Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: mrQ3IT1OFnUcgmTZTHoh+XkGixiaWVgqwKb9fOwF3Ow=
Subject key identifier: 38:40:1D:45:BA:52:5A:F1:D5:A1:1F:A1:4A:E2:4B:A3:AC:EF:6D:E2
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 019FFD933B4B1C0A2B519D42C845C6B042CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 1A2B
Signing time: Fri 14 Aug 2026 00:01:52 +0000
Manifest this update: Fri 14 Aug 2026 00:01:52 +0000
Manifest next update: Sat 15 Aug 2026 00:01:52 +0000
Files and hashes: 1: MUooZ1Ov9expLMpavng4DbjsbpE.roa (hash: eswDXNZ/AXtbqsm+yzDr7T0oqWysTnskZK6VmBCDemc=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: 8E9UAmh7i4kfBAeD61IQg5oYh4ssaFflwSdoc4uMQNU=)
3: rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa (hash: cw+3g+tlflCYhhvX9gDsDKPmWsCROnLpk0xinhWv2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:93:3b:4b:1c:0a:2b:51:9d:42:c8:45:c6:b0:42:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Aug 14 00:01:52 2026 GMT
Not After : Aug 15 00:01:52 2026 GMT
Subject: CN=38401d45ba525af1d5a11fa14ae24ba3acef6de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:47:21:07:e6:2e:3d:4c:b1:8e:08:86:cd:
80:0b:15:50:13:d4:49:9e:f6:a3:ef:8e:4e:44:c3:
ea:64:84:1a:34:36:40:33:3c:8e:55:ae:77:7e:13:
e4:b8:91:7b:7b:86:a7:c1:f5:49:cd:f4:b3:77:78:
fb:35:b1:da:39:92:71:93:37:53:fd:df:45:35:e8:
f7:2c:79:26:d6:2e:76:52:77:ae:b7:6e:e7:ac:53:
1f:38:48:b9:a4:1f:3d:c3:21:05:c7:54:da:1f:54:
95:b9:2c:c7:d6:8f:64:a1:85:70:52:a7:39:61:71:
a2:14:26:58:28:dc:a7:bf:c7:6b:3b:12:a1:82:d8:
58:73:ad:63:73:c6:e6:c4:82:b5:30:a1:7a:19:f5:
5f:7d:cd:42:2e:51:d6:cf:27:2a:9f:ea:bc:6f:74:
f2:f4:39:1b:52:19:b6:52:dc:d1:b8:90:45:06:48:
9c:38:f0:5e:ae:aa:13:bc:00:4b:66:56:42:d8:8d:
dd:c0:52:d0:f5:f7:d4:1b:fc:23:20:95:b1:f4:1d:
6d:99:e1:f8:24:4f:06:68:eb:88:d8:af:fc:77:43:
44:7e:61:a9:a3:d1:88:ef:3a:cd:9a:5f:e7:88:59:
be:89:13:d3:d4:45:4a:e9:6f:3c:22:b8:ef:58:90:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:40:1D:45:BA:52:5A:F1:D5:A1:1F:A1:4A:E2:4B:A3:AC:EF:6D:E2
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:62:0f:7a:5c:4d:e4:c1:5a:59:09:e8:3b:77:43:ce:de:af:
44:82:a7:5e:52:41:61:f5:50:bf:99:82:75:e8:af:22:ee:69:
8d:d8:2b:ca:2b:34:da:cf:95:fa:50:2e:ae:b0:75:7c:e9:2c:
ec:63:a9:0a:95:b4:e2:d4:d0:77:b0:a7:59:c6:69:6f:f4:73:
a0:69:33:4d:b7:f2:26:25:9d:26:ed:bd:8c:21:6d:4b:c4:2e:
08:94:52:60:e5:c9:1d:e9:72:ec:60:da:41:68:71:a9:cd:ef:
7b:e9:a5:c9:b1:07:67:b6:0c:fd:11:c3:30:9e:12:63:b8:72:
ca:a3:fb:9f:88:62:e5:8b:db:05:03:b5:ba:c5:49:9c:a4:28:
65:db:8a:6a:4a:6e:c9:12:df:bf:0f:d0:2c:52:a1:cf:2d:84:
02:0f:bf:89:ea:6a:ba:55:c3:39:08:fc:f4:7b:13:b5:f5:15:
16:e6:6b:a8:f5:6b:b3:52:dd:ce:d1:0f:27:76:e7:77:53:c8:
c4:ec:06:28:5f:86:4b:bf:57:b7:fc:66:2f:f9:50:c8:24:27:
0f:89:26:2b:86:96:99:a9:c4:cb:84:3d:29:6f:e9:83:7a:27:
e0:c9:58:fc:80:08:77:32:56:a2:ac:eb:57:57:a1:72:82:6e:
31:22:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 09:43:48 2026 by rpki-client