Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
File: qQIAoAAN9dhFudsoTQotvuZ2xag.mft (raw, json)
Hash identifier: rHzW/MrcEqcO9hH75JEIV0ZLpMrYSHHeqysx/DhpWRk=
Subject key identifier: 1C:D6:A3:CF:68:F4:45:91:EC:E4:3E:C5:D7:6C:94:2D:5C:00:AB:9C
Authority key identifier: A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
Certificate issuer: /CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Certificate serial: 01A160B2230AA24D45588E74A0F379CAF660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
Manifest number: 13BB
Signing time: Wed 21 Oct 2026 23:00:49 +0000
Manifest this update: Wed 21 Oct 2026 23:00:49 +0000
Manifest next update: Thu 22 Oct 2026 23:00:49 +0000
Files and hashes: 1: Io1aFz3FdR5Bh1mYcrCe9mIequ8.roa (hash: MsqgD4dNC1FiLIJAOYEnGOt34n4HFw6UdIBX7nTzrgg=)
2: TIabuWefpCecVB1UqdvmsprEB6M.roa (hash: U0F7N1JBM9qnvLxoEK87L79dMHF1o/Xt4kA4GI9V3KM=)
3: k71EKLBF_cl_NNSjkCcESijpJkY.roa (hash: NcQun5U6vnHcxP8j+XhrdDKMSW0mSEQmABKKB6veuXY=)
4: qQIAoAAN9dhFudsoTQotvuZ2xag.crl (hash: m7FL32ct22aDUpN9Ya7KQiSguzkapK5gCgNZo/lsuaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:b2:23:0a:a2:4d:45:58:8e:74:a0:f3:79:ca:f6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90200a0000df5d845b9db284d0a2dbee676c5a8
Validity
Not Before: Oct 21 23:00:49 2026 GMT
Not After : Oct 22 23:00:49 2026 GMT
Subject: CN=1cd6a3cf68f44591ece43ec5d76c942d5c00ab9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:3a:77:b2:89:37:72:75:d7:1c:f6:f3:dc:
4a:0c:28:fa:71:bd:0c:b5:31:2f:66:6c:43:f8:a8:
c4:e3:d3:4f:8d:66:69:51:80:37:47:4d:38:91:31:
da:93:ed:84:96:c8:05:33:36:00:86:15:94:1b:4f:
70:4e:2e:f4:4c:10:25:e6:6d:24:c6:de:3e:21:7f:
8c:57:c4:f7:a3:e4:22:a8:57:cc:6b:68:2f:83:9a:
ab:a6:3c:f3:f7:92:f3:c0:0c:ec:91:de:5f:a5:4e:
b1:c7:f8:5f:7c:b1:37:e0:38:f8:97:15:65:ac:77:
0e:d0:77:87:04:b1:79:06:d6:49:2e:39:c8:70:a5:
7d:74:cb:2e:d1:f2:0f:4a:9d:81:c6:fc:e2:aa:f8:
f4:5a:fe:63:36:c3:e3:ff:47:7a:a0:4e:c4:b6:5e:
39:87:bb:d2:07:60:b8:e0:3c:f1:c7:17:7f:f8:9b:
33:de:f3:4f:3f:3b:5f:bd:68:43:66:d3:0d:2a:73:
eb:3d:57:10:b4:42:4f:4a:89:80:6e:74:92:61:77:
8c:f7:ff:cf:f3:b5:19:69:50:9b:64:d1:55:fe:ed:
0a:a6:7f:88:f7:a3:96:7e:49:5d:b1:3d:97:ef:89:
73:ee:18:de:e8:9e:0e:c4:8d:e0:b8:44:7b:af:27:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D6:A3:CF:68:F4:45:91:EC:E4:3E:C5:D7:6C:94:2D:5C:00:AB:9C
X509v3 Authority Key Identifier:
keyid:A9:02:00:A0:00:0D:F5:D8:45:B9:DB:28:4D:0A:2D:BE:E6:76:C5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQIAoAAN9dhFudsoTQotvuZ2xag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b1e3e1-8b7d-4e22-870c-58f574495bb8/1/qQIAoAAN9dhFudsoTQotvuZ2xag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:2e:6e:91:f8:f5:aa:4a:60:f9:2a:86:74:53:50:f5:28:f8:
0f:48:7a:30:ee:3f:d5:62:c5:f7:4e:52:19:33:13:5d:41:61:
0f:18:21:a3:4f:52:0b:02:64:8c:07:2c:f6:d8:24:71:0a:92:
42:5c:75:31:d4:1a:b7:e3:6c:7e:24:2d:69:8c:07:27:78:7c:
74:1b:f6:01:06:25:a6:fb:68:91:32:8d:4a:78:dd:0f:aa:7d:
ef:9d:aa:3b:a5:fc:1c:05:75:37:44:5f:d3:65:3c:0b:53:18:
a6:6e:43:9a:8b:6f:db:64:08:dc:22:20:71:4f:a4:56:d1:02:
d7:9e:5a:1d:20:06:01:12:96:b5:10:cb:0f:31:c3:20:cb:19:
70:8e:67:97:0a:03:d0:b2:f3:49:93:ae:a2:f2:b8:2a:2a:09:
72:cf:52:75:76:2d:11:23:5d:24:72:85:31:c8:24:48:aa:18:
b1:43:d0:01:95:38:c6:3e:68:0a:a7:61:8b:12:4b:19:6c:22:
73:9b:58:8e:05:cd:a0:fd:b6:45:37:cd:63:52:ab:42:1a:52:
4a:ce:2e:52:0f:eb:f3:8c:f0:e8:7e:d8:e3:00:93:f4:b6:50:
08:9f:aa:1b:05:05:f2:a6:be:eb:66:ab:b6:5a:e3:74:76:98:
44:e8:41:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:43:02 2026 by rpki-client