Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
File: qap8qvmnyjedaW0a3VfA7dBVP_k.mft (raw, json)
Hash identifier: 91ra05nkyhCGEd5mLUjwmqABNkB1OiQ4dF0u0Ot07EE=
Subject key identifier: 1F:61:07:FC:40:22:C4:AD:17:FB:91:36:39:31:A2:0F:A3:21:08:CC
Authority key identifier: A9:AA:7C:AA:F9:A7:CA:37:9D:69:6D:1A:DD:57:C0:ED:D0:55:3F:F9
Certificate issuer: /CN=a9aa7caaf9a7ca379d696d1add57c0edd0553ff9
Certificate serial: 01A08CB1EA70213AB9ED0364AA3AF6E97153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
Manifest number: 01AE
Signing time: Thu 10 Sep 2026 19:01:04 +0000
Manifest this update: Thu 10 Sep 2026 19:01:04 +0000
Manifest next update: Fri 11 Sep 2026 19:01:04 +0000
Files and hashes: 1: GCbuRd6csJQHzpB8lvnWZve0UIs.roa (hash: auu2xsjWmwNZtuETF+y7lmmBrOPk6zT22UOZl16juME=)
2: qap8qvmnyjedaW0a3VfA7dBVP_k.crl (hash: /HOiUKmIwOsN4PbJ/EHygCPzLRB+z0Oh4056SRePBfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:ea:70:21:3a:b9:ed:03:64:aa:3a:f6:e9:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9aa7caaf9a7ca379d696d1add57c0edd0553ff9
Validity
Not Before: Sep 10 19:01:04 2026 GMT
Not After : Sep 11 19:01:04 2026 GMT
Subject: CN=1f6107fc4022c4ad17fb91363931a20fa32108cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:48:ff:f9:26:27:df:75:1d:03:c8:8c:9d:5d:
fd:ec:0f:f4:63:f5:dc:e9:c1:ff:c7:bf:35:16:f8:
0e:78:c6:a8:ee:5a:5b:2a:f3:6f:30:58:cc:ba:f0:
26:b4:09:d2:11:b4:ef:cc:5f:b5:43:2f:8e:27:09:
8c:b4:3d:a0:e9:ed:4a:50:33:92:6d:e4:91:46:78:
37:02:26:d2:7a:29:5e:16:60:43:2b:4c:39:62:71:
d1:50:9b:6e:cb:63:78:de:cc:96:34:bf:99:cb:07:
b3:6c:26:59:29:09:1a:dd:6d:58:5c:d6:49:20:5c:
a1:f7:b8:c0:11:f4:31:f1:e2:00:9b:35:57:54:63:
24:c5:b4:64:3e:c2:e3:30:fe:4e:8b:30:e6:c0:16:
90:e0:ee:02:42:e2:c3:fe:0f:6d:83:4c:64:c2:23:
86:87:b2:47:58:9e:36:61:6e:88:5d:7c:8f:5c:8c:
52:36:7b:fb:bf:d5:a2:13:a5:0b:e0:6c:1f:b1:d2:
fe:8d:1a:b2:4b:dd:a1:d4:76:ab:dd:ff:97:af:4b:
b9:35:f9:d2:4f:1d:2b:26:43:c6:42:e1:60:2f:4e:
e4:97:5e:e1:76:64:63:81:33:a3:5c:12:a8:ae:77:
46:95:0a:a5:33:57:42:e6:e8:59:65:9a:3d:ff:84:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:61:07:FC:40:22:C4:AD:17:FB:91:36:39:31:A2:0F:A3:21:08:CC
X509v3 Authority Key Identifier:
keyid:A9:AA:7C:AA:F9:A7:CA:37:9D:69:6D:1A:DD:57:C0:ED:D0:55:3F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qap8qvmnyjedaW0a3VfA7dBVP_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9b7340-7bbd-4c87-a38d-6038cac0693b/1/qap8qvmnyjedaW0a3VfA7dBVP_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f0:2f:9c:75:33:a1:d7:df:e1:a0:66:7c:af:5f:57:7e:30:
0e:9e:21:cb:48:81:ef:f5:4e:0d:be:b7:33:2f:40:34:df:aa:
b2:e9:a3:bc:d3:05:ae:17:d4:e8:96:a9:60:3d:7e:5c:06:e9:
53:53:98:0d:d3:0d:e4:79:02:09:d8:fc:ba:a0:ea:a0:aa:a4:
b4:fc:09:6b:e5:0f:e2:e9:92:79:29:e6:a8:99:37:e2:07:4e:
a0:24:14:4b:3b:b9:a2:40:14:1f:5c:ab:cb:9a:89:98:6b:2f:
d6:4b:76:d9:30:27:cc:22:3c:a1:fb:26:68:52:57:33:51:62:
80:33:44:f8:8f:e3:d5:36:11:3a:91:6d:68:10:da:cd:60:61:
cf:d1:c3:62:72:f3:b9:78:db:c7:a3:05:77:d6:75:c0:28:12:
47:c2:e7:30:a6:f2:16:57:de:cc:cb:ff:b8:03:3f:a4:a8:a9:
9e:03:37:b3:d4:57:7c:36:3b:d9:58:ef:b7:f2:cc:cd:d1:8e:
30:83:75:c5:63:35:2b:b6:25:3c:ae:f3:d2:81:68:db:d3:c0:
cb:37:3d:66:32:90:43:3a:a3:37:8a:83:f5:15:b6:b6:31:5e:
21:94:bf:49:3f:1b:ea:7c:8f:4a:d1:37:6f:93:57:8d:8c:6d:
18:ce:d2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:22:10 2026 by rpki-client