Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
File: qGBDVsdQGuIQSyzO087cXb3BFjs.mft (raw, json)
Hash identifier: npMzfwYUukzpaRryI3Cr4u6jOh+fmVFN5mBgBOjPotE=
Subject key identifier: F0:FE:24:2C:7E:6E:B0:F6:A0:7B:3E:77:E3:9D:95:EE:A5:9C:33:70
Authority key identifier: A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
Certificate issuer: /CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Certificate serial: 01A0D3F0127F2449D9C3B89CCD3CC9BFCCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
Manifest number: 0B2F
Signing time: Thu 24 Sep 2026 15:02:00 +0000
Manifest this update: Thu 24 Sep 2026 15:02:00 +0000
Manifest next update: Fri 25 Sep 2026 15:02:00 +0000
Files and hashes: 1: 7bHKsta4Dp1Yop5z_TE4GuyF-pw.roa (hash: D3+G4Ub921rB7gMLWBKfq6fOLKtP+5fJMq67UB4TEGk=)
2: E6joSh_KCsRZIeJuWns6mUSAvaQ.roa (hash: /pkjUktJxl5tikLBDBKNXbabaHGDBXecObDRlAAJ4OY=)
3: qGBDVsdQGuIQSyzO087cXb3BFjs.crl (hash: Vjnc1JgYUorI0cH7fIMwXJksY1+Ojio+k8g1+hy8Xek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:12:7f:24:49:d9:c3:b8:9c:cd:3c:c9:bf:cc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8604356c7501ae2104b2cced3cedc5dbdc1163b
Validity
Not Before: Sep 24 15:02:00 2026 GMT
Not After : Sep 25 15:02:00 2026 GMT
Subject: CN=f0fe242c7e6eb0f6a07b3e77e39d95eea59c3370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:5e:d3:b3:a9:c8:72:90:38:35:47:c7:c9:
54:47:eb:43:f3:7e:4f:95:53:27:05:7c:45:68:f0:
02:4f:5d:75:3d:cd:04:6f:c3:14:82:ff:53:c7:cc:
68:0e:ea:ee:c7:e1:fa:64:0f:02:0d:28:b5:93:65:
c0:02:77:b7:5d:2c:cb:65:a4:02:9d:d9:0a:f0:b4:
ce:08:7c:ef:43:5d:f1:24:fe:93:9b:50:a3:98:33:
bf:4f:a6:63:16:33:3b:a5:04:00:fb:fb:df:73:af:
78:7e:c3:e5:dd:82:eb:71:00:26:e1:58:95:6a:30:
d9:48:c9:12:a7:2f:b2:a2:c8:b0:c8:d3:62:71:1c:
b1:5c:1e:93:26:a0:ea:73:54:70:4f:69:38:ec:f1:
b2:02:9a:59:98:9c:25:3d:01:c0:e8:7c:0d:43:95:
bb:3e:e6:ac:f0:47:92:f6:b6:5b:c8:e6:41:1b:75:
13:42:01:38:af:1f:98:34:c6:aa:fc:a5:cf:b0:44:
84:a0:b1:5e:59:b6:e7:9c:17:b9:f1:e9:70:d0:67:
1f:b7:43:a1:11:25:a7:dc:30:ba:49:13:1c:f1:09:
b4:6a:52:59:dd:e2:37:6f:a4:9e:76:4f:2e:49:cf:
9b:5f:d9:b7:14:57:26:df:a2:c5:c5:e3:18:c2:d6:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:FE:24:2C:7E:6E:B0:F6:A0:7B:3E:77:E3:9D:95:EE:A5:9C:33:70
X509v3 Authority Key Identifier:
keyid:A8:60:43:56:C7:50:1A:E2:10:4B:2C:CE:D3:CE:DC:5D:BD:C1:16:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGBDVsdQGuIQSyzO087cXb3BFjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/458501-acab-42ed-8a6a-7bebbb70c050/1/qGBDVsdQGuIQSyzO087cXb3BFjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:25:9b:04:ed:53:8c:25:d7:4c:b9:87:40:e5:63:f5:b6:1c:
f3:41:50:dc:72:bb:3e:e6:4d:5a:f6:ff:ee:68:63:4b:94:e7:
a7:d4:cb:76:22:ea:a4:d9:6b:db:eb:89:77:9d:3a:ea:41:76:
51:c4:7b:89:d7:67:e0:95:18:b4:91:25:9c:c8:b6:86:0d:8c:
6e:29:38:8f:d1:be:f0:5f:df:57:2a:a3:b5:76:dd:f5:a5:ff:
04:98:73:3c:82:2d:2e:2f:d3:45:52:07:ad:c3:2a:27:5f:b6:
1c:5a:d4:48:29:b0:80:68:2e:88:b3:05:72:da:eb:1c:b3:9b:
e7:27:1a:8e:dd:8e:57:ff:e0:35:ac:95:dc:86:7e:c4:2b:e5:
a3:86:ed:33:ee:09:ac:e9:a8:33:0c:23:76:00:12:79:4a:6c:
44:2c:46:db:4d:ca:41:13:c2:9d:07:67:8d:2a:35:55:00:59:
69:76:32:d6:25:f5:66:4b:04:94:d9:2d:cd:d5:ad:1a:f2:8d:
1b:ae:ed:59:8c:cc:c5:fb:62:cd:20:11:8a:f7:00:32:12:8f:
92:c1:37:e3:8a:94:12:56:82:9f:77:4c:bf:3f:a0:f8:aa:2f:
1d:f9:65:eb:b5:9d:a8:ea:ef:b6:6a:e2:e3:ac:4d:48:a6:43:
73:ac:0e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:31:29 2026 by rpki-client