Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
File: a-qEqFfnGtEjL5o2v0j40kqaA_s.mft (raw, json)
Hash identifier: ZyqPp+HJ4uwR+7HjPl8WNJb0DE3HSy80wg1XFSaLwkQ=
Subject key identifier: A2:4E:FD:A0:84:F7:0B:5B:E4:84:5D:D5:7A:2A:F3:9D:96:0B:A4:71
Authority key identifier: 6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
Certificate issuer: /CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Certificate serial: 01A0DF85B3CECD6F7BB4C21F2605EF219E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:01:16 +0000
Manifest this update: Sat 26 Sep 2026 21:01:16 +0000
Manifest next update: Sun 27 Sep 2026 21:01:16 +0000
Files and hashes: 1: 3VtMLjenBkjVF4KJLk56mIMtUJI.roa (hash: JPKF0zVe4MNxHQFbONgwYXIrgpkaeNZgOLOSWhU/gyE=)
2: a-qEqFfnGtEjL5o2v0j40kqaA_s.crl (hash: 3bTGou6QM0ftqXWwyTvwhVpJwN7WV6uoV/G68nOf0Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:b3:ce:cd:6f:7b:b4:c2:1f:26:05:ef:21:9e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Validity
Not Before: Sep 26 21:01:16 2026 GMT
Not After : Sep 27 21:01:16 2026 GMT
Subject: CN=a24efda084f70b5be4845dd57a2af39d960ba471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:22:6e:8e:11:35:9b:44:11:37:92:67:f7:85:
ab:f5:36:17:cb:79:9b:19:4f:d0:f5:5b:30:44:c1:
0a:3e:ee:6c:e1:c0:c9:4d:fb:d8:ad:04:fb:2d:16:
da:68:d9:03:db:e5:36:a0:f3:d1:49:88:80:16:43:
63:5e:21:5c:e5:79:82:15:4d:d1:bd:00:72:82:41:
21:f3:0e:af:82:a9:be:06:2e:79:b0:49:0c:8f:e3:
d3:16:69:e8:26:66:ac:0a:7f:6c:12:13:c9:ad:c4:
6e:4d:e5:dc:fc:42:00:42:a1:08:da:2f:8e:89:cc:
67:82:0d:c1:d0:e3:d3:a8:e0:0f:dc:b9:8f:8b:54:
06:d6:33:9a:88:b6:70:e0:4f:83:69:1d:a1:84:a1:
dc:c3:84:29:6a:2c:3e:fe:44:ed:00:9a:4c:e4:7c:
88:d0:44:d0:11:91:e9:63:d1:e0:c4:61:1d:81:f8:
2d:01:62:36:61:c2:1a:72:a7:56:3d:c4:6a:ba:8a:
dd:71:36:3b:3b:9c:5d:75:39:e3:0e:8e:90:a4:5c:
c6:8c:55:a8:26:03:51:1f:df:60:cb:62:e9:49:c3:
68:36:97:e2:d3:8d:a7:41:a8:8f:17:08:3c:6b:4e:
4c:24:e3:b9:bb:7a:2e:0f:bf:07:dc:cf:9b:3d:82:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4E:FD:A0:84:F7:0B:5B:E4:84:5D:D5:7A:2A:F3:9D:96:0B:A4:71
X509v3 Authority Key Identifier:
keyid:6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:98:e0:78:ca:86:f1:96:4e:9b:f1:c0:1b:c3:8e:8b:14:10:
31:ab:4a:78:a6:d7:6f:a1:36:4d:3c:f5:f2:c8:58:ff:c5:35:
51:36:95:b8:e1:29:65:7b:31:f6:fc:81:3e:1f:d9:c2:ca:3b:
ed:6b:93:6a:9d:cb:d3:65:a2:4c:cc:ca:88:0f:ce:f7:06:34:
64:d4:d2:28:cb:5a:20:78:c4:01:2a:4f:eb:91:f2:25:17:92:
24:67:98:a4:42:84:f3:76:5e:6a:53:e4:2e:b6:da:96:54:2d:
f0:05:8f:0e:35:e4:56:39:99:11:af:25:be:62:8b:23:a9:f7:
e9:3f:ea:d3:ac:c5:d2:f3:00:78:10:90:39:b4:a5:99:14:27:
e2:40:3d:e1:6b:99:86:56:8b:ad:6b:01:c3:9d:90:ad:66:77:
bc:1d:34:94:a1:3a:d9:38:1c:4f:35:e8:6d:81:92:21:2e:67:
65:49:c6:8e:16:cd:ec:c8:e1:eb:8d:36:f0:2b:6d:ce:fb:67:
7a:cf:5e:a9:73:ac:14:b6:40:a8:b4:fa:3b:83:5d:98:95:d8:
f4:9c:cd:f4:f6:70:ca:84:3b:d6:3a:a2:bb:3c:4a:43:b2:9b:
92:a8:2c:c4:17:5e:7e:70:b7:43:10:ca:58:72:17:02:04:37:
df:dc:60:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:43:51 2026 by rpki-client