Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
File: QRoqlAW9oWccEHdvRCYnPJBOStA.mft (raw, json)
Hash identifier: geMnrc2xpVja4J4bmOaiIjOupYsmHAlLJLO3hjzhopo=
Subject key identifier: E9:69:8B:77:A4:80:DC:9C:04:02:C9:3B:90:63:BE:45:67:2C:56:DF
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 019FF8360222442F6756DFDA2BB625C8D1B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
Manifest number: 1A00
Signing time: Wed 12 Aug 2026 23:01:56 +0000
Manifest this update: Wed 12 Aug 2026 23:01:56 +0000
Manifest next update: Thu 13 Aug 2026 23:01:56 +0000
Files and hashes: 1: JhKTt4vHe2Da6Kx5S6KE0aGaD54.roa (hash: nw0ozHE1LZlyAK+hkXXsJOHymcfFOhmuSyMz6eBbqyE=)
2: O5zwSwZaq-PnYfyFgUGaYTtXVCc.roa (hash: EcphMyhwWu+HB1619MCd3HbMcseN3a1eZUs2rmX7LwY=)
3: QRoqlAW9oWccEHdvRCYnPJBOStA.crl (hash: WDdrK78zpYA7RCzjLdkVJlu8NoHX0BzB94/UqMF1Hck=)
4: mV0XT4eYWUzPfujoqVHWBgPdVhw.asa (hash: SxQBgXkzl2s7ZSzL5zFHD8gDFNbcwGk2HGZOyqJzEQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:36:02:22:44:2f:67:56:df:da:2b:b6:25:c8:d1:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Aug 12 23:01:56 2026 GMT
Not After : Aug 13 23:01:56 2026 GMT
Subject: CN=e9698b77a480dc9c0402c93b9063be45672c56df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:17:a9:b8:54:4c:29:3f:57:7c:e3:36:ce:36:
4e:80:df:7a:d9:af:01:ef:c2:06:67:6a:72:6a:af:
c6:0c:81:02:f0:03:f1:ed:1d:03:d0:13:37:a2:78:
12:3d:08:e7:b2:3e:b2:4f:5d:21:1e:1a:62:02:8d:
ce:14:ea:a0:4a:d3:c1:a7:39:57:04:76:64:01:6e:
62:89:10:99:8a:ed:5f:8a:42:7b:b3:2a:3a:31:84:
84:2c:77:74:a7:e6:a1:1f:8b:bb:85:e4:f6:d5:46:
c0:ec:b8:11:b4:4f:f1:b8:bf:3d:10:4a:1d:b4:fd:
97:55:8b:bc:ef:2b:ba:2e:1b:ee:a8:2b:1a:43:e6:
34:b6:18:a6:97:80:4a:46:eb:3e:ba:9c:93:ec:4c:
40:bc:ba:3a:da:c3:e5:50:ab:c6:3b:6a:7d:33:a0:
9e:a5:ae:db:f9:3b:67:11:b3:02:b4:d9:44:26:40:
bc:04:fa:3f:d2:09:e8:24:8f:09:cb:12:c2:bb:b2:
e7:df:3b:67:ed:81:16:6d:eb:a6:a1:f9:b8:55:dd:
5e:72:1b:c8:2f:a2:ca:a2:e4:0e:ed:35:9d:09:08:
08:c8:37:77:f0:73:f7:99:dd:15:b6:af:bc:69:29:
aa:2e:fc:79:4d:66:83:e8:c1:aa:ea:45:3c:c8:b0:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:69:8B:77:A4:80:DC:9C:04:02:C9:3B:90:63:BE:45:67:2C:56:DF
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:fa:6d:fe:94:61:84:00:45:82:65:48:02:f6:2f:de:7f:26:
e3:b1:d6:f7:d9:1d:79:85:02:98:46:dd:66:8c:1e:dd:cd:70:
f2:45:0b:10:80:8c:39:b1:6f:48:07:33:0a:0b:48:4d:8b:83:
e1:5f:b9:f3:65:3c:da:ee:1e:48:46:91:10:d7:dc:21:02:9e:
5a:9a:e0:c5:5a:76:14:68:f8:55:a7:62:34:b9:e0:fb:73:01:
f0:43:4a:99:24:45:27:0c:c8:30:ec:03:fe:30:13:fd:99:75:
d8:13:8a:12:4b:ad:9c:08:a1:ca:92:35:b4:63:91:c9:a3:57:
ad:85:31:3b:ca:91:b0:5f:9a:32:41:dd:44:d2:01:f4:6b:36:
b0:39:27:ca:44:1e:31:a4:2d:84:e3:6e:e6:b8:9e:4a:e7:be:
cb:b7:97:e2:ee:cc:e2:7f:89:ec:74:15:d0:8e:8c:f0:97:ef:
57:42:05:f7:69:c2:ac:ba:2d:c3:55:cd:50:6f:cf:8f:62:be:
20:92:ff:67:c8:83:a8:b2:59:d8:e5:40:a1:57:33:05:4b:af:
4f:e4:27:3c:c3:3e:f6:fc:d3:da:de:ab:8e:e0:87:2b:89:5d:
69:6d:53:2b:ad:c8:2c:cd:76:0e:8c:8e:e7:3b:47:83:83:dd:
86:11:a8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:11 2026 by rpki-client