Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
File: qryfZKSO6lUh4en6qBB5jwiVRrY.mft (raw, json)
Hash identifier: TNSq7tkeQdiC7Qx1li0nVdUeEK4AyevxxqYZJNU4rkg=
Subject key identifier: 34:F9:35:3D:A1:A2:9F:18:F0:BA:56:C0:C6:C9:18:45:73:B7:34:48
Authority key identifier: AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
Certificate issuer: /CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Certificate serial: 01A0F9EAAA48318AC67B2C7F9C909D75E347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
Manifest number: 01DC
Signing time: Fri 02 Oct 2026 00:01:40 +0000
Manifest this update: Fri 02 Oct 2026 00:01:40 +0000
Manifest next update: Sat 03 Oct 2026 00:01:40 +0000
Files and hashes: 1: k4UjBMhNQbPGGmHnVoiBgJBmSf0.roa (hash: VIQo5uhjjTbtUBi5ti8/TlUnmadL+OWUvZa3u0tyfm0=)
2: qryfZKSO6lUh4en6qBB5jwiVRrY.crl (hash: QogoBJ8XWpTTI87Q47k+I+wdIKamGIy/tCjqL03MR30=)
3: zVSrTTqebRmSnsneDFxGS3_YpGc.asa (hash: fmf7CqwekntqfwrIibO6rpKxFjgw/RTj5EEUnDmjI/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:ea:aa:48:31:8a:c6:7b:2c:7f:9c:90:9d:75:e3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aabc9f64a48eea5521e1e9faa810798f089546b6
Validity
Not Before: Oct 2 00:01:40 2026 GMT
Not After : Oct 3 00:01:40 2026 GMT
Subject: CN=34f9353da1a29f18f0ba56c0c6c9184573b73448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:35:14:f3:a2:69:cc:c5:64:59:be:e8:fc:
a9:96:c2:b7:df:b4:50:4a:55:68:67:2c:5b:d3:ce:
ad:64:91:43:81:6b:ff:35:b0:7d:13:6c:ae:6a:58:
48:56:cb:b9:c0:4f:3d:6e:6c:0b:01:05:c3:05:41:
85:d7:a7:a5:4e:a3:97:a8:6c:34:46:fe:44:bc:af:
62:70:73:a9:df:a3:5e:68:98:c2:7b:a5:b2:8f:ea:
b9:78:18:26:a5:8d:a4:0e:da:7c:d9:00:43:09:1d:
b7:ff:e5:47:91:45:15:b3:b3:4c:e0:10:44:6c:4b:
9f:49:ad:0d:c0:bd:9f:18:37:20:0f:b0:01:8a:b3:
c2:a9:d7:ed:70:d9:db:f2:9d:c9:74:e8:32:0f:8c:
66:e0:66:2b:16:3f:02:51:1f:87:7d:00:09:72:a6:
b9:c9:16:f4:74:0b:69:de:63:ff:3a:17:47:22:ab:
40:78:86:c0:d5:45:89:ae:bb:bf:7d:ac:69:97:71:
0a:1b:0e:67:5b:85:9f:f5:ae:66:d9:09:a7:c4:bf:
8e:e1:90:24:9a:fb:94:30:1b:19:74:19:a2:b2:b3:
19:45:a1:6e:b3:53:0f:a3:ac:d0:be:dc:d2:5a:c0:
02:fd:42:7b:da:6d:16:74:75:75:dc:19:ab:94:16:
15:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F9:35:3D:A1:A2:9F:18:F0:BA:56:C0:C6:C9:18:45:73:B7:34:48
X509v3 Authority Key Identifier:
keyid:AA:BC:9F:64:A4:8E:EA:55:21:E1:E9:FA:A8:10:79:8F:08:95:46:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qryfZKSO6lUh4en6qBB5jwiVRrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a83f65-11d2-4cf5-8087-474e4f48d6b8/1/qryfZKSO6lUh4en6qBB5jwiVRrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:85:38:48:79:24:aa:2b:78:cd:27:d6:80:3e:84:c8:d8:8e:
f1:98:77:2b:11:31:4c:c5:7e:f6:bd:fa:ab:f9:9c:85:6d:92:
40:0b:8a:f0:6d:6c:10:94:c4:6c:69:2f:d5:bb:f0:f4:b0:39:
50:85:fc:10:06:f1:ad:c3:ee:f8:c4:97:e3:e8:d9:86:e6:ce:
4e:84:85:5d:dc:2f:f1:f0:e1:65:a3:e2:fe:9e:56:f3:a6:17:
db:f3:3d:04:c4:ff:21:fb:e0:1e:5e:45:52:77:c0:94:bb:e3:
64:e8:93:c6:49:33:18:62:28:c6:2f:97:36:67:5a:37:87:97:
9b:34:b5:94:25:f4:bc:c7:f1:82:40:30:55:68:09:cc:d5:b7:
90:74:4f:ef:82:b0:45:a5:b3:12:2b:0d:09:ca:67:63:82:78:
72:28:ca:9f:18:07:d2:8c:bf:cc:05:4a:33:94:0e:dd:14:59:
ba:72:6e:0a:05:8f:54:9f:5f:67:ad:7a:db:af:aa:01:24:1c:
78:eb:13:46:85:10:7f:6b:f2:42:cf:2f:bf:86:41:ba:99:bb:
f0:9e:1f:20:a1:4a:9d:8d:97:d0:33:b2:a3:21:53:a5:60:94:
d7:0f:31:c6:31:4c:99:2f:00:50:58:e4:96:bd:be:c2:fc:5e:
3a:aa:d9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 04:52:29 2026 by rpki-client