Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: t0sl9PIUidF/MCfkMBfYxA1IMDJ6IZCmVn1UZulnyvo=
Subject key identifier: 0D:E3:4C:6F:87:AF:18:DA:09:E6:B5:2E:1B:88:11:35:86:45:3D:58
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 01A0CAEBA9AAFAA60A9DA9C05D4C9315630C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 057D
Signing time: Tue 22 Sep 2026 21:00:37 +0000
Manifest this update: Tue 22 Sep 2026 21:00:37 +0000
Manifest next update: Wed 23 Sep 2026 21:00:37 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: mLSx12B6ignW8x+iiStYHZQq2HUyGxL92OlJ5TwAb7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:a9:aa:fa:a6:0a:9d:a9:c0:5d:4c:93:15:63:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Sep 22 21:00:37 2026 GMT
Not After : Sep 23 21:00:37 2026 GMT
Subject: CN=0de34c6f87af18da09e6b52e1b88113586453d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0d:08:d1:fe:a3:23:27:1b:e0:d7:6c:56:66:
7f:94:bf:1d:aa:04:ef:07:fb:7a:43:00:28:b3:36:
c4:da:a1:00:aa:95:e7:1b:17:d8:46:d5:05:a5:93:
b3:89:17:eb:a5:74:2b:ec:1f:6d:b6:e2:7e:57:05:
d5:8b:b3:3d:ec:67:92:2e:55:73:76:d2:cc:c1:42:
07:72:0c:65:b0:94:55:84:f9:80:49:7d:b0:90:9d:
17:57:96:63:c5:e6:97:6a:72:e5:d4:5c:7a:59:6e:
3d:d7:74:2d:6f:4a:60:d6:e1:ed:ce:af:40:8f:4c:
f3:d2:cf:94:f5:a1:d0:d3:6e:6c:b0:54:96:20:9a:
a8:18:82:b3:36:ec:35:d3:08:94:15:2e:a2:74:0f:
8c:b7:46:33:b4:2c:ec:fc:66:c3:53:a8:d6:b3:a1:
be:fc:1e:40:5c:bd:c8:19:14:bc:b6:8f:63:3e:37:
3c:41:05:f3:03:e7:95:ab:7e:ac:ee:d9:bc:ca:6d:
f0:00:77:24:69:dc:fd:8d:74:d7:7c:54:db:29:a0:
6f:bb:0b:bc:61:b3:b1:e1:68:30:1b:79:55:92:28:
b9:90:02:dc:2c:af:5e:7e:22:09:c8:3c:46:b7:d2:
07:b5:80:2e:22:e3:60:4d:7f:b1:12:27:19:10:ad:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E3:4C:6F:87:AF:18:DA:09:E6:B5:2E:1B:88:11:35:86:45:3D:58
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:63:54:c2:1d:9b:69:66:4c:7b:7b:4a:73:64:25:cf:c1:bf:
80:27:23:a4:57:8c:23:19:9f:a6:b8:3d:e9:5b:52:77:2f:ee:
49:bb:1b:c0:77:26:25:ac:88:1b:10:6d:77:89:ac:80:da:f4:
45:b8:56:4f:bb:0b:09:78:2f:8a:45:9e:1c:33:79:df:94:a4:
ac:b6:7e:40:24:07:f7:ed:8e:26:37:66:9b:93:4c:a2:4b:09:
38:eb:52:c8:c0:60:4c:f4:58:f9:9f:6f:90:36:55:f5:2f:3f:
5d:ce:53:e7:c3:91:e9:a4:ae:a5:1f:25:07:21:ac:e3:0d:3c:
ff:ef:85:10:f8:ea:c8:f7:c9:42:05:7f:66:8f:c7:dd:4f:45:
f6:a9:1b:23:f4:af:43:07:4c:25:05:6e:51:2f:79:9d:76:42:
3e:43:f7:19:6d:ba:0d:5d:ef:51:ab:19:c1:a0:c4:86:bc:de:
b1:32:74:dc:0b:ef:64:5a:3a:17:27:90:55:d7:f2:f6:76:c5:
51:ec:4c:71:0b:7b:c7:d4:88:d7:84:c5:08:6d:3a:72:77:e0:
f0:61:aa:d6:f0:cf:b6:56:b1:f9:d1:54:da:d0:eb:6b:ae:ac:
29:9c:cc:7b:ec:c1:85:ed:b0:58:26:58:b2:a7:f7:03:7f:50:
1e:3a:85:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:28:08 2026 by rpki-client