Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: PPSrk+XbHvfO2gekWL0hSsoU1NJLW7faLxNYQ/rNFrQ=
Subject key identifier: BA:2F:BE:62:76:8D:B4:78:C9:55:65:59:A0:AD:9C:A6:CB:ED:20:95
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 01A0C9D8F7D9B12B40DA445CED61A6A28752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0B01
Signing time: Tue 22 Sep 2026 16:00:34 +0000
Manifest this update: Tue 22 Sep 2026 16:00:34 +0000
Manifest next update: Wed 23 Sep 2026 16:00:34 +0000
Files and hashes: 1: XdHfu4aNbbqY05djIHZSat5N9NA.asa (hash: AUEcvgTMi0kC5OD2yO9q7Au5IXQUp3/LdfUmGStQlvw=)
2: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: 8p2rrgVxo3rrmIuk/AXfmD6M0X14nFJlkZbO1O/DK24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d8:f7:d9:b1:2b:40:da:44:5c:ed:61:a6:a2:87:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Sep 22 16:00:34 2026 GMT
Not After : Sep 23 16:00:34 2026 GMT
Subject: CN=ba2fbe62768db478c9556559a0ad9ca6cbed2095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:0e:02:12:0e:23:95:cd:ef:bf:f4:58:f2:
c0:fd:a9:ff:0d:0a:51:bb:61:4b:57:08:d0:90:ec:
11:5d:c9:23:02:3b:e6:34:75:35:3e:27:66:f1:e0:
1a:3d:7c:21:12:46:3d:b1:13:a4:e4:f8:b8:e7:67:
f9:83:7c:c7:e0:20:ee:86:50:7f:4d:8e:98:0b:55:
25:d0:0b:60:a5:05:94:15:41:5a:a6:73:18:38:bb:
00:e4:18:0b:5f:82:40:1b:99:c8:63:ac:09:88:73:
2a:0e:43:1e:1e:dc:f0:67:61:8b:d5:64:66:ab:9b:
95:c9:33:12:0e:cb:f1:c1:97:d4:63:1e:96:9b:bf:
96:11:ac:0a:2c:5c:b7:7b:97:19:fa:45:24:41:03:
75:7b:1f:32:af:78:d9:1d:bc:2d:a0:7c:9a:9d:1a:
0c:06:6a:91:fe:e8:16:15:06:c8:e5:c7:96:f8:2b:
bc:47:1f:e3:39:2c:58:ef:cc:4c:10:63:e0:9d:ad:
42:a5:fa:90:6b:e7:ad:45:6e:5d:27:52:2b:de:ea:
64:24:08:e4:a2:fa:dd:73:39:bb:6d:7c:52:4d:a1:
2a:3f:1e:10:3c:4d:03:a3:26:42:32:26:b9:ed:33:
c3:1c:25:59:fb:7e:ce:eb:0b:43:c5:33:ed:2b:97:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2F:BE:62:76:8D:B4:78:C9:55:65:59:A0:AD:9C:A6:CB:ED:20:95
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:dd:84:67:5c:72:88:df:6a:81:b4:5e:4c:7d:c2:50:99:72:
c8:cf:02:06:c8:9a:38:9c:21:04:61:ed:7f:a5:55:ee:f2:17:
86:b8:85:ff:4f:8c:12:ef:57:bd:7d:ce:f7:bf:13:ce:48:19:
8e:f3:37:26:32:b2:b0:af:80:06:de:13:40:5b:42:aa:ef:94:
96:0e:6f:84:b0:a7:5b:67:51:14:1b:b1:8c:0e:06:db:9a:91:
db:8b:57:93:f3:a8:59:af:cf:29:5d:91:a6:2c:b3:9d:a4:bd:
41:48:98:0c:d2:0a:bf:c1:fe:d7:72:d7:92:98:f0:c8:13:77:
5a:5e:0a:e2:4f:f1:a2:34:25:b4:60:fb:99:65:b3:9f:00:e2:
90:e9:ef:3a:23:af:3b:a5:6e:2b:19:f1:5d:8c:6a:fb:dc:5d:
df:4a:5a:14:5e:3c:5f:e1:35:21:27:ab:a9:07:04:c1:69:02:
ef:53:70:1b:ed:16:41:0d:c0:e7:70:b6:aa:45:64:2c:d7:d9:
12:41:7a:2c:ab:77:db:b5:a9:61:ba:1e:fb:81:11:95:0c:9a:
11:91:84:e5:40:04:c5:fc:7a:b4:d6:4c:65:0c:a9:4f:49:34:
74:d8:37:0c:07:31:93:4b:1c:04:0c:5d:39:e0:17:9d:af:bd:
a8:d8:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:19:59 2026 by rpki-client