Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
File: a-qEqFfnGtEjL5o2v0j40kqaA_s.mft (raw, json)
Hash identifier: VjYomrU2mPnLAeKEyHWNM9cYZ8mrf34OT7D+a74bYHY=
Subject key identifier: 7C:0B:78:BE:F9:AE:19:14:46:DF:3B:3F:FC:54:A3:D8:C9:60:58:00
Authority key identifier: 6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
Certificate issuer: /CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Certificate serial: 01A0D9BAFE443BD6FC5C88B65ECEE3334219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:45 +0000
Manifest this update: Fri 25 Sep 2026 18:01:45 +0000
Manifest next update: Sat 26 Sep 2026 18:01:45 +0000
Files and hashes: 1: 3VtMLjenBkjVF4KJLk56mIMtUJI.roa (hash: JPKF0zVe4MNxHQFbONgwYXIrgpkaeNZgOLOSWhU/gyE=)
2: a-qEqFfnGtEjL5o2v0j40kqaA_s.crl (hash: 3t/az11x4DWznV3YOk7uZxQfgd8JftRdE2UFJS/2tEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:fe:44:3b:d6:fc:5c:88:b6:5e:ce:e3:33:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Validity
Not Before: Sep 25 18:01:45 2026 GMT
Not After : Sep 26 18:01:45 2026 GMT
Subject: CN=7c0b78bef9ae191446df3b3ffc54a3d8c9605800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:92:cc:6c:4b:11:29:3c:51:7c:86:6d:7a:3c:
6d:5e:39:7a:d3:d5:6c:1f:db:91:93:53:7e:f9:7f:
71:d0:66:41:87:6f:ea:0b:af:39:cc:cf:6d:46:8a:
24:76:fe:74:22:71:a3:6f:1c:20:51:dc:3d:50:64:
86:7a:58:61:a2:a5:bb:a8:fd:60:17:9d:2b:09:3b:
29:11:c6:9f:e5:fb:30:1e:bd:6b:bc:7d:c8:99:3f:
74:62:f4:4b:c3:23:c9:2b:d6:b9:8c:f4:e2:84:6b:
89:99:70:4f:fe:68:d5:1d:85:ca:55:7a:3c:bf:5d:
02:68:96:6e:63:06:6b:6a:7e:b3:2e:7e:4b:03:55:
f5:e2:e4:69:b0:4e:ce:8a:0f:85:ec:78:91:f3:21:
9f:0f:26:61:a9:1c:3c:4a:59:71:7d:ee:26:51:08:
78:85:a8:f8:fe:e0:71:d6:50:b1:59:fa:d5:88:3f:
06:68:75:5e:33:58:4b:df:ff:2d:cb:ed:fd:b8:32:
bf:1a:08:2f:00:e5:84:e1:a1:26:f9:b2:88:fb:6a:
93:65:d0:a4:38:f8:b8:f3:c0:8c:eb:5d:dc:b3:d7:
07:00:53:5d:eb:d2:b2:7e:8e:c3:c8:37:bb:d4:ba:
e9:18:93:2b:f3:5a:18:66:e3:20:18:7b:59:9b:c0:
2c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:0B:78:BE:F9:AE:19:14:46:DF:3B:3F:FC:54:A3:D8:C9:60:58:00
X509v3 Authority Key Identifier:
keyid:6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2b:f5:f3:1f:e4:ef:c2:b0:62:b5:81:10:5b:ca:4d:c6:54:
e4:3c:cc:27:39:41:d8:d4:f6:a5:4d:ee:c7:f4:4a:b3:9c:dc:
ac:72:94:53:2d:09:b6:fc:cb:c9:3d:23:25:15:38:a2:e7:5d:
c5:12:a6:25:ed:c7:eb:59:6b:5b:df:ed:b9:0d:08:a9:c6:e3:
87:8f:a5:78:93:0b:4a:6d:d4:d9:a6:73:63:cb:e5:d4:db:2b:
92:87:24:67:8e:90:0d:d0:6c:83:62:0b:00:9c:54:54:a1:e8:
24:51:f7:e2:bd:3b:53:15:0a:45:2e:89:c7:b8:b1:1e:99:5a:
c0:44:92:7c:0c:80:51:2b:a8:b9:c4:c4:d4:78:b7:4a:fa:57:
48:f9:23:d4:eb:29:50:3a:6d:82:6e:85:53:36:14:d9:b2:bd:
42:7c:4f:d6:39:7f:c2:cb:6b:4f:9d:0d:cc:9f:9d:32:c1:cc:
b4:db:c8:29:a8:5f:f8:0e:78:e2:e4:04:0a:5d:72:a2:9d:05:
1b:63:c5:78:6c:91:14:e6:de:fb:81:d1:25:59:be:1c:8f:44:
dc:00:a6:b2:fe:c3:e3:5d:33:06:d9:8e:4a:85:fd:1e:ab:e1:
69:ce:3c:35:62:dd:3b:dd:7c:2f:b7:d1:66:95:78:f4:1f:63:
a6:93:14:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:24:06 2026 by rpki-client