Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
File: qI2nDOKKiJJzJtuLYipmwp-sUjw.mft (raw, json)
Hash identifier: W3PWN6Uf7k+yOF5PjEk/CeQoHpJN+a/Z4ITfuMbyegI=
Subject key identifier: 8F:5C:E5:9C:61:74:5B:D6:32:BB:C4:53:47:DA:C7:EF:B6:08:13:8B
Authority key identifier: A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
Certificate issuer: /CN=a88da70ce28a88927326db8b622a66c29fac523c
Certificate serial: 01A0EAAE6D72B2AED79C1198BE35854F782B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
Manifest number: 0174
Signing time: Tue 29 Sep 2026 01:01:34 +0000
Manifest this update: Tue 29 Sep 2026 01:01:34 +0000
Manifest next update: Wed 30 Sep 2026 01:01:34 +0000
Files and hashes: 1: Agdkr7pow-AzSTl7UhxIjtbuif8.roa (hash: XwEU2q/BPbK/EoWe/rSsRkIbMCNqHp48BI3sTIZFcTs=)
2: qI2nDOKKiJJzJtuLYipmwp-sUjw.crl (hash: OyLH+iKlafYAQ33Esp3KgMLRBUVfcwlDO+tbUJ9bOBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 01:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:6d:72:b2:ae:d7:9c:11:98:be:35:85:4f:78:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88da70ce28a88927326db8b622a66c29fac523c
Validity
Not Before: Sep 29 01:01:34 2026 GMT
Not After : Sep 30 01:01:34 2026 GMT
Subject: CN=8f5ce59c61745bd632bbc45347dac7efb608138b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:8c:44:61:fe:19:47:54:0e:89:72:f0:29:
95:b2:5d:da:9e:2a:cc:60:6d:ad:db:97:84:09:87:
cc:81:55:1b:79:79:42:1c:82:47:0c:8c:19:aa:2d:
69:5a:d9:4c:f6:61:a8:e5:a5:f0:af:59:bf:a9:af:
86:df:84:53:4a:1d:9b:ac:15:4c:b8:9c:f7:ad:ff:
a6:19:04:af:d2:98:7e:ec:e8:ba:00:97:77:62:ea:
45:45:42:02:ad:6f:0b:b9:76:1d:49:c5:26:eb:1d:
14:e5:f2:cc:19:83:d0:c9:aa:13:ea:1d:25:d6:2e:
1d:c3:cf:c5:1c:24:6f:fa:8f:9d:ff:f2:db:30:7f:
48:bb:ca:e1:51:39:0a:29:b1:03:12:ff:0e:5f:06:
82:fc:a1:ed:32:e5:ea:bd:24:58:8d:bd:71:a0:dc:
db:96:11:50:83:aa:cc:11:ad:43:74:a6:e2:4c:e2:
55:76:3e:63:96:29:36:05:c2:be:ec:40:2f:01:ca:
a5:e0:42:9d:ef:8e:ad:e2:2c:20:42:18:1b:2a:c0:
c4:fe:91:22:21:42:74:53:de:46:bc:11:9e:bf:3a:
a4:b2:c7:14:b2:fc:9e:17:0f:49:7f:f4:f5:d8:eb:
69:b3:06:6c:39:67:41:62:bc:f0:e0:0b:7e:1b:a6:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:5C:E5:9C:61:74:5B:D6:32:BB:C4:53:47:DA:C7:EF:B6:08:13:8B
X509v3 Authority Key Identifier:
keyid:A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:83:71:20:2b:69:5a:58:51:dd:0e:db:f7:51:50:96:87:25:
86:20:37:f4:a9:51:78:90:4d:66:3d:5e:17:5b:2d:6c:c1:3d:
2c:fa:68:13:ef:ec:c4:09:1e:77:e2:59:ad:38:37:68:fa:b8:
b0:44:d2:db:0b:2b:b8:8b:ce:52:07:fc:19:ee:69:30:c8:ec:
4c:75:9d:40:a2:12:f3:66:c2:a4:42:17:b5:38:82:4a:50:09:
35:24:c6:1a:34:70:ed:44:1d:ba:b9:8d:25:5d:8d:65:6b:27:
19:1c:40:a6:67:29:e4:f8:87:73:53:eb:68:45:9f:b0:07:ae:
6a:7b:3b:33:c7:a9:fc:57:bc:78:cd:66:01:67:81:d7:56:55:
a9:f8:46:83:db:ba:fc:41:f7:b6:1f:7d:90:66:13:4a:e4:96:
9c:40:c0:3a:75:81:3a:8d:9a:e4:04:ac:cb:2b:ba:36:b6:50:
2f:d3:af:c7:b0:33:e0:c8:3d:05:1a:58:db:b5:df:3d:0e:9b:
66:ea:13:a4:03:d2:51:27:1c:33:6b:9e:a3:a5:ae:0f:00:1b:
24:83:1b:d4:99:8e:ff:79:fb:08:41:d2:14:cf:bd:01:53:30:
ee:3a:58:71:a0:0c:52:a7:5a:5b:55:07:de:61:7e:4f:cb:c8:
9e:26:85:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:23:40 2026 by rpki-client