Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
File: h_Qa4HeeN978abKlsPerj9QM0-c.mft (raw, json)
Hash identifier: xtFl8b45JTi9DRlJp8qgvA1LOn/tPI3+sJmTQQCfKGE=
Subject key identifier: B9:65:C0:BF:17:35:F1:9B:1B:5A:3B:E6:0F:29:D0:99:94:23:48:DD
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 01A12EB405C1C8E6D1C3EF85487047DFF19B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
Manifest number: 1AA1
Signing time: Mon 12 Oct 2026 06:01:52 +0000
Manifest this update: Mon 12 Oct 2026 06:01:52 +0000
Manifest next update: Tue 13 Oct 2026 06:01:52 +0000
Files and hashes: 1: 9qN4udPUuYowf7HliZ_TGQM3Bms.roa (hash: 5MTkrEKeRcydaztC2Vfhe58BESExP2wuV5gzeR4YOSY=)
2: Dtj1m4cKe3GqX6bpwYtVYnUDpiQ.roa (hash: mEvlh065fRebiKkRrPdsUXHfTWLTcYZ3LKAKyBAKzLI=)
3: h_Qa4HeeN978abKlsPerj9QM0-c.crl (hash: isrSRvDKhkPn3gRylX+wZDI3OxDzkfYWJXkrJ7ykMtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:b4:05:c1:c8:e6:d1:c3:ef:85:48:70:47:df:f1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Oct 12 06:01:52 2026 GMT
Not After : Oct 13 06:01:52 2026 GMT
Subject: CN=b965c0bf1735f19b1b5a3be60f29d099942348dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:62:69:fe:ec:ef:7a:a4:97:da:16:10:a4:06:
ab:53:93:5f:a9:f9:25:6f:31:aa:ab:56:20:77:9a:
fd:9e:7c:77:44:3b:46:22:89:20:76:78:e4:c4:99:
83:41:92:43:d4:17:9a:bd:32:fb:39:77:32:09:28:
b7:dd:f7:e0:5c:12:c1:7a:01:ee:94:35:61:7c:df:
cb:aa:76:4d:30:4e:5c:77:7d:29:60:07:0d:7b:a6:
e7:ba:07:4e:ca:63:08:2b:43:65:6f:bf:a2:4a:10:
be:c6:c0:80:f3:4e:98:cd:c7:09:24:9e:77:60:e6:
c5:8b:3d:ec:a3:5c:91:cd:cc:7a:b3:1e:12:74:b5:
d3:af:59:85:c8:cd:9f:e9:ae:9b:78:f5:7a:b2:c1:
5c:9b:ef:85:5e:c2:da:a8:b5:74:85:d6:a3:e0:0f:
9e:4c:81:fd:11:4e:d0:80:27:28:4a:4c:50:77:9a:
d4:49:8a:08:c1:84:3d:a2:17:8c:67:c1:40:f0:84:
67:44:55:e6:c2:15:63:ae:a2:98:1a:be:42:eb:37:
97:1c:02:5a:4d:92:fc:0c:96:a5:3e:78:86:90:1a:
f7:f4:06:89:ce:81:66:55:22:ef:c9:da:22:ac:6a:
17:4f:9e:c7:3a:1a:12:f6:c6:c0:5b:e9:80:15:c2:
74:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:65:C0:BF:17:35:F1:9B:1B:5A:3B:E6:0F:29:D0:99:94:23:48:DD
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:09:d6:ef:11:69:31:17:0f:8b:be:22:44:19:06:94:58:23:
b9:f5:89:f3:9b:29:4e:59:c0:87:9f:98:ed:fb:b2:38:ce:e0:
24:6c:ea:d7:0e:0c:e9:fe:06:2b:a4:a8:67:b9:6d:13:2a:e0:
dd:8d:5d:9f:77:9c:e1:e6:8e:7f:d9:00:f3:f7:51:60:18:c4:
e5:99:ed:88:33:99:6d:7f:d0:80:84:54:33:bd:d3:26:ca:32:
0a:bf:c1:e1:a9:4f:e9:5b:be:c9:3d:8c:cf:43:05:12:3a:8e:
85:d6:c7:6e:01:4c:ce:0d:84:8d:43:18:5c:a8:1e:cd:20:2d:
73:a5:3f:d4:b3:7f:6f:c9:80:5d:e8:07:13:47:4e:91:8a:40:
d4:75:ff:b6:02:cf:97:2d:0f:bc:e3:bb:20:66:47:18:de:6f:
9d:03:8a:f1:b5:72:5b:8e:d3:56:9e:57:f7:75:60:ae:39:95:
11:bf:65:c6:36:6f:b2:49:4f:95:70:e4:a8:a0:84:93:7b:55:
28:81:54:19:33:e0:d7:84:ce:a9:08:b7:64:a9:67:24:9f:db:
e8:df:87:3c:73:ec:0c:3c:5f:7c:19:9b:d5:c8:ba:45:bd:f6:
fb:51:58:c2:ac:86:0d:e4:28:02:c5:4a:83:b4:c3:86:2e:23:
42:14:75:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:14:23 2026 by rpki-client