Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: LhkXxGtEtC9D5pcDKwyUcXC3R4TZB2QOTTvKer00ykk=
Subject key identifier: F9:3C:51:C4:DB:74:9C:B4:0D:35:CD:D7:2B:0B:1D:22:B9:8B:F6:3D
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 01A08EA099EE3EE65F9D5EAB01955010F4BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 1A4C
Signing time: Fri 11 Sep 2026 04:01:24 +0000
Manifest this update: Fri 11 Sep 2026 04:01:24 +0000
Manifest next update: Sat 12 Sep 2026 04:01:24 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: R4/Z9hP/NSmxBb8guG3ehrFYd73WGattUQLWcxQUGKQ=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:a0:99:ee:3e:e6:5f:9d:5e:ab:01:95:50:10:f4:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Sep 11 04:01:24 2026 GMT
Not After : Sep 12 04:01:24 2026 GMT
Subject: CN=f93c51c4db749cb40d35cdd72b0b1d22b98bf63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:dc:5e:b1:ae:c7:dd:8e:54:08:d6:ea:19:
70:89:4a:c5:fe:04:3c:eb:76:ad:78:61:8a:81:ba:
4b:dd:ed:39:e6:59:63:7f:a2:1e:5e:6c:42:e0:a7:
02:a9:ad:3d:98:35:35:a5:c3:c4:23:49:5d:19:64:
ca:d1:24:d5:c0:6a:f1:af:4f:c3:32:4e:04:75:38:
d3:56:be:9a:34:70:fa:f3:7c:83:ff:de:cc:30:d2:
46:ac:5f:6b:e3:f5:9a:33:5e:f3:f1:b6:9e:81:ba:
ea:fb:62:d2:18:9c:5d:5e:95:84:9b:bc:f0:f1:fc:
c2:f7:c7:48:0c:1c:15:40:d6:57:72:54:9e:24:2c:
8e:56:ab:c1:1d:98:5c:ea:fe:58:12:a2:d2:c3:24:
ae:4f:13:01:da:b9:55:9d:5c:f4:8c:21:9e:09:95:
81:7b:ec:6b:2b:28:d0:0f:47:c8:ba:91:e3:9f:c1:
20:f1:c0:2b:0f:73:47:f8:ae:76:96:63:4a:8c:75:
51:80:b2:a2:06:2c:64:c1:e5:88:ed:82:77:cb:56:
6e:8a:90:22:51:d9:ac:fb:8b:85:4c:af:57:a4:4f:
4d:45:e2:d7:cc:d8:e3:a8:48:47:3d:64:8c:12:0d:
f0:20:32:81:87:a2:96:0f:63:df:93:1f:f7:ad:9c:
2d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:51:C4:DB:74:9C:B4:0D:35:CD:D7:2B:0B:1D:22:B9:8B:F6:3D
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:2a:0b:f8:df:ab:30:e7:3f:7b:4d:85:6a:dc:d9:4d:b5:7e:
58:ea:93:1e:63:11:06:53:bd:63:08:bd:cc:6b:95:56:5f:2b:
1a:55:d4:3c:dc:71:27:35:72:d6:70:de:31:4f:76:f2:8a:49:
08:1e:8c:42:ec:80:ff:19:6f:b8:30:71:bb:b6:90:93:de:3b:
a6:8b:e5:7c:26:d4:69:c5:3f:3a:86:96:5a:9e:18:bb:cd:a3:
b6:59:ce:31:9e:72:01:a1:9a:d0:6e:60:1e:b5:3e:13:ba:50:
62:40:b3:45:a9:43:7f:04:9b:0c:0e:19:c9:dc:b9:f1:ba:d9:
02:32:59:8e:39:f7:39:d8:eb:50:76:cd:14:77:0f:e6:34:d9:
5a:d4:46:cd:57:0a:75:3e:43:c7:0e:e1:16:13:b0:b3:e8:b0:
8c:5d:3d:b7:a0:7e:c5:e5:90:67:dc:e1:09:12:da:6f:d8:21:
db:6a:1b:e7:b2:88:f7:24:0d:d0:14:52:be:c5:b1:e8:5d:e5:
2d:eb:9f:c1:17:be:a2:ad:99:d7:76:7b:d2:43:3d:e4:87:0a:
19:ab:c6:97:da:e9:e6:96:24:81:a6:07:1d:8c:fe:b9:ce:ce:
ee:62:c2:c6:87:74:fe:1d:6e:37:50:87:5f:b3:f3:97:46:9c:
76:c8:7f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:40:08 2026 by rpki-client