Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
File: qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft (raw, json)
Hash identifier: K+ANrUSKvccf1kUnVWRBi3NwBNWbPPSVjJM5CD4O5pI=
Subject key identifier: 40:A2:59:84:C5:10:6B:69:FF:0B:08:86:CD:69:C2:46:FF:76:0C:1F
Authority key identifier: A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
Certificate issuer: /CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Certificate serial: 01A139DBD2657AACF11D498A9D1676D76774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
Manifest number: 0D5A
Signing time: Wed 14 Oct 2026 10:01:09 +0000
Manifest this update: Wed 14 Oct 2026 10:01:09 +0000
Manifest next update: Thu 15 Oct 2026 10:01:09 +0000
Files and hashes: 1: p7kUQsOQtRN8x-may1Y8dR-SzTM.roa (hash: e1zw6xIZxJlaisau8WiBgS/sq06VVodd4P5Ejxa9/2U=)
2: qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl (hash: d3FHat7fpETHvbvUVJTEjJ3FjD2hXCvjqGIBqEsWd/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:d2:65:7a:ac:f1:1d:49:8a:9d:16:76:d7:67:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a968adf120a74a5d10809cfd3cb6814fc89b1f46
Validity
Not Before: Oct 14 10:01:09 2026 GMT
Not After : Oct 15 10:01:09 2026 GMT
Subject: CN=40a25984c5106b69ff0b0886cd69c246ff760c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b7:4e:63:e3:ee:3e:cd:52:78:06:74:29:b0:
de:09:9d:86:b1:d8:e5:97:60:86:89:e7:a8:2e:59:
d6:18:93:10:0e:1a:fb:0f:c2:68:ba:9f:d8:af:a0:
6e:04:58:f6:74:a7:f8:f5:2d:ec:14:99:aa:9b:be:
70:b9:0a:b9:4e:e5:c5:a0:b8:c5:f2:73:d2:89:4c:
9a:71:29:70:63:11:bb:bd:6b:cc:08:c7:30:de:79:
71:1b:3a:1d:23:0e:fb:9c:1d:3b:06:44:e1:3c:be:
49:4e:88:da:52:57:14:11:d4:a6:74:00:be:b1:8e:
28:6b:c1:df:da:dc:9d:b0:17:d3:c8:8a:91:7d:77:
db:79:ff:c5:22:43:f2:85:5b:79:86:43:c6:c4:b7:
79:46:03:4a:6b:d8:d4:48:92:94:48:e3:a9:d0:00:
7c:b6:b3:80:e2:d9:88:ce:7d:dc:3b:d5:71:12:12:
1a:5f:2d:6f:19:07:de:f2:46:71:81:d1:8b:1d:75:
a1:0d:dd:db:91:35:a5:74:4c:9f:50:a6:71:9c:14:
3c:4d:3b:e5:e8:22:a5:a9:93:de:50:6a:5c:be:d1:
ca:38:2b:5b:07:de:de:7f:98:30:a0:46:b0:bc:d3:
0d:57:be:be:a8:28:ed:07:f5:48:5f:39:6f:c1:d7:
7b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A2:59:84:C5:10:6B:69:FF:0B:08:86:CD:69:C2:46:FF:76:0C:1F
X509v3 Authority Key Identifier:
keyid:A9:68:AD:F1:20:A7:4A:5D:10:80:9C:FD:3C:B6:81:4F:C8:9B:1F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWit8SCnSl0QgJz9PLaBT8ibH0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c4b211-c089-4c05-803b-80ce45861239/1/qWit8SCnSl0QgJz9PLaBT8ibH0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9e:15:37:4a:03:9b:55:e5:b1:d6:83:37:7d:e5:97:af:0f:
f1:6c:0f:54:52:de:8f:50:89:19:27:3b:ae:51:6a:74:8e:5c:
78:dc:2c:10:c9:3c:c0:28:0d:2c:da:b1:b2:b8:0c:d3:23:d6:
70:01:4d:73:ce:48:c9:2e:df:70:15:65:99:57:e1:ff:9c:da:
ff:d3:dc:69:b3:12:09:f3:06:88:7b:58:bb:c3:1c:60:5a:fb:
a1:31:2e:a8:89:99:aa:78:0c:68:29:24:fa:a8:36:17:8e:35:
f5:25:54:24:49:96:32:0d:db:f6:9a:32:12:59:60:e4:c8:33:
80:51:de:1c:d4:c9:0a:c0:6f:4f:10:22:cd:6b:dd:d9:7e:45:
70:03:88:2c:0e:21:12:7b:7a:fa:f6:c1:94:e2:4d:42:da:4a:
46:9d:8b:9d:e4:c2:59:d6:08:55:5d:52:17:fa:b3:74:bb:f6:
9d:58:30:16:7c:38:57:5b:1c:7c:de:e8:0f:93:6e:f6:26:07:
e5:3a:fb:73:ba:bd:ce:b0:5e:65:e8:ba:de:b3:ff:59:2e:b0:
89:3c:a6:5b:36:9e:ec:af:30:41:f4:8b:f9:2b:a6:93:7c:5d:
5f:32:53:62:2b:8a:62:92:c0:b4:b6:94:87:1d:52:e8:11:d4:
3b:b1:81:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:55:38 2026 by rpki-client