Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: OvmJtBkIgmKYcB0ersz6zHn4xsvs+Fp5lEopnFu/ar0=
Subject key identifier: 7B:18:20:6C:F8:08:99:FB:1F:AB:DB:1F:36:DF:EF:20:69:8F:63:F3
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 01A08D570716C98EC1E1E4CA1EEFD1C5D963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 19DE
Signing time: Thu 10 Sep 2026 22:01:25 +0000
Manifest this update: Thu 10 Sep 2026 22:01:25 +0000
Manifest next update: Fri 11 Sep 2026 22:01:25 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: 6QbTG4IIhsReUcaQm/q7ZBkqnE+YDYZt3fnNdV4MNeM=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:57:07:16:c9:8e:c1:e1:e4:ca:1e:ef:d1:c5:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Sep 10 22:01:25 2026 GMT
Not After : Sep 11 22:01:25 2026 GMT
Subject: CN=7b18206cf80899fb1fabdb1f36dfef20698f63f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:da:6c:6f:c5:63:20:f0:b7:79:dc:ff:8d:f1:
56:c0:47:fa:02:0e:b8:4f:3d:77:b5:3b:7a:79:b7:
b6:da:2f:e0:e3:c8:95:60:7e:02:d8:42:00:80:9e:
52:f3:3c:31:db:22:fc:bf:47:cc:b8:a2:54:aa:f6:
c2:35:aa:b9:de:6e:67:ef:03:49:ff:ad:97:7e:18:
be:27:d9:b8:bb:ce:56:bb:73:ed:d6:89:a3:5a:c4:
2a:58:cf:1d:a1:ad:82:6c:ee:6d:38:c6:1c:09:6d:
f7:36:c2:df:31:91:9e:61:fb:bb:20:26:86:7b:7f:
43:45:46:c9:2a:cb:18:ba:d3:ca:dc:96:1a:97:1d:
98:30:ca:1c:d9:aa:2d:f8:82:71:dd:75:8e:62:21:
2a:ab:78:75:99:ff:06:d1:a8:85:03:2a:60:91:ff:
79:08:b2:a6:a1:ab:93:d9:dd:8b:8d:e5:b0:96:9e:
34:a0:3c:55:2f:e0:60:97:d2:97:86:50:2c:cd:42:
56:42:fc:a6:d1:a8:86:51:9d:70:a0:59:15:5d:41:
76:04:71:a8:fa:22:3b:1c:83:a4:19:f2:3c:c6:f1:
79:4e:be:9c:ce:1b:ad:8f:2c:f0:28:62:a5:85:c6:
f7:e6:e2:c4:0b:22:24:0c:07:15:c4:6a:f2:ea:9f:
83:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:18:20:6C:F8:08:99:FB:1F:AB:DB:1F:36:DF:EF:20:69:8F:63:F3
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c8:45:2d:84:4b:19:f3:aa:a3:d4:1c:fe:6c:03:d7:ff:d3:
0c:c8:b8:c6:52:da:0a:56:d8:02:11:4b:e5:52:ba:7f:c9:bd:
e7:58:3b:2c:47:41:8c:2c:51:1d:57:08:f3:52:1a:be:a3:e7:
25:ff:80:bc:db:a2:2d:8f:0c:2a:fa:f0:4b:96:90:ed:f3:a0:
73:fa:88:75:9d:06:64:72:fb:cd:dc:fa:d4:73:64:1d:ce:60:
19:69:87:23:91:38:cb:46:2d:bd:58:99:d1:a3:55:29:dd:b7:
22:dd:31:ca:79:15:2f:a3:08:63:75:20:8b:cd:f1:49:a1:37:
a2:84:95:bc:d7:e3:e9:22:1f:08:cc:8d:c8:f5:c4:3f:6d:a1:
a5:8e:b1:d5:7f:35:ea:40:a2:b6:46:0b:24:b6:74:99:2b:72:
6d:d2:93:75:39:71:fe:ca:bd:3e:12:30:dc:7b:9a:88:04:52:
98:9c:84:3e:8c:7c:b7:da:61:69:b5:fa:4d:fa:e0:e2:ef:8f:
f7:60:e9:20:a4:81:13:df:ab:2b:8d:f2:a4:a6:17:b4:35:a8:
fb:58:ad:7c:98:eb:70:ae:2a:21:29:16:ec:4e:56:a4:d7:e3:
a7:78:57:1e:f9:86:1b:20:22:8a:05:3a:d1:29:a1:40:df:28:
e1:b0:c5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:27:54 2026 by rpki-client