Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
File: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft (raw, json)
Hash identifier: bnADmvrZ/WyVaHpYjapJkK9cUSzyt5h4nePedzygPx0=
Subject key identifier: BA:9A:B6:AB:48:96:F2:75:45:59:0E:89:3C:D9:1A:D8:70:98:72:9B
Authority key identifier: A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
Certificate issuer: /CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Certificate serial: 01A08DFB6E6461476ACAE7787245E654A688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
Manifest number: 15E5
Signing time: Fri 11 Sep 2026 01:01:00 +0000
Manifest this update: Fri 11 Sep 2026 01:01:00 +0000
Manifest next update: Sat 12 Sep 2026 01:01:00 +0000
Files and hashes: 1: 3FimOljJosTayAtjbZa6x1Z1MXs.roa (hash: MeEGr+necOtlrJoGJSW1/wG4DV94jp5QrV4hS1BQHCg=)
2: QP9nM5PMiejN9yhohpS-UJYwohQ.roa (hash: YoeG5CqmyBDeclyGv/x1kOlmle614YEmox8sx9pd0fU=)
3: qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl (hash: rjLB1QobTFDKjjmoFPIJ3mLL3wONSHFFgYZe6dwapxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:fb:6e:64:61:47:6a:ca:e7:78:72:45:e6:54:a6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8dff01f56e3419d027be7591ceef62851ce0f6b
Validity
Not Before: Sep 11 01:01:00 2026 GMT
Not After : Sep 12 01:01:00 2026 GMT
Subject: CN=ba9ab6ab4896f27545590e893cd91ad87098729b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:aa:4b:c2:b1:da:a2:69:76:14:31:d7:bd:
47:fc:3c:dc:23:cc:03:3a:82:0c:d4:d1:68:9e:c5:
c0:a7:ff:59:48:44:82:a8:ad:ca:b5:7d:81:45:0a:
75:0d:a8:d8:0a:88:67:af:0a:0e:30:97:fe:2f:45:
0e:93:d2:65:96:6d:a4:d9:b7:68:04:dc:60:d8:31:
cd:83:5b:1b:48:fc:0d:a3:26:c9:66:45:95:b3:89:
22:88:65:83:8a:89:d6:c3:30:dd:f2:4b:fa:a3:ea:
50:09:2e:89:82:cb:3e:a2:a6:57:76:b3:ba:2d:ca:
18:97:81:c8:2e:9d:f3:43:aa:ae:46:6f:bf:7c:1b:
90:ef:8e:f3:39:b2:58:13:07:91:c9:b1:73:4e:c7:
4a:5e:9c:02:fe:cc:25:ca:80:5e:5a:c0:59:67:1c:
1e:b8:c2:20:df:eb:99:f1:43:ec:49:ef:5f:e7:f3:
9d:28:fa:23:c0:8d:e5:7e:fe:94:0a:15:fe:cf:e7:
61:6f:c3:4d:95:49:a1:71:20:8e:50:d6:2c:d5:11:
19:e8:32:0f:fd:cb:cd:dd:95:31:31:9d:18:d1:1a:
d5:d3:93:bb:6d:a7:ef:fa:44:5f:25:bc:32:8d:7a:
e1:d9:01:c1:87:28:52:b1:79:45:cf:5e:45:f3:2b:
91:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9A:B6:AB:48:96:F2:75:45:59:0E:89:3C:D9:1A:D8:70:98:72:9B
X509v3 Authority Key Identifier:
keyid:A8:DF:F0:1F:56:E3:41:9D:02:7B:E7:59:1C:EE:F6:28:51:CE:0F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/473366-702d-473f-bfbe-882c448e2ef6/1/qN_wH1bjQZ0Ce-dZHO72KFHOD2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f1:1c:8c:67:98:0e:52:7d:ee:51:55:dd:01:72:69:e0:20:
23:9c:c6:ad:a2:e9:64:ae:c1:96:a4:b3:90:d7:2f:7b:5f:71:
3a:df:08:16:be:28:99:ee:aa:d0:cc:85:51:a3:92:e2:60:a5:
e7:7f:88:c2:2a:dd:34:0a:cf:51:fa:83:3b:a1:f8:84:8b:bc:
18:56:ab:3e:51:2c:61:eb:b7:b7:07:23:c3:80:11:4e:d0:d1:
4f:ab:d2:b0:cd:e4:bd:13:cd:51:23:14:75:db:09:fc:aa:a7:
0d:48:00:49:2b:8a:a5:28:7f:08:d1:60:78:3d:98:14:b2:f3:
6d:b9:46:0b:74:f9:78:79:0c:7c:26:bc:75:3f:0f:fb:80:5f:
87:88:ab:09:0a:30:0b:0e:73:a7:cb:8f:5c:35:6c:18:f9:6f:
44:a3:d6:5f:64:02:9f:7d:28:54:6f:39:99:57:52:41:32:9a:
0a:d6:2a:fe:7f:1a:5f:9f:c7:6f:a5:7b:82:d0:b1:94:7e:24:
ed:ab:49:0c:da:bf:b9:c7:5b:3f:89:24:af:94:91:7a:1e:c5:
23:41:d8:35:33:c6:df:29:d7:89:65:09:28:b3:73:00:e8:b3:
1f:8a:40:0b:45:b5:8b:c9:24:dc:7d:52:59:ed:55:44:54:9e:
a1:d1:df:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:07:36 2026 by rpki-client