Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
File: qMb9tmtdmLoA1OKngcNRTGUuc1s.mft (raw, json)
Hash identifier: ghp8AI7Kp4qjL3a7NtjYgupOZzRzR7gONrEAzTqLO9s=
Subject key identifier: 5C:BF:35:6A:69:A1:B7:95:BA:3D:43:A7:33:7E:3B:B5:D3:F1:12:DC
Authority key identifier: A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
Certificate issuer: /CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Certificate serial: 01A026576629FEB676C868A497353E374ACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
Manifest number: 5E
Signing time: Fri 21 Aug 2026 22:00:57 +0000
Manifest this update: Fri 21 Aug 2026 22:00:57 +0000
Manifest next update: Sat 22 Aug 2026 22:00:57 +0000
Files and hashes: 1: SD6sHxAt1pjK9oQLSlV57TTHq-c.roa (hash: euvAKqoAmy9xNvQKqBSo3raivfnNgWWSIa+OmOt9HVY=)
2: qMb9tmtdmLoA1OKngcNRTGUuc1s.crl (hash: MbbZrPNd0u8UgWZBoJ4uqJyWa/+9y6bu4ISfx9WZJDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:57:66:29:fe:b6:76:c8:68:a4:97:35:3e:37:4a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Validity
Not Before: Aug 21 22:00:57 2026 GMT
Not After : Aug 22 22:00:57 2026 GMT
Subject: CN=5cbf356a69a1b795ba3d43a7337e3bb5d3f112dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:54:5b:62:db:e5:ea:d0:70:41:35:f2:c5:
dd:5b:d4:7a:5d:76:f4:40:22:9e:c1:dc:5d:04:46:
d7:84:3e:38:39:48:41:c0:27:a5:ca:e2:2b:11:67:
26:66:91:bf:c0:5b:0f:ad:02:bc:6a:a2:33:15:52:
a1:80:04:ab:e1:7a:3d:64:ae:ab:65:38:fa:9d:12:
75:26:f5:8f:3e:5b:01:a1:bf:a0:90:22:9b:c5:69:
08:9c:92:01:0d:b0:70:2b:7f:9e:85:cd:66:69:46:
c5:fe:44:f1:9d:f1:2e:a7:2b:df:74:73:03:df:f3:
f1:58:63:89:a3:80:b7:f9:35:ba:b7:99:01:ff:6c:
61:83:f7:fd:75:1e:ed:4e:c5:94:0a:d2:cb:db:15:
f0:73:7b:af:25:d2:e7:05:5f:1c:55:7e:89:1b:29:
83:f6:8d:b8:b7:cd:48:6d:ef:05:c9:a2:ce:6e:52:
00:6d:7f:bb:a9:93:d9:2f:92:e7:5e:0e:28:e9:85:
9a:3c:c4:5f:97:28:fd:36:23:9c:6a:c3:a8:84:b9:
bb:af:c2:d1:b2:8e:a5:49:87:8b:68:f6:40:84:2d:
6f:7a:69:f4:18:0c:06:df:2c:74:42:6d:e4:9d:03:
cd:15:c4:de:25:69:63:c1:83:2e:40:ae:67:82:e1:
d4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BF:35:6A:69:A1:B7:95:BA:3D:43:A7:33:7E:3B:B5:D3:F1:12:DC
X509v3 Authority Key Identifier:
keyid:A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:fb:e3:f0:2a:f8:7b:b0:34:2e:21:47:ab:49:15:32:5f:bb:
1a:ac:93:e8:39:a5:33:e2:3e:5d:94:58:76:ae:b4:ab:34:ab:
ba:2a:6b:05:c2:e2:6f:45:08:4e:70:69:6d:58:5a:35:c7:12:
11:26:de:48:62:88:e3:72:15:06:59:fe:02:bf:04:21:b8:a5:
53:50:14:48:be:78:dd:0f:dc:eb:53:f6:47:e8:9e:1a:f2:9a:
a0:f9:f6:09:d6:bb:9d:3e:b8:82:67:2f:42:ad:3d:b3:c9:eb:
46:0a:8e:f6:e5:48:27:51:4f:89:dd:80:cf:f4:04:3e:36:cc:
a2:01:03:96:2b:7b:1e:23:be:94:d1:2c:df:bd:23:5e:b1:51:
e3:fa:f2:5f:7e:ff:8f:82:af:6c:68:f0:cd:9e:71:07:87:76:
d6:3b:c6:6a:85:f8:0d:da:da:2d:ee:38:cd:c6:95:4a:3f:9d:
2b:25:a7:6a:14:39:0d:f3:b4:d7:e0:36:8d:23:57:5c:b1:58:
e1:9f:81:47:75:97:9b:6e:c2:30:77:28:a0:3c:2a:23:31:52:
1e:d3:de:eb:df:24:b8:e1:f8:76:2d:dc:d8:e7:4f:8d:8b:ea:
77:83:82:4f:dd:77:42:6d:ee:72:cc:db:a0:5e:70:f7:06:fe:
ac:e3:4f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:01:58 2026 by rpki-client