Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
File: qHvIMvQSt59zAWbsV-s2waNbBok.mft (raw, json)
Hash identifier: iv4qvzDncb0A7vTVEE8hTOkXBKX2ycyURGXepRDX9xw=
Subject key identifier: 3F:1A:3E:B5:CD:5D:DA:F8:65:01:B1:DB:E7:E7:32:72:8D:DE:41:85
Authority key identifier: A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89
Certificate issuer: /CN=a87bc832f412b79f730166ec57eb36c1a35b0689
Certificate serial: 01A0C669C50057BD2BF526FBC976C3741C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
Manifest number: 011B
Signing time: Tue 22 Sep 2026 00:00:15 +0000
Manifest this update: Tue 22 Sep 2026 00:00:15 +0000
Manifest next update: Wed 23 Sep 2026 00:00:15 +0000
Files and hashes: 1: 3TZvjEfkPGnfb-tMF5tui2UzMj0.roa (hash: QOEhgl7wja/sJ10iRCnuW/2g1XbkedQKiYSWjxKqvZE=)
2: qHvIMvQSt59zAWbsV-s2waNbBok.crl (hash: bVO6npT2MQRsBWkAqK8/a+W3J1Z1N8pj5AxaB9RV9D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:69:c5:00:57:bd:2b:f5:26:fb:c9:76:c3:74:1c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87bc832f412b79f730166ec57eb36c1a35b0689
Validity
Not Before: Sep 22 00:00:15 2026 GMT
Not After : Sep 23 00:00:15 2026 GMT
Subject: CN=3f1a3eb5cd5ddaf86501b1dbe7e732728dde4185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:f6:df:56:45:4d:13:db:36:48:88:96:b7:
9c:dc:2b:a0:67:4f:e3:76:59:89:cf:b0:55:9a:fe:
4d:78:c3:15:7a:f8:e9:f1:4d:22:b6:cf:12:5c:ea:
f2:0f:86:8d:65:5c:04:bf:61:dd:df:3d:c6:b3:89:
9b:fc:7d:6b:08:8b:24:c1:94:4f:f3:dc:39:fc:ff:
0c:e3:50:6a:01:24:a5:e6:84:ea:15:cb:8e:ba:ae:
e6:32:64:2e:79:c8:e7:94:7d:a0:48:5e:ee:ae:9f:
ce:1e:a8:40:08:29:ce:5d:bf:57:1a:24:d3:23:75:
ee:54:db:91:0e:6c:e6:6b:89:b3:51:8f:6a:cf:f5:
bf:1d:b8:32:c4:ce:8a:40:56:ce:5c:c5:95:97:a1:
7a:8b:f9:63:2b:28:55:86:0c:17:4d:9e:83:84:75:
da:5d:d0:21:83:64:6a:bf:fa:76:ba:94:de:18:66:
4e:a6:c0:8b:05:49:6d:f1:b7:ee:77:41:d9:dc:79:
37:0f:c2:5d:d1:85:b7:2f:5b:ff:ed:4b:ec:46:dd:
86:aa:6f:e9:24:57:bc:53:bd:43:95:f7:d3:1b:96:
48:61:45:72:a5:09:a6:fe:d2:c0:f3:3e:7e:5e:e0:
13:98:df:f8:91:7c:36:9e:55:44:5c:41:d2:21:89:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1A:3E:B5:CD:5D:DA:F8:65:01:B1:DB:E7:E7:32:72:8D:DE:41:85
X509v3 Authority Key Identifier:
keyid:A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:80:b6:6e:48:a6:1d:fb:54:28:99:38:6a:da:9e:e1:84:51:
3e:c6:90:8b:c2:d0:7e:cd:93:4e:5c:67:2b:43:ca:43:52:8d:
57:82:52:f3:de:0d:20:68:69:bf:8c:05:07:1e:93:b5:5e:73:
4e:ba:6a:42:00:43:92:f4:7e:e2:7d:21:57:a4:a7:47:79:5e:
0b:f3:38:c1:4f:0d:c9:40:e9:82:c1:40:eb:83:7a:17:eb:a1:
c5:4a:93:82:f5:5f:f0:d7:26:6f:b4:63:f0:2c:4d:7e:73:9d:
6b:d3:4b:fd:0a:53:51:f2:fd:fb:dd:21:b3:b1:9a:a6:b9:5d:
d5:05:98:08:fa:c0:e8:20:97:52:e0:bb:dd:92:0e:b4:15:d6:
98:d0:1c:65:ad:24:42:ec:cd:42:20:47:52:7f:1d:b2:9e:55:
b8:b4:00:e8:55:d6:6c:41:b7:5d:25:b5:7c:30:e0:ee:78:3f:
4b:9e:a3:c8:d7:95:05:85:d6:15:bd:dd:a8:76:f6:72:79:f1:
c0:25:23:c0:72:e5:3d:57:f5:2f:5a:46:11:53:4c:f3:83:16:
39:6c:bc:97:e1:46:24:37:82:97:d0:eb:42:1f:d7:11:5e:d9:
7f:5f:38:85:6d:4b:55:b7:6b:35:2a:b7:97:a7:33:d6:d5:5a:
5c:fd:c0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:15:02 2026 by rpki-client