Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
File: qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft (raw, json)
Hash identifier: rg7AwDqylsQBnffwVm8oaHdMkUWlzQ7X1BYPlNFwN38=
Subject key identifier: 23:F2:03:22:BF:37:A4:70:B5:C7:63:56:37:46:B8:4E:94:2B:78:E0
Authority key identifier: A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
Certificate issuer: /CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Certificate serial: 01A08C7B971B01CC27CC36E419344CFC1103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 18:01:44 +0000
Manifest this update: Thu 10 Sep 2026 18:01:44 +0000
Manifest next update: Fri 11 Sep 2026 18:01:44 +0000
Files and hashes: 1: U4sjdHd-gX-XqAKv1_i_s77A5sw.roa (hash: R8Ebp8RZ69ktsKpPiMp0a78DZiZYGn/b1MPxbWALvI0=)
2: qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl (hash: BEONlguDFpnR6RBuDt87wHkCSQ02WbrkY2Xwu/fjxHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:97:1b:01:cc:27:cc:36:e4:19:34:4c:fc:11:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a977820ea61b11b5b3859ab4a4bc7ec0a7b7388c
Validity
Not Before: Sep 10 18:01:44 2026 GMT
Not After : Sep 11 18:01:44 2026 GMT
Subject: CN=23f20322bf37a470b5c763563746b84e942b78e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:93:2b:9d:cf:da:cf:56:10:95:43:48:eb:
04:3d:6b:89:42:c1:82:7b:1e:5d:50:8e:ab:67:42:
20:57:12:29:59:45:11:cc:7c:94:58:9d:86:9a:bf:
99:46:f8:0e:49:64:4d:3b:b1:45:2b:e0:f8:dd:63:
e1:7e:43:e1:a3:57:01:db:ac:c5:f6:28:31:f7:f4:
d7:a7:73:5b:c6:e3:a8:66:12:78:fd:79:71:be:58:
16:ac:91:a7:a7:09:38:75:e8:ee:45:67:c5:94:6c:
ec:19:2e:68:cf:00:8d:7d:50:b1:ba:a1:e4:fd:c3:
68:0f:00:3c:da:5a:14:89:7b:a1:bc:47:60:9c:eb:
31:5d:11:ea:ef:3e:9e:f4:ad:00:88:3b:6a:f6:97:
44:3f:16:74:86:89:60:7f:e0:d1:c9:74:5e:47:de:
a1:97:e0:6d:9a:ab:6c:4a:4a:0b:08:e8:79:dc:e4:
5f:f8:f9:58:0c:76:1f:d4:d7:57:c2:40:4b:38:65:
3c:02:98:0f:c5:e2:98:33:f2:3a:40:30:78:6f:9a:
fb:00:f1:7e:15:91:41:65:af:5d:52:90:b4:31:61:
f8:26:40:b3:62:13:82:af:6f:a4:fb:5a:7d:66:a4:
44:a9:62:23:91:a7:6e:d2:72:20:18:5d:8c:e5:7b:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F2:03:22:BF:37:A4:70:B5:C7:63:56:37:46:B8:4E:94:2B:78:E0
X509v3 Authority Key Identifier:
keyid:A9:77:82:0E:A6:1B:11:B5:B3:85:9A:B4:A4:BC:7E:C0:A7:B7:38:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qXeCDqYbEbWzhZq0pLx-wKe3OIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/af8e9d-6c65-41fd-a755-b18d76b012e7/1/qXeCDqYbEbWzhZq0pLx-wKe3OIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:73:3f:8f:07:4a:0e:87:89:66:49:fb:2e:2b:ba:35:31:79:
7a:e7:fe:e9:16:ea:79:65:37:01:be:28:01:c9:d5:66:a2:6d:
f6:0e:aa:03:67:05:af:f4:90:12:81:9a:d7:cc:4b:1d:a5:03:
8d:f4:09:f2:d1:a9:01:eb:41:a2:2d:2c:8c:21:1d:23:9c:b8:
84:67:53:31:b1:b1:39:c4:bc:83:05:f9:78:c9:01:0a:4c:e6:
4d:f4:d0:99:e0:86:75:e5:95:57:6b:80:c1:4c:7b:d1:b0:3c:
33:73:42:ae:fa:30:67:15:e7:95:eb:21:89:18:45:f8:6b:20:
5d:21:19:7d:f2:7e:11:4b:3a:dc:f9:7c:1f:6c:74:fe:69:07:
3d:a1:00:50:cc:fc:9e:3b:44:ac:42:05:cc:f7:50:9d:e7:60:
ae:7a:f3:a5:53:2d:49:2b:a8:fd:76:e5:4d:e9:45:7e:02:d0:
c0:c0:4c:0e:00:3d:40:60:58:55:1b:00:21:c9:53:2c:d4:5e:
32:3b:e5:17:74:d6:11:c7:6d:16:74:89:73:50:cb:5a:1f:1e:
14:40:6b:ec:88:91:4c:0b:96:7e:9d:6c:a9:9d:79:a7:d5:98:
4b:7c:cf:d6:4d:f2:52:17:fb:6a:46:2b:19:b3:09:52:1b:90:
80:6b:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:32:41 2026 by rpki-client