Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: +phhQf2zfR4LDZDGiGtNdENnUAO7Vx9VvHhgbzC+Tgk=
Subject key identifier: 5F:3F:17:20:EA:B0:EE:94:5A:13:B4:C0:5D:70:F3:A8:B8:26:C0:E2
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 01A06E704F2116CE3CEB810080DB09DAFFA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 133D
Signing time: Fri 04 Sep 2026 22:00:49 +0000
Manifest this update: Fri 04 Sep 2026 22:00:49 +0000
Manifest next update: Sat 05 Sep 2026 22:00:49 +0000
Files and hashes: 1: Io1aFz3FdR5Bh1mYcrCe9mIequ8.roa (hash: MsqgD4dNC1FiLIJAOYEnGOt34n4HFw6UdIBX7nTzrgg=)
2: TKU8Yc2L0FbHGl3NXxfpL1eDNnE.roa (hash: c75+0er1lGRbZ38ME3BfFzi74fQVT9//khB7uqu1zrM=)
3: k71EKLBF_cl_NNSjkCcESijpJkY.roa (hash: NcQun5U6vnHcxP8j+XhrdDKMSW0mSEQmABKKB6veuXY=)
4: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: u7OCX+L5HEsINiZDH5fESJPaYxm8FxRtS47OzAL6Bqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:4f:21:16:ce:3c:eb:81:00:80:db:09:da:ff:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Sep 4 22:00:49 2026 GMT
Not After : Sep 5 22:00:49 2026 GMT
Subject: CN=5f3f1720eab0ee945a13b4c05d70f3a8b826c0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:82:a9:83:97:79:fb:a5:41:9a:92:15:03:
f6:b3:2c:a7:84:e1:71:32:4e:41:2c:3b:58:8b:04:
a1:3d:d3:c6:72:fb:82:ca:bf:ea:64:64:1f:40:32:
dd:02:e2:ab:07:2a:e9:b5:c9:af:62:73:44:b1:af:
85:c4:a2:79:ae:a3:e2:88:c2:4d:ff:ba:e6:3e:71:
79:a6:be:03:64:cd:de:fc:65:a0:42:f3:dd:42:3d:
79:9f:50:75:0e:91:7f:97:f9:5c:dd:28:a2:0d:fb:
c8:5d:35:82:9c:24:96:25:84:18:69:a9:bf:b3:0c:
b6:5f:13:a8:b8:35:31:80:d7:12:77:11:74:c0:c4:
c8:30:1f:c2:94:a0:c1:ed:48:13:62:20:96:9e:4a:
f6:e8:1b:16:0e:21:8a:6f:a4:da:ca:37:17:6a:14:
7a:8c:1d:cf:b2:2a:33:c8:da:dd:ab:22:67:fc:51:
c6:86:5f:94:bd:7c:9e:65:9c:b8:72:b1:43:24:a5:
5d:4f:5d:80:e4:0a:ed:a5:19:c4:76:f1:05:af:bd:
a3:cf:c1:4b:8d:c5:14:8e:ac:06:44:e2:9f:d8:28:
eb:de:99:c5:c6:6d:ec:77:17:73:53:a3:51:da:c3:
55:c1:91:e3:fa:55:a5:88:02:a2:c2:da:5c:67:1d:
ca:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:3F:17:20:EA:B0:EE:94:5A:13:B4:C0:5D:70:F3:A8:B8:26:C0:E2
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b1:23:3b:7f:14:87:4b:b3:77:a2:23:92:1b:8f:56:60:e0:
18:6f:06:fb:f5:d1:10:4c:c9:23:f4:69:50:99:52:2e:aa:ce:
cf:07:41:6e:9a:77:a2:4d:dc:0d:0a:9d:ea:49:cc:cb:46:f4:
b1:a3:9f:9e:fe:b8:62:70:13:8e:8a:b6:fe:d0:ba:0a:e2:b5:
a2:4d:57:9b:ce:73:1c:17:d5:79:6f:c2:1c:99:40:2c:39:2f:
aa:9f:2c:28:a3:78:27:79:c4:22:a5:49:d4:af:16:23:ff:70:
4d:72:9d:55:94:28:d6:b3:d5:6f:de:85:09:d2:78:7d:86:96:
f9:e4:91:99:dd:b7:27:67:3a:24:e9:22:86:ca:72:6a:dc:05:
a1:ae:6d:a5:ad:a5:1c:68:b5:55:ab:15:0d:79:eb:e3:69:1a:
51:e2:ca:1b:b4:7f:dd:c4:b5:b3:ff:5c:01:33:71:90:b6:49:
b5:d6:2a:d4:d2:fc:16:77:e3:d4:96:15:2a:9c:cf:a3:2d:3b:
db:36:f9:12:7e:ad:30:88:3e:62:37:00:d0:11:83:f5:18:f9:
0b:6b:0f:8e:28:8d:09:a8:6e:a8:1c:12:fa:41:51:b4:b2:2b:
64:e6:25:b7:99:ea:8d:d4:4f:cc:70:76:ee:3d:fd:7f:40:88:
b9:5f:5f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:40:39 2026 by rpki-client