Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
File: qap8qvmnyjedaW0a3VfA7dBVP_k.mft (raw, json)
Hash identifier: nXttas9wndryiiQ/m1ZoJgDLZuWPz9IwX52Bcgt0/qE=
Subject key identifier: 9A:90:C9:16:2B:C4:E4:9E:F8:65:41:53:67:8A:3C:CA:49:1D:28:95
Authority key identifier: A9:AA:7C:AA:F9:A7:CA:37:9D:69:6D:1A:DD:57:C0:ED:D0:55:3F:F9
Certificate issuer: /CN=a9aa7caaf9a7ca379d696d1add57c0edd0553ff9
Certificate serial: 01A17C295B3A4D12C49B9F31BB05332CBADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
Manifest number: 022A
Signing time: Tue 27 Oct 2026 07:00:47 +0000
Manifest this update: Tue 27 Oct 2026 07:00:47 +0000
Manifest next update: Wed 28 Oct 2026 07:00:47 +0000
Files and hashes: 1: GCbuRd6csJQHzpB8lvnWZve0UIs.roa (hash: auu2xsjWmwNZtuETF+y7lmmBrOPk6zT22UOZl16juME=)
2: qap8qvmnyjedaW0a3VfA7dBVP_k.crl (hash: zztnJ1fnPZGSSnFTQ8AwPvJzEo69Ba1V/dKwnbCHyqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:5b:3a:4d:12:c4:9b:9f:31:bb:05:33:2c:ba:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9aa7caaf9a7ca379d696d1add57c0edd0553ff9
Validity
Not Before: Oct 27 07:00:47 2026 GMT
Not After : Oct 28 07:00:47 2026 GMT
Subject: CN=9a90c9162bc4e49ef8654153678a3cca491d2895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:05:66:76:84:a1:df:d8:54:0c:5b:b9:8b:07:
63:45:3e:2c:6e:a4:45:13:df:e1:93:ae:e7:1b:53:
e3:83:49:0b:98:d6:f2:71:2d:a6:b6:0c:b9:82:f3:
b4:59:f5:a9:4c:c6:a2:3d:dd:05:dc:03:c0:f4:d6:
2f:00:68:6b:ec:4e:13:0d:3c:eb:09:97:c5:0f:92:
6f:4b:4a:de:e8:08:14:1e:5c:21:a1:8c:0f:b2:65:
36:d4:d9:c5:71:64:cd:51:4a:75:66:4c:cf:4c:50:
78:e7:88:b9:c9:a5:1e:d1:58:00:7a:f2:cb:4c:ce:
11:5f:52:a7:e6:71:70:bb:74:1d:1a:2b:0f:f9:db:
ad:99:77:87:09:9c:72:b2:09:11:e3:d4:32:e2:7c:
22:8e:5d:e3:0b:25:4a:ee:d0:c8:c5:de:79:e2:24:
b1:46:57:bb:2a:fc:14:a3:fd:d3:fd:5f:e5:29:9e:
31:d9:82:b7:87:b1:51:40:75:f3:9b:3e:da:22:c3:
ea:71:ef:25:53:cf:32:b4:33:f5:6f:81:a2:79:9e:
f1:2b:8a:1f:bb:49:b3:2b:79:80:82:0c:da:70:0c:
93:81:1d:6a:b2:c1:a4:56:3b:28:73:d6:61:e6:2d:
bf:24:e6:c1:34:41:1f:04:fa:0e:cb:a8:87:8e:75:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:90:C9:16:2B:C4:E4:9E:F8:65:41:53:67:8A:3C:CA:49:1D:28:95
X509v3 Authority Key Identifier:
keyid:A9:AA:7C:AA:F9:A7:CA:37:9D:69:6D:1A:DD:57:C0:ED:D0:55:3F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:62:35:77:63:d7:85:68:7b:ca:ac:ae:fd:01:cb:45:5a:b5:
e2:02:d2:8c:7b:0a:86:28:ef:39:fb:94:6a:03:97:ed:29:53:
9c:15:8c:a7:65:cc:ce:56:19:86:fb:a5:f8:db:a2:f0:b7:97:
51:28:f4:30:c9:c3:1b:ab:bf:14:04:b4:63:5a:a4:e6:84:fa:
51:e9:39:e4:7c:e5:95:6c:41:b8:74:47:1d:da:4c:34:19:a8:
fc:88:be:79:b3:8f:c8:2d:ca:07:93:1e:63:28:cd:45:ff:9a:
2e:75:00:4c:be:84:2b:5e:7f:56:93:0f:c8:07:45:15:c0:1c:
7d:90:29:50:e9:ea:7e:cf:7d:d8:4a:5f:0b:3c:db:8e:0f:cc:
ae:03:71:f3:16:21:db:95:9d:8c:95:af:0b:b6:d0:c0:34:b3:
ed:27:b9:dc:67:e0:db:c2:0d:f7:d4:1b:4f:e8:04:84:f7:66:
77:08:a0:22:c2:da:d9:02:b7:41:85:8d:56:5c:8d:af:7e:fa:
79:00:54:f0:7c:8b:f9:09:b3:f7:4c:95:06:b8:29:6e:ab:fc:
6b:62:57:12:56:1a:31:9a:ba:e4:2f:ba:60:6c:51:02:10:38:
8b:fb:da:1d:67:1f:9a:ab:40:8d:7b:f5:40:2a:9f:64:81:27:
24:99:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:44:37 2026 by rpki-client