Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/qi11RxgdeKCHj3w0bjAdoOEt46k.mft
File: qi11RxgdeKCHj3w0bjAdoOEt46k.mft (raw, json)
Hash identifier: tH6Ozims90rVuzmwdD4tfcPQlwR1Of9RBrsRA2f+zjI=
Subject key identifier: CA:22:06:A1:8F:8B:0E:BF:B8:FB:31:A7:A0:D9:2E:2E:6E:6B:EF:C7
Authority key identifier: AA:2D:75:47:18:1D:78:A0:87:8F:7C:34:6E:30:1D:A0:E1:2D:E3:A9
Certificate issuer: /CN=aa2d7547181d78a0878f7c346e301da0e12de3a9
Certificate serial: 01A14D9915131CFA93F76F3424DD4BB1F4D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qi11RxgdeKCHj3w0bjAdoOEt46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/qi11RxgdeKCHj3w0bjAdoOEt46k.mft
Manifest number: 0126
Signing time: Sun 18 Oct 2026 06:00:40 +0000
Manifest this update: Sun 18 Oct 2026 06:00:40 +0000
Manifest next update: Mon 19 Oct 2026 06:00:40 +0000
Files and hashes: 1: bv8Jy2Ggkv_unKNYC2Wm2j0_4Ls.roa (hash: iDhvNAHl3H07Bvw/93MOVys8cig991UhSd4f5ZgdRrs=)
2: qi11RxgdeKCHj3w0bjAdoOEt46k.crl (hash: sFjUpV6HTSJQkm04wI9aAgB6oUxpu8IDhLbEr/G1iI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/qi11RxgdeKCHj3w0bjAdoOEt46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/qi11RxgdeKCHj3w0bjAdoOEt46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qi11RxgdeKCHj3w0bjAdoOEt46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:99:15:13:1c:fa:93:f7:6f:34:24:dd:4b:b1:f4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2d7547181d78a0878f7c346e301da0e12de3a9
Validity
Not Before: Oct 18 06:00:40 2026 GMT
Not After : Oct 19 06:00:40 2026 GMT
Subject: CN=ca2206a18f8b0ebfb8fb31a7a0d92e2e6e6befc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3a:0e:16:13:8b:5b:19:6f:68:2e:9f:0f:09:
fe:c4:1f:39:50:03:c5:56:12:96:b1:b1:3b:41:ff:
8c:e9:b7:68:b7:61:98:34:28:35:c0:82:41:ff:2e:
dc:c0:8c:c4:0e:e6:7b:36:7f:51:fb:92:15:65:31:
02:55:f4:02:5c:4a:02:60:0c:6a:fc:e7:ee:ed:73:
66:64:3b:31:5b:49:ab:c0:24:c0:9b:45:9e:34:8e:
4f:da:f8:d9:b8:44:c4:9a:93:92:43:fa:8a:b3:ea:
c9:44:93:70:1c:26:af:02:24:63:52:1d:38:35:f4:
c4:e4:f6:8d:6a:1a:17:69:24:a3:48:d0:db:60:55:
ca:00:ce:58:a2:1c:bc:d7:fa:f0:70:dc:ae:e1:b7:
fe:9a:7d:a3:bc:d7:a4:35:79:9d:cd:50:53:3d:bb:
ab:1d:e0:f7:70:61:1b:2d:b4:a2:69:8f:21:e0:f7:
11:36:bc:4e:01:31:3c:15:ab:2a:ad:80:1c:71:6c:
54:cb:fa:f6:e1:2a:bb:e3:3a:eb:36:e2:0c:d8:42:
70:77:fb:77:3a:3b:3a:0e:ad:73:1c:1d:0b:9d:92:
59:5f:39:f8:5d:33:4c:18:e5:de:0c:22:07:4f:9f:
98:87:40:ad:78:20:df:b5:d9:80:d0:ba:e0:5b:8f:
22:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:22:06:A1:8F:8B:0E:BF:B8:FB:31:A7:A0:D9:2E:2E:6E:6B:EF:C7
X509v3 Authority Key Identifier:
keyid:AA:2D:75:47:18:1D:78:A0:87:8F:7C:34:6E:30:1D:A0:E1:2D:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qi11RxgdeKCHj3w0bjAdoOEt46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/qi11RxgdeKCHj3w0bjAdoOEt46k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/qi11RxgdeKCHj3w0bjAdoOEt46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:da:42:24:0d:82:31:20:b9:ec:1b:98:24:9f:8c:6c:1b:48:
52:33:b1:62:65:7a:29:d2:42:45:3e:ba:8f:2e:80:cd:ab:67:
80:21:58:f5:67:be:13:f3:fe:43:35:d3:bc:dd:d0:51:60:b4:
64:f1:b2:1a:53:02:ac:f8:68:01:35:4e:ca:4b:f9:ad:57:45:
a9:26:68:d6:ef:10:d1:d3:30:e5:94:44:59:2c:9c:13:9d:07:
28:13:bb:4b:a6:86:25:76:e4:b1:06:0a:4e:e1:94:ae:a5:35:
2a:eb:68:ea:48:6a:25:72:62:81:28:ea:b9:99:6b:11:1e:6a:
95:43:68:61:44:5b:92:d1:e3:06:52:d8:c0:b8:3c:b0:b2:a6:
e3:d8:3d:cb:92:a3:86:d9:db:5c:5f:27:cd:d5:c0:ea:c4:12:
da:11:58:83:d0:e8:69:05:f8:e5:29:7d:ba:14:40:c0:81:eb:
97:2d:4f:8c:8f:ac:62:df:f1:f7:eb:69:a8:44:a0:dd:87:e5:
f1:30:3c:e7:8b:b0:ec:7f:6a:c0:4d:5f:14:c6:a8:aa:ea:aa:
3c:0d:f1:05:1b:ee:51:20:db:6f:fb:88:8b:7d:d9:48:ee:48:
eb:05:53:8a:c7:77:25:4c:8d:f4:41:a9:be:74:42:c7:06:f8:
41:65:4c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 16:29:37 2026 by rpki-client