Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
File: 1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft (raw, json)
Hash identifier: pZ1IVN/O7wLoaf1UoJgZiIXYVfHLNkSXF+qQyFPPp10=
Subject key identifier: 27:F6:CD:39:B0:81:93:7D:40:00:C3:29:5B:4B:4C:BE:9D:33:01:B3
Authority key identifier: FA:A4:01:B6:E9:01:5D:57:3A:96:DE:A2:6B:F1:97:41:50:A3:91:1E
Certificate issuer: /CN=faa401b6e9015d573a96dea26bf1974150a3911e
Certificate serial: 01A0B6F6F8881EBFC453A2ED5D59AC083925
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
Manifest number: D8
Signing time: Sat 19 Sep 2026 00:00:33 +0000
Manifest this update: Sat 19 Sep 2026 00:00:33 +0000
Manifest next update: Sun 20 Sep 2026 00:00:33 +0000
Files and hashes: 1: 1-qQBtukBXVc6lt6ia_GXQVCjkR4.crl (hash: 8vEhAmnmWAZNnVhr772caqzX7olL8dX14pQlHDkpFzU=)
2: EPoE4gsTkP933V3-pgLEo8zsy7w.roa (hash: fekIOkyV2Bo+kFHWE4bvjR3pCE5ezbt15oCa5WLPf5M=)
3: xRZqLOAtBFzziLEfVGzNfn0Lo4c.roa (hash: 2acriZe84g+y2lzcl3s0xdnJ499T9fQJ6oaM3jWJRKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 16:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f6:f8:88:1e:bf:c4:53:a2:ed:5d:59:ac:08:39:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa401b6e9015d573a96dea26bf1974150a3911e
Validity
Not Before: Sep 19 00:00:33 2026 GMT
Not After : Sep 20 00:00:33 2026 GMT
Subject: CN=27f6cd39b081937d4000c3295b4b4cbe9d3301b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:b7:43:a2:11:c5:6e:7c:15:a2:12:91:2e:
51:50:18:de:2b:75:6b:f8:51:fb:85:f5:91:ec:35:
a8:6c:4c:47:1b:99:f9:00:9e:61:6e:c4:76:05:d3:
f8:de:a2:af:d1:b2:43:4b:b4:4b:a6:16:5a:af:ef:
ac:d5:22:7f:2c:52:ca:8c:5e:32:45:ab:77:6c:a2:
d7:43:9a:b6:fb:27:8c:63:4b:03:58:61:d4:03:3c:
c6:dd:36:a6:a3:a5:2a:f3:07:66:ab:b4:cf:b8:77:
3e:e3:67:75:f7:65:12:1b:a6:93:3a:1e:f9:2d:b4:
f8:17:54:16:67:1e:98:0b:e1:78:48:0a:d3:73:6c:
f6:3c:b5:c0:42:cc:74:41:f4:81:7c:1b:25:be:96:
ca:e9:85:f9:0f:be:0d:2e:74:d9:e6:f1:9f:c3:a0:
f7:de:7f:02:b2:17:34:6d:1a:46:8d:c1:9b:d5:c6:
8a:b0:d5:3e:3f:55:82:5c:01:26:2f:5b:e6:54:0b:
d2:cb:04:5d:ee:9a:8a:6b:5f:6d:37:5f:1b:f6:76:
4e:05:c9:c7:41:c9:f7:74:71:cb:b8:bd:59:51:9c:
24:84:d4:ad:65:5b:26:58:04:4c:94:81:52:5f:68:
fa:e8:54:67:95:74:93:f9:3c:48:79:1c:ad:8e:f8:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F6:CD:39:B0:81:93:7D:40:00:C3:29:5B:4B:4C:BE:9D:33:01:B3
X509v3 Authority Key Identifier:
keyid:FA:A4:01:B6:E9:01:5D:57:3A:96:DE:A2:6B:F1:97:41:50:A3:91:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4e:33:1c:af:3b:ec:ca:47:e4:1c:21:59:89:30:d3:21:3b:
b9:2b:fa:4b:34:0a:ff:4f:39:1f:c9:d6:e4:fa:96:47:8e:fb:
2f:6c:c5:42:c9:4c:cb:54:7a:d7:94:58:3e:d2:3d:d0:ea:70:
05:96:77:14:d7:75:36:d0:72:7a:bf:37:7a:d5:ba:13:b5:7a:
fc:4e:7d:1c:0b:8e:46:74:ae:e4:12:55:30:08:11:e2:82:82:
75:6e:38:a9:57:6d:9d:ca:1e:88:40:cd:6b:9f:1a:f0:40:2e:
4d:3c:09:9a:d0:01:7a:9c:87:4b:03:d4:5e:99:08:40:97:e6:
26:65:7b:c3:01:10:a6:d9:ad:09:4d:20:fe:67:c0:48:06:88:
f1:26:85:dc:a5:e0:71:09:4f:ba:8b:1c:92:3f:91:42:34:b4:
65:e2:15:d1:36:7c:99:46:38:39:19:a3:d8:0d:8d:b8:49:1d:
cb:ec:7c:87:50:4b:c6:2e:ad:9c:9b:61:5f:72:de:3a:95:39:
ae:70:e5:30:25:f1:65:e6:bd:73:90:24:24:69:32:01:fe:0e:
10:df:69:5d:fc:00:65:05:be:00:39:94:7f:ba:95:94:ae:84:
9d:34:db:40:8c:bd:36:21:56:2d:35:89:75:f8:29:03:f8:81:
df:3e:da:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:09:46 2026 by rpki-client