Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
File: Qj5ipcKoD99-poRT7-iin0H8IH0.mft (raw, json)
Hash identifier: eEEG+V/rO2RYigUyjJnoh6d3yLyvWTyEIAePnqKah4w=
Subject key identifier: 1E:95:3C:60:80:E7:D6:14:2B:53:79:DC:AD:97:1F:A2:7F:D3:28:2B
Authority key identifier: 42:3E:62:A5:C2:A8:0F:DF:7E:A6:84:53:EF:E8:A2:9F:41:FC:20:7D
Certificate issuer: /CN=423e62a5c2a80fdf7ea68453efe8a29f41fc207d
Certificate serial: 01A04205463CF34A24B4076D0019BE533540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
Manifest number: 9C
Signing time: Thu 27 Aug 2026 07:00:36 +0000
Manifest this update: Thu 27 Aug 2026 07:00:36 +0000
Manifest next update: Fri 28 Aug 2026 07:00:36 +0000
Files and hashes: 1: Aj4QBwQL2uNoWKXRywa_DkLBxU8.roa (hash: AEwHfAxrbOcjeazAx/K/5vrZbUowV0UzX8EfJJIkJVk=)
2: Qj5ipcKoD99-poRT7-iin0H8IH0.crl (hash: nb/CxQgokigCMqSLlpqHTF1TixDrIXDEIstotZiXD24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:05:46:3c:f3:4a:24:b4:07:6d:00:19:be:53:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423e62a5c2a80fdf7ea68453efe8a29f41fc207d
Validity
Not Before: Aug 27 07:00:36 2026 GMT
Not After : Aug 28 07:00:36 2026 GMT
Subject: CN=1e953c6080e7d6142b5379dcad971fa27fd3282b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:91:a3:25:5e:e3:c6:f2:63:4e:db:a4:1d:90:
8a:39:bd:4b:6a:3f:f6:00:46:bc:13:6b:75:c2:0f:
4c:87:fd:c8:3e:1a:2e:8a:9b:e4:61:cb:5a:96:13:
32:6b:d6:c4:f6:81:ab:f8:48:08:64:90:96:59:1d:
32:45:4a:ae:26:c3:77:d9:75:d7:be:7f:d0:a7:60:
53:5e:ef:2a:31:34:b4:c5:9e:e5:b2:d3:b8:6f:b7:
e5:7a:9e:3e:38:5a:76:82:12:c2:41:c5:d1:f1:96:
f4:1e:da:c7:30:18:c9:98:b5:55:04:3b:e8:78:ec:
38:96:66:10:b3:cf:39:9c:fd:2a:c5:f8:4d:dc:74:
98:d4:20:f2:28:81:06:cd:b4:71:60:a8:da:ba:b9:
16:77:31:d5:69:cc:96:c6:25:d0:f8:ac:1c:c0:65:
3c:d4:6b:52:db:51:c6:ee:57:61:1f:6b:3b:a1:7f:
7a:a4:3d:79:a3:bf:f6:56:64:53:e7:e3:b6:bd:45:
19:41:85:3b:b1:76:10:01:35:48:e7:d5:58:57:f2:
2a:94:43:b3:fe:7a:ba:0a:dd:f2:78:b8:9a:b8:80:
01:fc:ea:0a:b6:6e:68:be:d1:63:ec:79:ce:ad:bf:
ca:46:a0:35:7b:b7:be:80:42:c2:d3:40:6b:e8:19:
23:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:95:3C:60:80:E7:D6:14:2B:53:79:DC:AD:97:1F:A2:7F:D3:28:2B
X509v3 Authority Key Identifier:
keyid:42:3E:62:A5:C2:A8:0F:DF:7E:A6:84:53:EF:E8:A2:9F:41:FC:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ed:34:a1:a3:3b:f3:96:03:4b:25:36:c1:12:1e:a7:af:3e:
bf:5d:1d:e7:02:54:fd:04:3f:79:40:d7:7f:e8:65:f6:c8:4f:
b9:c5:57:6f:32:c9:4c:4c:18:a1:05:29:9b:28:c4:c6:25:76:
0a:6b:12:a3:ef:cd:9e:f2:e5:b4:da:b6:a3:0b:ac:13:74:7d:
e5:02:f1:dd:58:4c:ab:0d:da:34:76:ac:3d:03:52:f9:0c:ca:
64:38:15:b6:d6:68:28:14:1a:e9:8f:31:ca:e3:c5:c2:2f:5e:
0e:a9:29:ac:bb:e8:f8:80:da:33:fd:be:6c:8a:6d:6d:e6:6f:
51:e1:de:5f:7e:24:6c:05:db:49:87:d0:68:33:aa:23:85:78:
b7:ba:62:5c:b6:7d:21:72:b0:73:93:c2:27:d4:fd:3c:6d:6e:
50:27:44:45:42:5c:5a:ae:ae:c8:d3:35:73:6e:1c:36:16:65:
1b:32:6a:1e:43:2f:d5:99:b6:b6:cf:2f:65:c7:07:ff:93:0b:
97:6a:74:c3:a1:13:40:4c:f2:be:f3:aa:99:96:8c:c7:50:ec:
37:93:58:31:99:05:31:f5:92:42:73:7f:74:ec:79:f8:60:1b:
c0:bb:e8:f4:5e:5f:ff:c2:22:e5:74:a8:3d:17:6b:93:91:21:
88:09:26:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:35:45 2026 by rpki-client