Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: cdrfwCN/PjuXtV/zMqE41vuaKDdyNDDiUaLYVu8ONm8=
Subject key identifier: 2F:0F:A2:0D:CE:16:1D:E9:DE:E0:1A:01:49:8D:3B:E0:32:86:CA:4F
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01A11786D19717CD5B0F850F9E14502B5BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 1ABD
Signing time: Wed 07 Oct 2026 18:01:13 +0000
Manifest this update: Wed 07 Oct 2026 18:01:13 +0000
Manifest next update: Thu 08 Oct 2026 18:01:13 +0000
Files and hashes: 1: MUooZ1Ov9expLMpavng4DbjsbpE.roa (hash: eswDXNZ/AXtbqsm+yzDr7T0oqWysTnskZK6VmBCDemc=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: ja1WPq5dJLLupyA+FBxurHrKZjZRfVoIFXBwr2nBBU8=)
3: rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa (hash: cw+3g+tlflCYhhvX9gDsDKPmWsCROnLpk0xinhWv2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:86:d1:97:17:cd:5b:0f:85:0f:9e:14:50:2b:5b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Oct 7 18:01:13 2026 GMT
Not After : Oct 8 18:01:13 2026 GMT
Subject: CN=2f0fa20dce161de9dee01a01498d3be03286ca4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b0:f1:05:11:4f:57:72:50:07:1c:89:33:a1:
dd:f4:a7:a7:a1:f4:a1:31:4c:2f:60:b7:82:5e:dc:
21:da:d1:51:71:30:1b:ba:8d:39:33:a6:c7:66:14:
c2:5d:2e:56:8a:f9:a9:19:7b:6f:42:05:61:7b:a0:
43:25:ac:6f:fb:47:f3:f3:15:37:38:47:9e:cd:3a:
f0:fd:b2:ee:53:7e:a3:cf:3f:34:2e:10:b4:48:18:
27:93:e9:43:f0:10:57:a1:97:78:86:a4:60:70:49:
f5:fc:92:8f:1c:85:ee:4f:f3:c4:06:dd:9d:42:e1:
f1:8b:b8:de:b6:d3:f8:62:bd:ee:c7:6c:bb:75:22:
6d:12:96:9f:44:03:14:ac:31:66:fa:dc:ec:c9:0f:
80:2d:62:c6:12:7a:c9:4c:a8:af:95:5c:01:09:47:
74:8f:c7:b4:c9:d0:06:f5:0c:33:88:80:7e:41:2a:
c2:11:cb:9c:09:af:64:24:ba:33:ef:81:f9:09:be:
f6:8c:07:58:cd:cb:99:e7:4d:05:4f:b7:cc:39:b4:
f5:8d:a2:1a:22:7f:c8:7f:cf:1c:f2:0c:eb:dc:52:
44:dc:ca:c6:1e:af:dc:0d:44:76:a9:88:8b:8d:40:
3c:f3:8f:8a:93:50:7c:83:05:8d:54:30:39:78:a0:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:0F:A2:0D:CE:16:1D:E9:DE:E0:1A:01:49:8D:3B:E0:32:86:CA:4F
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ac:fd:26:32:73:70:59:3f:83:92:a7:d7:71:00:b4:db:a6:
cb:6a:7e:0b:80:c3:4f:0f:c2:2e:b6:22:6a:d0:09:e4:9e:c4:
98:5d:40:15:20:5d:12:ee:01:81:f5:b4:06:b2:03:62:e1:a4:
88:d4:71:3a:62:b7:a8:ee:ed:f6:ca:e9:aa:60:d5:34:d3:05:
e1:0b:c5:0b:c7:92:56:0e:73:02:bf:15:3d:33:7d:eb:24:70:
63:78:2c:1f:ce:70:d2:b1:32:77:12:e4:24:ca:ce:9d:84:2e:
0b:54:a8:36:e9:5a:45:91:7f:9e:0f:a9:00:51:82:a4:a2:d8:
87:7b:1f:ad:0f:b4:73:29:84:f2:6a:e8:83:04:5f:b1:5b:4b:
95:43:a1:c7:c3:37:c0:b6:64:3d:14:1e:b8:9f:e2:3a:cd:e7:
bc:8d:3d:48:01:b4:be:18:2f:d6:fe:1b:cc:9d:60:4b:ff:f9:
0c:e7:12:44:a7:ec:60:e1:64:cc:63:76:96:aa:38:1c:e8:aa:
a8:3d:1a:e9:90:a5:6a:44:e5:ab:55:37:f4:05:08:ee:b6:23:
44:91:7e:7b:26:17:02:c1:38:14:ff:f1:93:44:76:e3:c5:65:
b8:06:b3:21:9d:91:aa:4c:4a:98:1c:98:5d:1f:e8:96:8f:be:
8b:47:ef:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:56:23 2026 by rpki-client