Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: R6CVGIHuXvi2mJ5KCOQJnUzODniRU/KOLiU07gk6Vg4=
Subject key identifier: 83:CE:F3:26:7B:2B:D9:C9:60:B1:94:92:B1:20:18:8E:22:B2:10:D6
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 01A08A8D3FFC525E799A0D453633ABBC29EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0BDE
Signing time: Thu 10 Sep 2026 09:01:47 +0000
Manifest this update: Thu 10 Sep 2026 09:01:47 +0000
Manifest next update: Fri 11 Sep 2026 09:01:47 +0000
Files and hashes: 1: PYhdlsUvc6cMikLsj2CZu44GozA.roa (hash: TWRSUVS4O6iaQs3ZX5NWtc+VI0J6VDPVPjsAdIWPgM0=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: Jg2igw/8NIIGS73biA4D+B3fPbuGU+WF2jH1rLF3HZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:3f:fc:52:5e:79:9a:0d:45:36:33:ab:bc:29:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Sep 10 09:01:47 2026 GMT
Not After : Sep 11 09:01:47 2026 GMT
Subject: CN=83cef3267b2bd9c960b19492b120188e22b210d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ad:39:4e:88:04:74:0a:24:b2:47:a3:dd:83:
a6:07:92:f5:98:42:fe:19:05:0e:ec:7b:c4:44:d7:
32:e3:56:87:aa:0b:34:f0:bd:5c:b5:21:61:c6:6c:
02:37:29:d5:d4:25:20:46:f7:00:95:e8:f2:00:8a:
39:db:fd:5e:5d:59:a1:b8:82:25:9a:5b:1e:43:f6:
6e:0f:20:43:21:e9:ca:d5:5f:6f:2c:a2:1d:ce:37:
b1:e9:b3:3c:7c:e2:e3:a9:c8:02:09:28:6b:31:52:
87:28:05:d2:f7:b1:d0:2a:fc:b0:20:a1:bb:91:5c:
0f:22:37:d0:5a:07:5a:91:fc:e3:aa:5b:fc:db:a6:
a8:c0:58:31:78:4f:24:02:43:f0:1e:80:a5:b9:9e:
8f:2c:1e:14:f3:35:06:e0:f6:8a:4b:98:56:95:02:
8c:4c:8e:5f:c6:a0:03:b8:bb:1c:20:ca:2c:6a:93:
a4:62:e0:b3:86:e6:cb:98:03:1a:f5:88:78:30:64:
9e:f6:63:11:31:9c:b3:8e:b8:c8:03:6a:05:d7:bd:
08:6f:13:23:36:00:d7:d8:31:6a:64:93:42:78:4a:
ad:81:3b:81:ac:50:ac:5e:7a:1c:5b:cf:d1:68:30:
24:55:da:0e:8c:f9:28:af:c7:e6:84:86:e8:28:cb:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:CE:F3:26:7B:2B:D9:C9:60:B1:94:92:B1:20:18:8E:22:B2:10:D6
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0c:2d:53:38:66:1f:20:60:6a:ee:8f:be:4c:08:d6:77:e2:
b4:3a:32:2e:18:2d:12:89:72:b8:ff:fe:d3:73:19:89:a9:3f:
65:d9:23:4a:88:6c:c4:19:22:89:2f:25:5a:33:bf:cb:a6:2c:
56:04:db:84:91:99:38:02:18:06:54:b4:4c:6f:3b:26:e1:b7:
cf:6b:c1:f8:91:98:bd:f3:4c:af:0f:67:d8:38:ca:4d:e4:60:
9d:cd:c7:ef:fc:71:de:5c:54:59:c6:7d:63:81:95:c7:f8:a7:
06:da:1b:82:04:ab:6d:d0:59:ad:1b:f2:cd:7a:02:6f:62:af:
5f:76:2b:d8:b6:50:db:1d:07:7e:be:a7:3a:6b:99:14:7e:42:
ce:be:b3:e8:54:01:ba:19:73:79:8b:20:62:98:9f:a9:04:27:
14:bd:ee:2e:c6:a1:23:78:c6:79:ea:c6:80:70:f7:af:a9:c3:
aa:7d:b3:b9:a4:09:f0:2a:04:9c:71:bb:de:10:93:71:62:c9:
98:d5:56:1d:03:e5:39:d6:6a:bc:1b:44:88:b7:bc:b9:41:7f:
e3:33:84:c5:ea:ff:74:c7:80:28:be:cb:3d:20:ed:06:d6:91:
be:73:9b:2a:82:aa:a8:26:2e:2f:f3:12:7d:94:8a:8f:b1:f9:
65:75:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:44 2026 by rpki-client