Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
File: qnXo86HZziwBs21atvwvdScw6-o.mft (raw, json)
Hash identifier: C7Vex1nLOtO7sP125olTI6lFgfHX8XKFCnFiGkptcHQ=
Subject key identifier: DF:1A:79:63:B1:74:36:18:06:A5:CA:89:DD:B7:1F:45:D4:2D:9E:B7
Authority key identifier: AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
Certificate issuer: /CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Certificate serial: 01A1472996B0A60B392B7E30A43996AF7100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
Manifest number: FC
Signing time: Sat 17 Oct 2026 00:01:10 +0000
Manifest this update: Sat 17 Oct 2026 00:01:10 +0000
Manifest next update: Sun 18 Oct 2026 00:01:10 +0000
Files and hashes: 1: F4bHO26ov_LXN2HmDVipaawO7m8.roa (hash: h7Mt3mdiFgijsbzUiijnPcewxsQWfduQBQ9fyFS37oY=)
2: qnXo86HZziwBs21atvwvdScw6-o.crl (hash: cYr+nZu6538poefdo/6DQRRtoKgIlCiuNa5LVOb/ykM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:29:96:b0:a6:0b:39:2b:7e:30:a4:39:96:af:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Validity
Not Before: Oct 17 00:01:10 2026 GMT
Not After : Oct 18 00:01:10 2026 GMT
Subject: CN=df1a7963b174361806a5ca89ddb71f45d42d9eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:8a:4a:e1:d6:c8:02:bf:d5:49:17:60:42:
09:9f:b2:ff:1a:05:72:b6:de:51:15:3c:b1:8e:5a:
b7:19:c4:dd:9f:13:53:b5:63:31:be:3f:5d:86:b7:
6b:65:4c:03:0d:1a:da:c5:ea:22:24:a3:5b:f2:14:
0b:b2:a0:9b:fc:d6:c4:4b:51:58:07:0e:a2:17:9c:
cb:3d:90:4e:7b:93:fd:88:af:75:a8:1e:96:f5:ed:
6d:4f:74:8d:04:f9:ee:cf:1c:ed:c9:14:0f:b8:e6:
73:c3:08:20:65:24:47:1c:f1:f1:f5:51:af:49:aa:
d0:2d:a1:68:b3:cb:50:2d:2e:58:7e:d7:0f:8c:de:
38:e9:d7:14:5d:26:08:da:ed:f1:08:a6:f6:12:10:
4c:99:de:24:ab:83:5a:2e:8c:b0:17:36:4b:26:73:
fe:d3:9e:e8:43:e7:8b:90:03:01:d6:2c:52:60:fd:
bb:fc:9d:97:8a:5a:25:98:d5:c2:10:4c:4b:f7:5b:
1f:dc:1e:2d:3f:5d:39:61:8f:03:04:21:12:c8:79:
54:e6:4e:64:97:72:f7:6d:93:8f:9a:9a:37:14:a2:
e1:bc:bc:af:13:76:3c:87:d0:33:7b:c9:db:13:ea:
18:bc:70:5b:ce:ab:bc:fe:d0:a7:91:7a:a5:12:14:
f1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1A:79:63:B1:74:36:18:06:A5:CA:89:DD:B7:1F:45:D4:2D:9E:B7
X509v3 Authority Key Identifier:
keyid:AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:d6:58:30:fd:f8:7a:0f:74:18:31:98:4c:f4:c2:53:80:c8:
c6:01:5d:08:b5:52:77:00:bd:01:7c:a9:f1:95:2d:d9:ba:69:
86:8c:5a:d0:4b:d2:d7:4b:26:42:9c:b5:9d:18:ed:2a:c2:b4:
4d:60:d0:c3:e8:b8:67:a2:c4:83:c3:b5:fa:2b:ad:a2:02:83:
f9:01:38:7a:5c:e5:40:df:50:8c:3e:a2:a4:8d:2b:73:ce:60:
fb:11:4c:05:d5:1b:9b:ee:2c:63:9b:fd:f2:ae:ca:cd:a9:b0:
07:84:9f:1b:d5:e1:5d:b5:e0:6d:ab:01:19:1e:4c:83:19:25:
2c:41:a5:2a:7f:3a:17:60:10:6b:50:55:2a:2d:d4:44:9e:55:
d6:14:36:52:f4:9d:37:32:e1:7f:93:2f:e6:35:10:66:83:ec:
6c:a7:7c:56:bb:2f:aa:25:69:6f:14:3a:8e:91:89:26:3d:11:
34:10:a2:16:1c:a8:47:94:bd:14:0e:2a:29:07:7b:98:10:29:
81:9e:62:12:be:72:c5:d7:68:5d:8a:89:54:96:83:39:ad:e0:
b4:76:3a:96:41:53:d4:dd:6a:3d:64:bd:2a:e6:04:d6:81:7a:
b4:0c:e3:ea:3e:c6:f5:22:68:84:58:af:13:14:5f:dc:ef:1c:
13:cd:c7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:34:01 2026 by rpki-client