Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
File: qbfYAH71qCdsSk6cQgfQRU_xhVI.mft (raw, json)
Hash identifier: x3Ws13vHjnemdkxvmjUS7eIrfIEOwP9YTBdMcmtVQjw=
Subject key identifier: E2:8A:23:67:65:EF:38:6C:69:92:F3:92:01:8B:5E:B5:86:72:89:00
Authority key identifier: A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52
Certificate issuer: /CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
Certificate serial: 01A0E3637530B906FB7D397A38E267360C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
Manifest number: EF
Signing time: Sun 27 Sep 2026 15:02:21 +0000
Manifest this update: Sun 27 Sep 2026 15:02:21 +0000
Manifest next update: Mon 28 Sep 2026 15:02:21 +0000
Files and hashes: 1: HQkCijMV9_xz1pxlMVTKYL1q5Lc.asa (hash: PxM/0EfV3k77iXpSKK4QS8zmHHDp3CSagYFz+PFhCsg=)
2: q9si30G3Z4SCm8CWscBg7k7qW-o.roa (hash: hQIS9g3ceAT84twsdrq5NBtYX97qQ4HwbcAX1yCehDk=)
3: qbfYAH71qCdsSk6cQgfQRU_xhVI.crl (hash: 3OdE+jrqPBpQz3ZfIAHJ4aY94pnqx1/fEaJAIw7jYYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:63:75:30:b9:06:fb:7d:39:7a:38:e2:67:36:0c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b7d8007ef5a8276c4a4e9c4207d0454ff18552
Validity
Not Before: Sep 27 15:02:21 2026 GMT
Not After : Sep 28 15:02:21 2026 GMT
Subject: CN=e28a236765ef386c6992f392018b5eb586728900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:82:19:65:81:e1:5e:ae:63:75:ce:58:9f:d4:
da:aa:09:4e:9c:dd:bb:ea:aa:cf:fb:b5:ef:86:e3:
45:7a:de:01:ec:69:3f:22:1a:22:03:b2:da:54:0e:
7a:7e:95:0d:d6:14:c2:93:54:2c:1b:79:51:dc:8a:
c5:ce:a2:f7:fb:34:7d:e4:94:69:c6:df:b1:5f:31:
2c:08:b3:61:90:2c:9d:9e:fc:08:96:ab:18:be:58:
e5:15:9f:ff:7a:cc:94:f1:9f:30:ef:da:5f:d5:d6:
2d:e9:d1:11:42:85:c5:ad:77:12:6c:21:c9:98:cb:
6d:98:64:4d:7e:09:05:f9:50:37:f0:a0:2f:fa:4c:
2b:69:45:b2:c3:a8:9d:95:ea:78:54:23:83:42:35:
33:36:e7:1d:c9:fe:ec:d1:df:f7:e9:0e:54:48:6e:
4d:a1:fc:c0:df:c9:14:6a:62:d3:3b:a8:5f:7b:94:
b6:6f:96:04:3a:59:11:3d:80:cd:a3:77:e1:05:6a:
48:ce:29:0f:14:5a:b2:8e:65:75:7e:29:2e:b5:ef:
ca:f0:42:a2:11:9c:ce:80:78:6f:8c:ce:93:0a:85:
22:37:2b:84:4f:bb:50:d8:e7:97:d0:b1:00:e3:11:
13:11:39:2d:61:59:36:e7:c5:b0:08:79:1d:e2:63:
3a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8A:23:67:65:EF:38:6C:69:92:F3:92:01:8B:5E:B5:86:72:89:00
X509v3 Authority Key Identifier:
keyid:A9:B7:D8:00:7E:F5:A8:27:6C:4A:4E:9C:42:07:D0:45:4F:F1:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbfYAH71qCdsSk6cQgfQRU_xhVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/qbfYAH71qCdsSk6cQgfQRU_xhVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:94:99:42:d2:cc:2a:2f:c5:7b:6c:ac:f4:6c:5a:90:bd:9b:
f7:ec:39:ca:65:52:1a:82:c4:5a:da:d7:a0:b7:63:92:3f:e1:
01:b6:0a:bf:b3:cc:c2:18:f3:7d:f0:1b:c8:58:bc:a0:bc:0c:
90:3e:f5:1c:d1:15:7d:4a:0e:57:fa:49:da:1d:43:d4:5a:b4:
5e:85:a5:e5:6b:fa:58:86:2a:36:e7:a1:ce:b9:93:0f:e6:b4:
35:3a:4c:e0:53:d5:bb:57:92:7d:48:f2:1d:a4:32:9d:5e:dc:
22:db:f3:0f:13:c9:2b:de:ba:ff:2d:95:4b:9a:4b:20:ed:c3:
15:23:97:7e:c2:bf:7f:97:4f:ec:87:35:a9:a8:89:3d:ac:ed:
a4:53:e6:f2:f8:bc:6e:be:8a:f5:0d:b1:91:d5:5e:13:d9:b9:
5a:2b:ab:86:10:d2:b0:cd:7d:7d:5f:5e:a7:96:e1:7c:2b:e8:
1b:03:0e:5b:06:6a:33:1e:86:9c:36:65:f7:61:52:c2:2e:42:
1c:3a:19:74:bb:e3:c9:f2:32:52:fc:4d:c0:56:27:96:77:99:
6b:2f:26:7b:9e:cd:b4:4d:27:62:f7:cc:be:22:a6:a3:ce:e7:
5e:e9:fd:95:72:9b:b9:44:cd:e0:f9:9c:cf:ad:e5:e3:4d:12:
58:3d:5e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 22:44:54 2026 by rpki-client