Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: 0J2t9OGrvxcGTGGrel9diZJEa5iQNWTFoa2UK4sY7Lw=
Subject key identifier: AA:E7:42:CF:07:4D:C4:66:F0:37:A0:11:C7:3B:14:43:E5:0C:F6:11
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 01A0D3835436A0D6DC0A52E94A802638006A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 1A84
Signing time: Thu 24 Sep 2026 13:03:14 +0000
Manifest this update: Thu 24 Sep 2026 13:03:14 +0000
Manifest next update: Fri 25 Sep 2026 13:03:14 +0000
Files and hashes: 1: 9jc69vVsdWk6bDgFshwFaPkQiW4.roa (hash: vJY4PURpp9zlGE8vkcu9TTy5SV3ZXYUmKNEh03HjHbE=)
2: McRpwaQnqqZOGTag3hww5pMg2ZA.roa (hash: S2MuhIxLoEt0UYzfR1rcMJ/qgJF6eA4a0C2qNQuo9nk=)
3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: Hwgq9KbTZu2ZXTMmirpEoCumWuU8zHUwnNF5KtuWoQ4=)
4: tDspM2jjSgEGhc8BloKM8cbAdEU.roa (hash: yKxOJy53jyvQOqMbQzES6V6OdCvwq23pAU2NRVmp2OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:83:54:36:a0:d6:dc:0a:52:e9:4a:80:26:38:00:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Sep 24 13:03:14 2026 GMT
Not After : Sep 25 13:03:14 2026 GMT
Subject: CN=aae742cf074dc466f037a011c73b1443e50cf611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cb:0f:5d:c9:a3:0f:08:94:57:8d:d4:5d:a5:
95:25:d0:a9:71:2a:64:db:41:a5:12:e8:92:b9:b8:
3a:4a:08:8f:91:2f:30:e0:a9:be:c3:87:40:84:6c:
54:89:f1:80:49:23:f1:1b:65:54:3a:98:df:9a:16:
ba:51:72:2d:d3:75:19:8f:70:d4:5d:9a:3b:11:48:
80:83:c1:54:c1:2d:9d:f0:3b:34:63:70:ae:24:66:
e0:07:f1:8e:24:f2:0a:37:cd:12:f2:3c:ce:40:63:
a1:79:ce:57:43:db:b2:d0:39:5d:27:6e:37:b8:6a:
6e:2d:b8:1f:b6:c9:df:b6:e9:ba:d1:d7:7c:e8:4e:
63:c6:d6:10:bd:df:27:9b:9c:4d:31:29:66:d6:f2:
e2:f1:09:ed:b4:a3:d9:73:99:73:5c:8a:54:40:af:
2a:8b:73:48:23:a2:97:bf:b7:a6:24:ae:e2:e1:50:
38:8a:c7:6b:68:5a:f8:ee:e8:8b:ac:b1:7b:49:7d:
81:34:73:fd:fa:58:42:62:74:8b:23:eb:f4:6d:8f:
45:41:23:d0:c4:df:17:40:13:38:d2:c2:66:1a:de:
15:96:b2:6a:f3:0e:01:ed:cf:63:42:7c:e3:2d:f6:
96:25:62:77:d1:59:a8:41:c0:5e:e3:36:a8:1b:fa:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:42:CF:07:4D:C4:66:F0:37:A0:11:C7:3B:14:43:E5:0C:F6:11
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:27:00:cb:0b:c2:00:56:86:d2:25:2a:43:9b:2c:2d:c4:28:
06:82:4d:c9:7e:21:92:27:14:fe:7e:6c:c1:c3:fa:89:63:16:
e6:1f:5e:a6:e8:00:a8:7d:8d:b4:eb:c0:6d:d1:28:1e:d5:bf:
30:5a:be:7b:df:50:72:65:92:e3:87:85:90:5a:96:33:7c:76:
78:6b:88:74:6e:9e:6d:f8:32:96:7f:f0:0f:3d:42:9d:6e:41:
49:64:7d:d4:f3:ac:ec:57:ec:61:80:b3:06:34:ab:f0:46:f3:
dd:d7:23:8a:ed:a8:a2:a7:c7:6b:59:a9:89:10:aa:02:00:a2:
af:14:d9:a7:cc:ae:14:4f:c9:ed:e4:fa:56:5f:28:86:58:fb:
21:3a:42:be:7a:03:31:71:d8:db:b3:c6:0f:36:a1:6d:ba:71:
d0:fd:5f:e9:2d:75:a5:41:65:87:d7:6d:f7:57:2c:20:b6:e1:
e6:db:74:20:66:b3:06:52:91:bd:fa:fe:69:67:3e:07:ff:b9:
6a:3b:1d:58:e0:44:a0:ef:5a:b5:dc:9b:96:78:e8:4e:e9:c2:
2a:01:3c:fd:65:dd:d2:cb:05:f2:71:fa:45:67:66:97:e8:70:
a1:cd:6e:64:38:14:cf:fa:51:e2:5d:83:af:a5:7b:b6:f0:63:
1b:09:27:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:50:49 2026 by rpki-client