Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: atI8+x6QdfGIVWfBTPs8y8jjveIPuMsZ8851aGjKHlw=
Subject key identifier: 45:A6:3D:11:EA:1D:D9:1C:C2:B4:21:6C:58:69:26:D6:D3:04:78:BA
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 01A0C821DF05206F50C9167C004B5BD69B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 0316
Signing time: Tue 22 Sep 2026 08:00:57 +0000
Manifest this update: Tue 22 Sep 2026 08:00:57 +0000
Manifest next update: Wed 23 Sep 2026 08:00:57 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: NNt4LL2mkpCa8gZHoMNwebL1oQvkZnFPMSmcsey//Pk=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:df:05:20:6f:50:c9:16:7c:00:4b:5b:d6:9b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Sep 22 08:00:57 2026 GMT
Not After : Sep 23 08:00:57 2026 GMT
Subject: CN=45a63d11ea1dd91cc2b4216c586926d6d30478ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:70:5a:81:0e:fb:fa:00:c5:88:12:d1:93:
16:85:23:c9:be:2d:2a:9d:df:01:47:7e:d4:4b:bc:
ae:88:cc:e3:35:53:75:a9:e7:2f:8a:90:c5:80:71:
be:6c:4b:b1:19:b4:25:a3:54:a6:ec:49:d7:6f:fd:
d6:69:6d:e9:42:6b:93:51:ca:5a:45:8f:e9:00:42:
5e:19:a1:92:4f:e7:6a:5c:72:d6:92:4b:9b:eb:a2:
70:05:74:30:c6:11:b0:46:79:ff:b2:28:8e:80:df:
41:2f:7a:c9:cd:6e:90:30:fd:95:1a:14:20:f9:43:
40:e8:87:8d:d6:e2:d9:c8:47:1c:2e:d8:d7:ae:df:
b8:e5:8d:12:66:b8:be:ef:f8:1d:18:a2:cf:83:88:
55:ca:8c:3c:82:b0:cb:25:20:5a:d2:a7:de:d5:2d:
26:ab:71:d4:bb:11:b4:0e:5c:62:43:99:ef:28:27:
a7:25:4f:2c:9a:a8:d4:25:ec:52:58:a9:86:51:5b:
76:83:77:a5:f5:3e:0a:1f:8e:61:9e:1c:2c:70:5f:
23:7b:97:a9:6e:a1:e1:f9:f7:de:7e:69:37:dc:83:
d0:ca:06:b2:4d:e0:2e:45:34:2d:e5:e2:21:9b:c7:
9e:9f:16:6f:46:84:a0:23:9d:87:30:7c:e9:4e:e3:
8d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A6:3D:11:EA:1D:D9:1C:C2:B4:21:6C:58:69:26:D6:D3:04:78:BA
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d8:a8:13:e0:fd:f0:6d:5b:a5:9a:26:4b:d0:e5:9a:88:27:
eb:58:e6:07:7e:10:d5:25:f7:39:f1:5d:eb:3b:64:ec:90:fe:
db:b8:91:be:76:06:e8:18:d3:66:9a:5b:cb:b5:1b:ab:da:9d:
c0:ba:04:b3:e0:ae:c6:c1:a5:f4:3d:32:28:0a:7f:ce:8e:7c:
a3:31:64:fd:a8:f2:c2:dc:ac:36:4f:30:69:0f:e6:f0:24:fe:
ab:d8:97:04:d8:6e:b4:00:c3:ed:f8:b6:55:d6:dc:19:eb:9b:
5b:d5:2b:2e:43:cd:ba:5b:98:2c:a5:a4:2e:de:c3:2d:30:ea:
f9:25:5b:fa:ea:99:4e:bf:fa:d1:bc:ab:b7:aa:f6:03:f9:72:
f4:65:e8:52:d1:7b:b0:2a:d8:62:fa:d1:75:2a:f7:82:ca:cb:
ff:2a:1d:e0:a8:da:38:a0:73:9e:71:0b:d2:a0:43:32:37:8c:
b6:d9:9e:40:c8:6d:6d:db:83:38:d1:3b:2e:1a:86:f8:8e:ec:
2c:0a:4b:99:49:7d:57:7b:16:5c:55:8a:53:8e:cb:ff:03:7b:
63:72:1f:db:e5:2b:ad:07:69:cc:c6:d0:e4:d9:24:5b:fe:32:
41:d3:28:ee:52:58:55:40:98:02:f4:6e:16:00:06:28:50:c5:
2d:b0:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:03:36 2026 by rpki-client