Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
File: qMb9tmtdmLoA1OKngcNRTGUuc1s.mft (raw, json)
Hash identifier: OaD1n8ME+Qk9yI0u4ihz4gJn8ZIo7U9HCH5jLjspk3Y=
Subject key identifier: D5:C6:01:6A:90:1F:74:26:34:34:02:5D:24:A7:C2:85:9A:C6:EE:96
Authority key identifier: A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
Certificate issuer: /CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Certificate serial: 01A12165C6ECC65ED99FF525FE5DBFF162CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
Manifest number: E0
Signing time: Fri 09 Oct 2026 16:01:20 +0000
Manifest this update: Fri 09 Oct 2026 16:01:20 +0000
Manifest next update: Sat 10 Oct 2026 16:01:20 +0000
Files and hashes: 1: SD6sHxAt1pjK9oQLSlV57TTHq-c.roa (hash: euvAKqoAmy9xNvQKqBSo3raivfnNgWWSIa+OmOt9HVY=)
2: qMb9tmtdmLoA1OKngcNRTGUuc1s.crl (hash: /WdBjMDm7l2BCCv7mOLvv5O6qA7EzEXScx7ucC+ARBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:65:c6:ec:c6:5e:d9:9f:f5:25:fe:5d:bf:f1:62:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6fdb66b5d98ba00d4e2a781c3514c652e735b
Validity
Not Before: Oct 9 16:01:20 2026 GMT
Not After : Oct 10 16:01:20 2026 GMT
Subject: CN=d5c6016a901f74263434025d24a7c2859ac6ee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ab:b1:1d:cf:d8:5e:ff:2c:af:a8:39:5e:3a:
92:e9:79:83:75:88:57:9a:d8:6e:c1:43:ed:ac:67:
e9:db:53:80:e3:a9:2a:04:ed:46:1e:0c:21:47:b4:
81:1e:d7:0e:0b:79:8f:ae:58:07:06:eb:68:51:55:
92:23:4c:e3:ef:28:7e:47:a9:4a:4a:63:74:44:ca:
9a:a8:ff:91:65:e6:2f:e2:50:71:3f:00:1c:4f:e1:
59:58:14:22:4c:d5:74:1a:b5:30:70:d1:66:19:29:
2c:f2:67:38:3e:62:ab:a8:df:13:81:15:90:b0:e2:
19:a3:22:d2:a4:87:45:07:cb:90:19:52:66:49:07:
fb:75:fd:d9:2f:60:8f:dd:cf:88:59:fa:ff:33:97:
3c:6d:8f:a4:3a:4a:c6:10:da:36:63:35:36:b8:07:
cc:ac:05:e1:ac:9d:69:92:69:e1:2a:0a:5d:50:4c:
96:21:15:22:57:2f:60:ce:2e:c1:92:ee:b9:d1:ba:
91:d5:ad:d9:ee:2e:37:5d:69:b7:98:48:1b:ff:f8:
e0:58:d0:dc:be:52:fd:0a:1a:4f:47:86:e9:8a:02:
01:eb:2f:53:8e:b5:65:dc:7f:03:a8:74:cc:dd:a3:
83:d9:28:27:4c:a5:b5:45:4d:29:46:6d:36:6c:17:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C6:01:6A:90:1F:74:26:34:34:02:5D:24:A7:C2:85:9A:C6:EE:96
X509v3 Authority Key Identifier:
keyid:A8:C6:FD:B6:6B:5D:98:BA:00:D4:E2:A7:81:C3:51:4C:65:2E:73:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMb9tmtdmLoA1OKngcNRTGUuc1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/d865cb-c675-4786-924d-4382845d5d0e/1/qMb9tmtdmLoA1OKngcNRTGUuc1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3c:9a:42:e4:bf:f1:40:68:5c:37:b5:df:83:15:7e:ac:dc:
df:f1:44:3f:eb:90:05:02:a3:24:65:ca:d7:3f:a3:4a:0c:42:
36:b6:19:2b:e8:53:c1:79:20:10:72:6c:43:18:ce:9c:ec:be:
8e:db:cc:e0:70:f3:e1:72:f3:17:0b:44:27:05:7f:c1:0b:48:
40:c0:9c:f8:d5:1c:ba:24:7e:4c:46:d4:00:33:dd:58:7c:50:
bc:05:1e:7b:ef:90:56:8d:da:81:1f:04:30:84:dc:2c:28:d6:
cd:4e:36:db:e9:91:3d:ed:4b:ef:f8:63:f5:06:90:8c:07:9f:
d7:6c:74:99:d5:c8:80:41:5e:f1:05:0c:60:33:a6:cb:cd:a1:
54:16:8d:31:2a:eb:4a:40:f3:15:45:53:f7:bb:d1:3d:c8:ac:
5a:b2:8c:93:61:d8:aa:c3:44:09:f4:dd:0b:84:3a:38:f7:99:
ef:65:8e:fb:99:ff:28:93:13:f1:fa:f3:73:a2:6d:f1:36:a3:
e3:da:ef:dc:61:71:17:58:3b:5e:5d:41:e7:90:63:40:3c:a4:
c8:28:af:c3:5c:c5:bf:97:d8:c2:eb:1b:fd:fd:25:d7:e4:af:
90:1f:06:8b:65:3f:65:22:2a:47:da:40:6f:fc:39:2c:c2:43:
f6:23:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:04:50 2026 by rpki-client