Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: ju3KzGSRAF8I9Wg5cI9K7SpmkPa1m30GdSdTJ2Pqn5s=
Subject key identifier: A3:2C:9F:35:30:2E:76:36:CB:33:4C:7D:BA:7B:DA:6F:FB:B3:D7:FB
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 01A0C9D97C56A96BF3ECEB52AF367142649C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 16:01:08 +0000
Manifest this update: Tue 22 Sep 2026 16:01:08 +0000
Manifest next update: Wed 23 Sep 2026 16:01:08 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: vp7t1E9weRMCaF8i+PNRqoH5nQljd+FT1Ti+VW9mHBI=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:7c:56:a9:6b:f3:ec:eb:52:af:36:71:42:64:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Sep 22 16:01:08 2026 GMT
Not After : Sep 23 16:01:08 2026 GMT
Subject: CN=a32c9f35302e7636cb334c7dba7bda6ffbb3d7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:6a:7a:56:34:6e:19:0c:92:91:24:ae:94:
ca:df:b3:4a:9e:84:f2:a2:da:37:9e:f3:8d:f1:73:
0b:3a:3d:bd:31:34:d2:8f:b9:95:6e:d2:64:41:a7:
4b:5f:7e:84:fe:13:e1:eb:a1:2a:f6:c3:c4:9d:9d:
5e:e2:ef:f7:58:25:0a:f9:be:ef:be:c5:83:69:1a:
fe:97:87:65:2f:2f:08:d7:75:e3:3d:de:8c:08:30:
c4:7d:90:9f:91:15:ce:a9:a7:51:d1:b4:e2:42:8b:
1d:54:a0:7d:3d:f7:95:30:8e:99:c0:50:4e:48:56:
2a:b6:7c:7a:45:62:f8:52:75:8f:3a:6d:be:cd:34:
c9:97:13:4e:f3:a6:70:56:5f:2d:df:7f:39:9d:13:
b6:56:2a:d7:d9:e3:4c:0b:68:93:1f:07:b3:45:b1:
d0:41:ff:b1:3b:ae:fd:79:d6:ea:f5:3e:18:5f:2d:
02:0d:cc:29:70:83:28:99:20:96:ff:d1:ec:cd:c5:
46:01:56:ed:72:88:83:92:11:08:13:11:63:71:57:
d8:f7:41:b0:f4:14:19:36:a8:d8:79:1f:f1:44:d1:
93:d1:5b:d7:bf:94:f7:11:fb:89:e5:6a:e1:92:85:
3f:de:d9:fe:ca:cf:08:f3:c1:67:8c:e0:5b:02:ab:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2C:9F:35:30:2E:76:36:CB:33:4C:7D:BA:7B:DA:6F:FB:B3:D7:FB
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:18:a3:c6:64:ed:de:45:6d:b1:38:27:11:22:2c:37:9f:db:
bb:0b:30:68:9a:15:51:e1:96:9c:a2:bc:03:7f:bd:42:68:a1:
f9:bd:b9:7c:3d:2a:d1:9f:8d:1c:cb:ce:20:b4:59:4f:79:2b:
42:5c:64:3a:a6:d0:57:e2:8e:d7:0a:18:9a:46:dc:ed:7c:97:
74:47:38:7b:8e:80:cb:ce:07:29:12:bd:fd:40:64:19:f1:82:
10:e5:f7:88:54:0b:ec:c0:60:ad:f5:b3:bb:e3:27:d4:f0:9c:
ac:42:b4:80:0f:5b:3c:d8:b0:f4:bd:58:96:16:d9:0d:13:ae:
72:df:2e:36:62:31:1b:13:14:12:fc:a1:dc:0a:e1:ce:fa:30:
7f:95:6b:67:cd:a1:51:dd:77:a4:79:b9:7a:c2:1b:5f:1f:db:
32:b8:fd:45:26:75:0c:2f:4f:76:81:80:1e:62:f3:d7:b5:e9:
33:37:88:e9:01:49:eb:a3:37:fa:cf:6c:37:e2:55:79:31:fc:
f8:6d:47:41:dd:89:3b:d6:f9:4f:e3:dd:15:5a:05:72:17:32:
a6:91:2b:43:ec:28:1b:93:c9:af:50:e6:d8:8b:c9:ba:39:57:
9e:96:e2:58:50:d1:27:d3:e7:6a:a0:6f:fe:9e:df:f2:81:01:
68:a8:50:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:26:53 2026 by rpki-client