Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: 110znPMmhThTLf4ssSlNpdhCzIM1qQnS0SmXpiooKeE=
Subject key identifier: CC:D8:BE:23:DA:FA:CC:E1:67:D9:B7:9F:72:8F:6A:0A:8A:DF:12:DE
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 01A06E70CCF201DCAA135D0067757C9B016E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 16AA
Signing time: Fri 04 Sep 2026 22:01:21 +0000
Manifest this update: Fri 04 Sep 2026 22:01:21 +0000
Manifest next update: Sat 05 Sep 2026 22:01:21 +0000
Files and hashes: 1: 13KLyP6gZAyfsLYlKYob4QTrBOY.roa (hash: UC903c/BhGuwxFubD7WJePOBlwZE5lZusD52hX3+scI=)
2: JDIQvJOOgOU1198oLwbvPRw_rhI.roa (hash: ULh5noQt/vxcOhnB+/7fGlpNTGaGPtsJ4TS11neT8M4=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: TTx/8ptl3KixWWp9gvYXBqKXgwFUot4FSExhLMXouyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:cc:f2:01:dc:aa:13:5d:00:67:75:7c:9b:01:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Sep 4 22:01:21 2026 GMT
Not After : Sep 5 22:01:21 2026 GMT
Subject: CN=ccd8be23dafacce167d9b79f728f6a0a8adf12de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:af:5a:ce:07:04:df:44:20:39:fc:97:de:88:
dc:42:ce:df:e5:e8:94:eb:3c:e4:3a:51:81:56:46:
74:97:2b:63:34:e5:c8:d8:67:2d:73:00:f5:63:21:
b4:ea:44:81:85:a6:04:d3:9c:c5:50:63:68:64:25:
99:9b:b6:2e:85:a5:87:2d:98:bc:53:9e:7c:1d:54:
e5:47:1e:3a:84:a0:af:98:13:72:d5:16:70:59:0f:
db:31:8a:e5:a6:5d:11:32:3a:17:d7:48:98:60:ce:
52:01:4c:fd:b5:9c:13:80:80:cf:31:f6:6d:b4:32:
a1:19:ec:ee:79:85:b8:cf:c8:f5:0a:f1:36:08:68:
38:b1:c8:90:df:bd:b5:8f:d3:a8:5e:06:1e:a3:e4:
7f:8e:b0:fe:ec:f7:2d:d8:26:6c:76:19:53:ca:14:
35:d2:0f:b1:8e:2b:a2:2f:6f:37:10:ce:e6:a7:b5:
cf:ba:ae:16:f3:5d:a7:d1:43:56:53:7d:c1:00:65:
bc:50:74:eb:da:9a:61:55:3b:32:7a:88:ff:ba:fc:
08:a4:e6:ab:02:00:2a:08:b4:c2:8e:3a:6f:c4:1c:
57:56:14:4c:db:7c:2d:43:70:11:e2:e4:73:c0:14:
00:7b:0b:2c:55:93:e2:18:fe:f7:53:f9:7d:e4:ba:
b8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D8:BE:23:DA:FA:CC:E1:67:D9:B7:9F:72:8F:6A:0A:8A:DF:12:DE
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6b:43:ec:b4:8f:db:18:41:6f:fa:b5:bf:a6:5f:59:a3:d8:
9a:b9:9b:a4:52:8b:37:81:ea:52:3d:8d:23:b2:50:2e:29:29:
42:2a:31:a4:4f:10:5e:d1:a9:9b:ff:c0:ca:1d:ea:2f:de:bb:
65:72:07:af:f5:0f:74:39:c5:67:c4:e6:36:78:ed:9a:83:51:
dd:39:ec:e7:f1:e1:8e:99:29:ad:82:db:22:c3:a0:c5:32:c1:
c3:82:6c:74:53:0a:a4:02:6d:4f:d6:ec:5b:61:5f:4f:0f:dc:
e2:8a:40:b7:f3:a7:35:dd:f1:6f:66:a6:fc:fa:21:16:3d:da:
31:b4:23:18:c5:9e:99:5e:51:d9:68:7a:44:87:3d:b5:43:85:
c7:4b:6f:30:dc:ba:23:23:fb:36:aa:1a:1c:45:9e:c7:1a:07:
b4:a1:3a:67:67:21:50:43:4d:d4:59:ee:45:d5:84:dc:0a:2d:
ab:a0:00:48:a7:71:d4:04:5e:da:cd:f3:17:a5:ec:58:35:6e:
a9:1d:82:5e:6c:76:90:84:4f:25:12:ed:98:ac:8f:be:7a:be:
ad:52:d5:04:a7:c1:17:85:15:3f:e3:80:5c:67:d7:b7:b8:c2:
bf:7b:47:ef:53:1a:66:70:c3:c1:29:02:ab:2f:dc:bc:7e:df:
d6:4f:5b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:28 2026 by rpki-client