Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: ZknZlokgWh8UojWgemGF7t9/oLTJjptKPCIxpyTMEQU=
Subject key identifier: 3C:68:68:BE:C7:02:F4:82:CD:87:3C:7F:44:F1:15:E5:12:2E:D7:F2
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 01A1502CBEBAFA1CA16B9B2074F1F961807F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0E9F
Signing time: Sun 18 Oct 2026 18:01:11 +0000
Manifest this update: Sun 18 Oct 2026 18:01:11 +0000
Manifest next update: Mon 19 Oct 2026 18:01:11 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: 9VqPk3Rxg6+2nHxXmMFoyF5bdw1casmZZC9Irhkfl00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:2c:be:ba:fa:1c:a1:6b:9b:20:74:f1:f9:61:80:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Oct 18 18:01:11 2026 GMT
Not After : Oct 19 18:01:11 2026 GMT
Subject: CN=3c6868bec702f482cd873c7f44f115e5122ed7f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:48:f5:69:b8:6b:e8:0d:e4:b8:ca:4b:64:
ad:c9:ae:1f:40:bd:5f:d3:c3:63:f0:20:25:ef:0a:
42:9d:6e:96:42:90:e7:b5:18:45:2b:5a:9c:19:31:
3d:bc:87:e1:4a:06:10:9c:0b:14:37:4d:05:4b:28:
fe:1b:d5:bf:f4:43:46:39:72:89:bc:54:b1:a7:3d:
c3:6d:37:88:14:dc:0d:fb:c5:a2:40:3b:2e:98:78:
31:78:f5:e8:21:a4:c0:10:90:5a:c7:66:ca:d6:e9:
65:59:35:53:06:50:7b:a9:ee:8b:ad:8b:21:9e:72:
96:a4:83:8e:0e:8c:51:a4:5b:f7:89:38:06:56:c6:
02:0f:3b:73:67:b2:ff:a0:50:2a:f3:7e:71:bf:9f:
d9:10:69:0e:d3:40:0d:ae:12:30:66:4a:f5:2e:10:
07:63:d1:e7:07:ae:34:58:be:ab:ae:0a:5e:0e:1f:
4b:66:ba:b2:78:ec:bc:b6:32:72:ff:c9:d7:2f:8f:
86:6c:63:9c:02:b1:5c:b7:3e:28:34:e8:f9:9d:dd:
e3:6b:46:55:93:5e:8f:1d:f5:cb:e8:ca:e4:cf:13:
57:e9:00:e0:ee:39:4d:fe:85:b9:b4:1c:c3:6b:0d:
a0:08:36:62:b4:d6:57:1f:6b:71:ec:5f:7d:a3:38:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:68:68:BE:C7:02:F4:82:CD:87:3C:7F:44:F1:15:E5:12:2E:D7:F2
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:18:0f:65:0e:54:df:30:cd:c9:83:2f:45:cd:af:6a:ff:7c:
a4:a6:f4:09:a9:98:b0:f8:e0:16:e0:59:d6:fe:6b:3d:3b:c2:
65:35:9d:96:25:0a:d8:67:13:57:0e:5f:82:80:0f:ca:35:c6:
7d:20:24:e0:09:98:a4:30:27:06:6e:7b:27:33:19:29:3f:2b:
f1:34:99:a5:87:74:8a:54:6e:ac:0f:b2:97:02:62:4c:7e:91:
69:b5:47:94:4c:7a:af:6f:a2:61:84:81:cd:59:39:7e:cd:4c:
39:e1:bc:08:02:26:43:03:ca:18:25:86:6e:a9:4a:5e:13:7d:
a6:89:43:f0:61:a8:47:12:75:2c:33:b5:6c:28:83:3b:40:86:
e3:b6:4e:f5:fb:17:28:3b:fa:4c:79:19:57:ba:14:cc:9c:bd:
4a:42:ce:ba:ee:7a:87:fb:62:0c:3e:f0:14:d3:ae:db:de:26:
33:62:9c:c2:c5:f5:27:0c:89:39:32:9a:74:9e:27:b3:cb:75:
e5:9c:ae:4d:e9:c8:8f:21:26:4d:37:9b:48:fb:d1:f0:ce:8c:
e7:78:0d:93:ad:0d:13:a5:83:fa:74:0c:54:a8:87:80:2e:fc:
e6:e5:12:10:24:82:ea:83:d4:ac:1b:31:34:be:07:d4:3c:8f:
44:c1:b6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:43:11 2026 by rpki-client