd:6a:7e:fc:15:48:bf:77:f1:f2:72:1e:db:84:ae:f3:
f6:c8:d1:9c:68:a8:66:a1:36:11:c6:03:17:6d:4b:d5:80:c2:
57:dc:ba:2a:94:1b:bc:d7:15:5a:6e:08:d5:85:4e:8f:0b:c5:
e5:66:d8:4e:0e:2a:7b:54:f6:cb:63:67:1b:da:b9:dd:27:11:
00:cc:98:78:5e:9f:76:e0:b0:30:da:2e:3c:4b:5b:c2:ee:87:
e4:ef:6d:08:cc:cd:65:a0:b7:e1:b5:50:ea:94:35:52:b9:e3:
46:e1:12:0f:3f:8a:a6:bf:04:7e:42:b7:30:a4:b4:7f:cd:f2:
e7:af:c2:d8:3c:84:a8:bf:77:1b:f0:60:27:05:c9:14:b0:c8:
3f:19:08:a8:3e:d2:56:2d:fb:5a:3a:0b:f1:83:b5:98:af:7e:
56:1f:a1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:40:42 2026 by rpki-client