Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: pWzj4GCrtfIsKoOZwyOhZWnz8Gcjg2/M4mXe7/nDiKg=
Subject key identifier: 15:F5:18:B1:19:2A:2C:E6:4F:2D:80:07:90:8A:DF:0A:08:EF:08:FA
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 01A0C58EB3E0F5D98BDFEC90363ED1960F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 1A70
Signing time: Mon 21 Sep 2026 20:00:58 +0000
Manifest this update: Mon 21 Sep 2026 20:00:58 +0000
Manifest next update: Tue 22 Sep 2026 20:00:58 +0000
Files and hashes: 1: 6h1PvR00lCR4R_OK63mWuUNm8Ow.roa (hash: nK88CLEdk1ROq2MFGTRKCThSy5zWr4KCZ19shw/qtOU=)
2: LkGDyqDRG7mHRocUIkDmSuw1vWQ.roa (hash: J9hPT1FhbaaEOwCdYHU6hR/yFBmZm/8O5bYD8Dyfv0Y=)
3: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: 46nLvKaNGHmNs5g9sbqEROmwIVqW/7vTFCQbBp57dgQ=)
4: qLlkVW88V5PBegH_90cR2KF7_xI.roa (hash: FkgU7aRp19Haw31aWCRlRZvTAOJ47Up6IijdLGyXvAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:b3:e0:f5:d9:8b:df:ec:90:36:3e:d1:96:0f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Sep 21 20:00:58 2026 GMT
Not After : Sep 22 20:00:58 2026 GMT
Subject: CN=15f518b1192a2ce64f2d8007908adf0a08ef08fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:52:14:51:27:ad:3d:f0:e0:6c:0c:0a:a0:32:
32:20:1f:fa:57:a0:70:69:19:68:be:b4:96:86:fa:
c7:be:ad:d7:e1:f4:e2:4f:6d:27:54:b2:7a:59:cb:
c5:83:d8:4e:41:eb:74:c5:3d:d0:a7:72:09:9a:12:
ad:71:9a:d7:fc:8c:bf:72:c4:74:e3:3e:ef:6c:f3:
73:1a:c5:9d:a1:69:de:4a:c0:b1:b8:02:9d:93:10:
3b:db:f2:b6:53:be:d6:14:11:93:fb:44:66:aa:c5:
d4:e3:b2:99:83:98:18:af:e8:14:9b:f9:ba:be:a9:
53:aa:5a:c3:f8:2c:65:c4:07:37:eb:6d:d1:01:e8:
ae:14:f4:2a:bb:a3:a2:00:6d:92:fc:60:13:dc:25:
46:37:1f:1b:f0:fd:19:db:c3:39:63:27:f9:7f:c4:
c2:7c:13:66:d9:3a:eb:18:40:96:d6:15:97:ba:c1:
5f:a0:b9:90:d3:1f:0b:ae:5e:2b:25:c1:43:47:0c:
2e:ed:9f:b6:ee:97:37:f6:48:2f:57:37:13:43:37:
be:c2:0a:25:11:29:fc:be:ed:16:eb:75:9c:a2:08:
0e:b0:b6:6b:92:08:9a:75:a9:13:b2:13:08:ad:dd:
bb:c9:28:cd:40:9c:25:c6:04:bb:18:ca:4d:38:25:
ab:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F5:18:B1:19:2A:2C:E6:4F:2D:80:07:90:8A:DF:0A:08:EF:08:FA
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d8:f5:83:13:ce:22:e1:bb:19:33:81:fe:6f:6c:da:9c:9a:
6a:82:76:94:88:8c:00:b8:2b:d2:2d:1c:42:d9:23:6b:90:cd:
4e:8e:ac:6e:31:94:aa:a3:64:7c:56:71:3f:9b:73:a7:3b:ce:
bc:f1:d5:56:89:1f:d9:c9:e1:29:ed:45:57:f8:0a:12:5b:8b:
4c:ba:4b:fb:e0:43:28:bc:be:89:c7:02:67:a5:e1:69:61:84:
18:28:91:7a:87:05:d3:de:41:5b:ee:8e:7b:56:f8:b1:1e:de:
e3:53:0d:67:1b:02:0c:ec:ee:7e:84:d7:64:92:56:3f:a1:18:
8b:41:d0:c5:09:03:ac:5b:c8:f7:27:d6:41:44:97:ea:00:d1:
0e:67:0f:59:8f:33:df:74:3a:c3:e5:e1:25:84:46:1b:96:9e:
69:d5:15:66:c5:60:60:b9:43:b2:a5:af:64:91:df:e5:a8:7d:
d8:4c:5d:5a:45:30:84:f0:23:14:52:3c:dc:c0:20:fa:8b:99:
c6:5a:e4:47:15:05:87:93:85:6f:64:5a:02:30:d2:75:98:3f:
79:b5:b1:00:06:30:02:27:c3:1b:84:33:4d:ca:93:84:d0:65:
3f:cd:22:a4:25:37:3a:35:53:75:be:92:6d:2d:82:d7:4b:b4:
9e:bd:4b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:54:13 2026 by rpki-client