Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
File: qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft (raw, json)
Hash identifier: u9IO9qPPdXXvboTqXtxTtpd7sBRLczakF5mVDk6c0VI=
Subject key identifier: 4E:C7:92:05:88:5E:7A:D6:B6:A1:F2:A9:3A:56:1A:82:70:36:AE:E8
Authority key identifier: A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
Certificate issuer: /CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Certificate serial: 01A0D94D7B8BA8B47F0B5C5F30D063EC30AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
Manifest number: 09AC
Signing time: Fri 25 Sep 2026 16:02:08 +0000
Manifest this update: Fri 25 Sep 2026 16:02:08 +0000
Manifest next update: Sat 26 Sep 2026 16:02:08 +0000
Files and hashes: 1: 1-8RpzQOO8MH_8tY_8CiuesNU5kw.roa (hash: NwZ58UxGQif1qZHSYOqbsi4+8X/Tbr0yxp1KYuyKjAA=)
2: qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl (hash: koibrWYxAUx7ZREul+qOPKoPREF/7ppDZp1tKnxPm+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:7b:8b:a8:b4:7f:0b:5c:5f:30:d0:63:ec:30:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82207fd50c45e96f2825ec772cf6b8dea3dfcb0
Validity
Not Before: Sep 25 16:02:08 2026 GMT
Not After : Sep 26 16:02:08 2026 GMT
Subject: CN=4ec79205885e7ad6b6a1f2a93a561a827036aee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:fb:a3:34:54:e2:c2:b2:0f:24:5a:1e:57:
ec:c0:50:43:b4:ec:76:61:d9:98:8f:07:2b:ac:97:
09:60:05:36:58:16:55:74:85:2e:c2:69:c8:33:ed:
66:72:e2:d0:c2:17:34:af:51:e7:3d:d7:64:c2:cc:
ba:d9:ac:00:55:3f:ef:6b:a1:7e:3f:54:d3:68:19:
60:54:a8:6e:c0:aa:e8:75:bc:2d:53:f8:02:b2:90:
f4:c8:e1:a0:a0:29:33:7c:35:62:84:9a:86:06:4c:
f5:ec:a8:45:fd:29:06:88:04:54:49:cf:82:98:7a:
70:23:6d:5a:5d:ba:6c:e7:86:4c:17:17:3b:7d:92:
9e:a7:dc:62:80:80:cd:27:13:70:ff:d7:94:a6:93:
30:3d:ba:42:67:9a:97:dc:6c:21:a4:00:cf:1e:93:
44:4d:62:db:ff:2b:ca:6a:75:dd:a9:48:8a:44:be:
74:1c:c3:51:d1:26:92:eb:6b:84:22:67:d6:92:5d:
f2:58:8e:c9:59:85:e3:cf:14:5a:0c:6e:69:62:46:
3f:ae:f5:f5:2f:dd:22:d9:ed:89:12:65:0e:a3:02:
31:dc:d3:22:c0:cf:cb:4c:69:25:6a:0e:8e:19:00:
3c:ea:c4:78:99:ca:08:40:48:c0:46:ec:d4:c5:5a:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:92:05:88:5E:7A:D6:B6:A1:F2:A9:3A:56:1A:82:70:36:AE:E8
X509v3 Authority Key Identifier:
keyid:A8:22:07:FD:50:C4:5E:96:F2:82:5E:C7:72:CF:6B:8D:EA:3D:FC:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCIH_VDEXpbygl7Hcs9rjeo9_LA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aa8e43-6df0-47ef-adc5-30bdd2fe05b1/1/qCIH_VDEXpbygl7Hcs9rjeo9_LA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:5c:1b:66:f1:1b:8b:1f:e6:e1:7d:e0:04:d4:85:c5:25:23:
26:50:3a:e9:a6:2f:d9:68:17:13:61:7d:3d:62:35:31:37:3c:
7c:c7:b9:e0:b4:44:24:2c:ad:42:5a:67:26:7f:27:1c:1c:55:
45:07:b7:e6:8c:ee:c9:37:6f:29:d1:ee:1f:09:69:d4:e0:83:
b8:35:5a:63:b4:5e:77:df:1d:cc:ed:ab:b2:9b:7a:07:6a:63:
84:79:7d:b4:6f:a1:01:ee:d0:cb:ff:61:25:68:55:b5:b9:bc:
45:95:e1:84:fa:3b:43:38:8a:f7:4c:8a:80:1d:93:0f:e4:f5:
36:77:b3:5f:65:52:92:bb:b1:8f:8f:dc:9f:0b:43:79:43:c8:
77:8c:b5:59:26:51:8e:e1:e7:14:cc:0f:8a:d4:d9:0a:b7:a1:
78:d8:b8:1e:9d:1c:6a:24:ee:ed:0b:ef:1c:de:0d:d6:b8:c4:
fb:14:10:68:b9:0d:2b:69:16:55:00:fd:63:42:5f:3c:da:06:
d0:4e:ee:4e:72:4d:a2:8f:b7:fd:7e:e1:12:f7:ba:f3:2e:f9:
40:20:41:2b:0c:68:04:5f:68:9a:bc:fd:49:bc:f6:96:f3:a1:
16:03:40:a1:09:87:e3:af:bd:c4:da:0e:4e:ec:11:b0:9a:06:
32:87:e4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:11:22 2026 by rpki-client