Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: lYoHXq+tFhsRQe+ZDhGGLY+A4hJh0Y3K0O5cU14BZiE=
Subject key identifier: BC:C2:42:F6:7A:06:58:8C:AD:14:CE:A0:BA:56:C8:E8:90:ED:1F:2A
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 01A0CBC75FC3EA7FAB19A1FAB138FDDEFF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0B02
Signing time: Wed 23 Sep 2026 01:00:36 +0000
Manifest this update: Wed 23 Sep 2026 01:00:36 +0000
Manifest next update: Thu 24 Sep 2026 01:00:36 +0000
Files and hashes: 1: XdHfu4aNbbqY05djIHZSat5N9NA.asa (hash: AUEcvgTMi0kC5OD2yO9q7Au5IXQUp3/LdfUmGStQlvw=)
2: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: BgvMYfsXAhxvGhO0eoxO26NymFpCke4GqFNKctbeOlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:5f:c3:ea:7f:ab:19:a1:fa:b1:38:fd:de:ff:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Sep 23 01:00:36 2026 GMT
Not After : Sep 24 01:00:36 2026 GMT
Subject: CN=bcc242f67a06588cad14cea0ba56c8e890ed1f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2d:3b:34:68:26:f7:05:b7:29:97:11:81:3e:
23:4b:c1:45:46:5f:c8:39:7b:e6:65:7b:47:d5:51:
0d:38:f2:78:11:c7:18:fd:c1:56:6e:03:ce:b6:74:
ac:c9:53:a6:42:f7:fa:1b:b8:dc:6b:14:25:85:78:
77:63:16:b6:fe:7a:65:41:95:2a:f7:c3:76:66:77:
2c:f9:82:44:1a:ef:a4:aa:bf:c8:ad:f0:bb:ee:91:
71:91:72:34:29:cf:a9:d2:0d:f3:9b:34:98:27:87:
e2:68:4b:d3:4f:3b:ac:7c:6c:5f:9d:de:b5:a0:f4:
cc:43:14:03:51:51:a3:12:3d:23:51:59:a6:21:bb:
7c:de:8b:17:21:31:71:a2:4f:d5:a1:5a:4a:46:a5:
11:6c:40:72:59:62:d8:5a:6c:ac:a5:1c:4f:aa:e5:
2a:16:e8:32:3e:89:b9:3f:01:ab:54:89:01:2c:e0:
b9:81:ae:17:43:48:dd:ef:db:69:bb:15:7f:c3:27:
76:8a:56:91:a3:af:68:0b:05:3c:48:5b:b5:45:fa:
c3:c4:d8:fd:85:90:99:cb:e3:82:68:03:7d:45:37:
5d:56:8a:13:f2:b9:0c:7d:83:6b:76:f2:7f:a8:e5:
1a:70:47:04:c6:e8:7e:cb:54:58:59:4c:ae:aa:f3:
d6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C2:42:F6:7A:06:58:8C:AD:14:CE:A0:BA:56:C8:E8:90:ED:1F:2A
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:90:ca:ba:6e:ab:d1:e0:8a:aa:f0:f9:e0:10:bd:e9:6b:9e:
92:a8:b9:c2:d1:7c:5d:64:15:8e:67:db:06:49:f9:cf:9c:ac:
0f:0c:ea:6b:98:6c:d9:7d:cd:cf:7b:68:ef:d2:5d:43:4f:89:
92:ae:ef:d8:21:6e:70:57:d8:d6:62:ef:a6:fd:85:87:20:0c:
65:26:7d:11:6e:7c:e4:62:67:90:51:02:4b:a1:63:50:21:ab:
a5:de:f2:ef:52:35:33:bb:01:d0:94:21:eb:78:76:e5:3e:48:
db:af:fb:c7:d1:d1:46:eb:b4:ca:27:e6:38:14:0c:36:d4:80:
05:39:e7:83:65:18:7e:a9:25:da:21:17:9e:ed:26:4d:db:f2:
c1:7f:1f:74:21:84:b8:53:04:e4:2d:50:9b:81:4e:5b:32:ee:
3a:c7:79:0a:96:fc:1f:0c:d9:40:15:a8:03:e8:ec:ff:6d:62:
c6:6f:24:71:51:f4:af:bd:8d:71:cf:1a:dd:5a:c9:63:02:b3:
57:56:04:94:48:61:2a:01:a6:0d:17:c5:a8:fc:dd:eb:25:4c:
34:49:59:3a:6e:34:31:98:4c:e9:67:94:07:a4:4a:ca:c7:83:
b4:59:3a:e4:96:5e:f6:23:eb:86:55:06:bd:96:f3:fa:0c:df:
65:18:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:19:16 2026 by rpki-client