Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
File: qnthN_WvPCLIWhkI1AspQe4sBvQ.mft (raw, json)
Hash identifier: GyqYeIUvca1hk8Wx6PYwHf97ZVNC37hG87iAJrTwj9Q=
Subject key identifier: AF:69:F8:1E:20:E5:EC:BC:D7:DD:81:C4:60:AC:1A:3D:E6:47:61:5C
Authority key identifier: AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
Certificate issuer: /CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Certificate serial: 01A08AC3A9A23866929C4BD074E07B7D8F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
Manifest number: 0D91
Signing time: Thu 10 Sep 2026 10:01:13 +0000
Manifest this update: Thu 10 Sep 2026 10:01:13 +0000
Manifest next update: Fri 11 Sep 2026 10:01:13 +0000
Files and hashes: 1: EvhdgJldzrTyPRhTwu7_R0oOsRk.roa (hash: jp9wh8X1nWQb/EKe4T8unvTtIOObggs6fceKYXSVd0M=)
2: KeD4L6y8pe2jawoO0v_Iw05d7f0.roa (hash: MlHed28QjL1er2kf3lP9+8MfBm3P54VkdbgLne7YLtA=)
3: qnthN_WvPCLIWhkI1AspQe4sBvQ.crl (hash: 2WO4yg1YXSrOZhvwQbLkJlr/30KyWUEPa4C10oWl9m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:a9:a2:38:66:92:9c:4b:d0:74:e0:7b:7d:8f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7b6137f5af3c22c85a1908d40b2941ee2c06f4
Validity
Not Before: Sep 10 10:01:13 2026 GMT
Not After : Sep 11 10:01:13 2026 GMT
Subject: CN=af69f81e20e5ecbcd7dd81c460ac1a3de647615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6e:d3:e5:f3:86:ce:aa:09:ce:fb:7c:45:40:
92:85:6a:4f:e3:80:6e:44:72:de:e7:33:47:9a:30:
f7:a9:e9:88:1f:e8:de:95:75:ac:aa:f4:64:e8:9b:
fc:b4:71:5f:60:78:13:f6:09:19:6c:cc:7f:63:7f:
00:96:07:df:59:5e:4d:f7:03:9b:9e:c6:62:db:0f:
f3:10:1f:25:ff:f0:8b:fa:b2:da:95:f5:7d:a2:2d:
17:80:86:1a:33:04:e4:d1:43:1d:00:33:f8:fc:0e:
cc:65:86:23:0d:23:98:5d:62:ee:e3:0d:7c:4f:74:
15:1e:1e:ed:ae:e9:a9:60:5a:8a:c8:16:49:80:2f:
30:09:29:d1:19:6b:df:c1:c7:de:37:3b:67:bf:ca:
94:df:1a:2e:6a:55:91:23:3e:b8:1c:45:4e:da:10:
db:0e:01:3d:74:42:41:db:30:b2:b0:6a:d7:75:64:
a6:22:23:07:cf:1c:96:29:a9:5a:45:6c:98:d7:24:
6f:c7:a2:98:16:7a:57:c4:5f:03:af:5e:65:30:54:
cf:1b:20:c2:73:7a:f2:cb:ff:79:f9:fa:e4:39:c8:
96:98:e3:40:42:85:79:ad:4e:bb:45:e7:11:fe:ec:
63:2c:52:32:82:44:88:10:cc:e2:62:2f:6a:3a:db:
09:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:69:F8:1E:20:E5:EC:BC:D7:DD:81:C4:60:AC:1A:3D:E6:47:61:5C
X509v3 Authority Key Identifier:
keyid:AA:7B:61:37:F5:AF:3C:22:C8:5A:19:08:D4:0B:29:41:EE:2C:06:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnthN_WvPCLIWhkI1AspQe4sBvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5e06fa-37f9-4a1c-811a-d6a305cbf46c/1/qnthN_WvPCLIWhkI1AspQe4sBvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:bc:27:f0:70:cb:ed:fd:24:1d:d7:a1:23:8d:2d:e9:92:9e:
15:6c:6a:5d:46:95:13:b4:c0:83:e1:e5:5b:5c:a5:d5:3f:56:
34:7b:99:f0:63:e7:83:ab:43:96:f0:86:37:25:6e:6d:01:37:
18:aa:46:d1:93:41:f8:a2:86:5e:09:56:b2:c0:58:68:89:86:
10:36:85:36:e4:a1:1a:81:da:c1:d1:79:d0:fb:64:02:86:8d:
2a:64:ff:10:4b:cd:62:2a:e3:ae:85:7e:f2:89:20:8b:e9:4f:
f2:e8:fe:2c:ef:cb:4a:54:c3:79:a3:12:bf:55:43:c2:24:d7:
21:32:3b:af:d9:2b:4d:50:b4:a6:7e:08:39:cf:3e:51:10:91:
72:4d:d6:d8:a3:e2:af:27:ad:d7:55:5d:10:ad:b8:ff:94:31:
a7:a1:65:5d:95:f2:58:a8:35:f7:8c:8e:39:4d:e6:40:6c:1f:
47:90:e3:2e:73:84:a3:b6:4f:c2:c7:e9:ea:fe:09:6c:90:01:
02:01:fd:cb:9f:03:eb:ef:08:34:e0:19:25:1f:85:ad:e5:88:
e1:5a:23:25:f4:fd:55:a6:d6:0a:b0:e2:56:05:29:26:21:2c:
3a:cc:88:e9:cd:95:b5:07:af:2c:84:51:d3:29:d4:e6:a7:77:
03:8e:1d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:04:21 2026 by rpki-client