Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
File: qQYfL0mm16-epna60D3xzi9QJg0.mft (raw, json)
Hash identifier: 3PrDi4Yp00euo+r92A9D1+mUziDlnpU+htGTaH9mM0s=
Subject key identifier: 36:1E:1D:6A:59:BA:8B:C2:B9:7A:A0:93:B0:34:26:FF:50:3C:40:4F
Authority key identifier: A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
Certificate issuer: /CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Certificate serial: 01A0040222FD70E72469989AC12973290B3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
Manifest number: 0DF3
Signing time: Sat 15 Aug 2026 06:00:43 +0000
Manifest this update: Sat 15 Aug 2026 06:00:43 +0000
Manifest next update: Sun 16 Aug 2026 06:00:43 +0000
Files and hashes: 1: JZJx4L1hE5SD9mcU3dDsqxkA624.roa (hash: aZtriA7sGW64atFxZesGv0mQUg9eckBShedQMDCxoFw=)
2: qQYfL0mm16-epna60D3xzi9QJg0.crl (hash: 2tt4I8DwgdAfkyIUc7cxoTvllliumhkTymphc/VLGJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:22:fd:70:e7:24:69:98:9a:c1:29:73:29:0b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9061f2f49a6d7af9ea676bad03df1ce2f50260d
Validity
Not Before: Aug 15 06:00:43 2026 GMT
Not After : Aug 16 06:00:43 2026 GMT
Subject: CN=361e1d6a59ba8bc2b97aa093b03426ff503c404f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:df:89:2b:0c:8c:f3:41:0c:fd:f3:29:79:
0e:3d:e5:4f:bd:7e:12:3f:e0:7a:90:2a:75:9b:69:
f2:be:dc:cf:18:35:7a:70:ce:a5:ab:42:58:0f:20:
4a:ae:74:6f:7e:f4:a6:db:04:d4:55:be:94:b8:44:
4c:da:1e:af:98:1e:0f:48:b6:d2:1b:18:a5:a9:ff:
fb:c8:8c:1d:c5:5d:c6:67:3f:3d:21:6b:a0:67:a5:
fc:7b:72:cf:06:57:76:8a:a8:12:ec:1e:8c:1e:78:
a7:76:0e:68:65:7a:4b:06:61:69:48:e7:a6:b2:9a:
de:0b:58:25:02:6f:a0:bf:37:09:85:60:77:3d:72:
59:97:a8:cb:df:fd:ab:30:72:38:f7:2d:5e:78:88:
c0:e6:04:c0:5d:f6:82:4a:88:44:7b:52:96:4b:be:
f8:85:e0:35:c2:3b:df:20:ad:b3:d7:18:07:ab:15:
ee:8f:da:04:ba:70:b0:ff:65:fb:ab:9d:f8:fe:bd:
a5:26:48:93:e0:fc:17:10:00:3a:91:f8:47:53:b4:
c2:bd:3c:cf:23:35:01:69:e9:07:2f:00:46:80:55:
bc:9d:ff:e2:4d:c7:e6:e8:a7:47:35:b4:b0:fe:26:
29:00:8c:72:6f:6d:2b:c9:21:63:53:ff:3d:14:02:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:1E:1D:6A:59:BA:8B:C2:B9:7A:A0:93:B0:34:26:FF:50:3C:40:4F
X509v3 Authority Key Identifier:
keyid:A9:06:1F:2F:49:A6:D7:AF:9E:A6:76:BA:D0:3D:F1:CE:2F:50:26:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQYfL0mm16-epna60D3xzi9QJg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba9be1-1fa2-4253-bf01-f6c268612fc7/1/qQYfL0mm16-epna60D3xzi9QJg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:60:49:4b:12:62:ba:63:ea:97:e6:26:58:11:df:f7:17:f5:
9b:1e:4b:c3:a6:90:1f:27:8b:d6:49:4e:6e:94:57:81:6d:47:
62:2c:f7:59:64:ab:d3:04:7e:90:a4:35:c5:a5:c4:03:b9:41:
dc:44:dd:18:07:51:35:42:ca:b4:1f:17:f9:be:27:65:c0:b7:
03:a7:3b:d6:1d:9b:25:bc:55:4f:7f:24:c8:10:29:b8:92:a7:
ee:d2:34:39:33:a4:bd:6b:da:25:37:40:74:e6:73:31:55:21:
91:ae:b0:64:8a:0e:7c:03:d7:8b:fb:f1:e1:dd:5c:e0:10:92:
ff:49:5e:b2:2f:20:0d:dd:bf:71:71:93:da:d2:64:15:27:6d:
c6:96:32:1a:66:39:c4:ba:09:45:be:68:23:b9:91:b7:5d:c9:
4b:3e:27:38:20:30:e6:2a:e3:5e:77:44:7a:99:64:f4:fe:66:
32:2d:5b:c1:95:49:9e:eb:be:a7:f4:88:fa:19:12:29:07:1c:
c4:ac:e8:29:c4:24:16:ce:56:4a:1f:b8:53:46:60:fb:cf:93:
2a:a5:fd:b5:db:f4:47:f8:ef:f2:b9:14:3b:4f:9c:9e:65:5b:
56:6d:52:86:d1:73:e9:b1:80:d7:dc:1c:bf:1d:68:1a:5d:90:
fc:4c:79:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:41:31 2026 by rpki-client