Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json)
Hash identifier: FmjbEo93qgu+w/x4ClFlaLRxorD4ZrSX06rKkpXftwk=
Subject key identifier: 6C:FC:71:32:10:C6:34:49:45:A6:24:9F:35:B0:A5:A6:0B:9F:E8:AA
Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930
Certificate serial: 01A0268EBEBE3BA0119AAA03BED840C32D8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
Manifest number: 1A17
Signing time: Fri 21 Aug 2026 23:01:24 +0000
Manifest this update: Fri 21 Aug 2026 23:01:24 +0000
Manifest next update: Sat 22 Aug 2026 23:01:24 +0000
Files and hashes: 1: BvmjN1Ei-RdZ5XU4wyESLuA_jUA.roa (hash: ELi50YRUe877yWFfXU+gVz/inLW8fniMz5ZEj37kHhM=)
2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: HIjNYefCzAh63tSNErtA+eeD8z/XhuuzunfIz2Hg/C4=)
3: yxoyiq6u244VKW72oii9uUiHB5w.roa (hash: jfOnDIC+Hn7PQuMw02CvW0H07qmgRK5GNbtZKtIIp2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 19:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:8e:be:be:3b:a0:11:9a:aa:03:be:d8:40:c3:2d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930
Validity
Not Before: Aug 21 23:01:24 2026 GMT
Not After : Aug 22 23:01:24 2026 GMT
Subject: CN=6cfc713210c6344945a6249f35b0a5a60b9fe8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:88:bb:3d:8a:9f:3e:67:da:13:70:90:10:
24:56:ed:8b:85:ef:dc:ec:60:45:46:c1:a5:c9:5c:
d2:1a:80:f8:93:d5:50:e4:28:a7:65:f1:cb:c1:dd:
2b:1c:40:ae:8c:d4:72:a8:47:d4:e0:85:0b:fb:20:
29:93:67:4b:2d:46:ab:d5:1e:c5:78:e6:f2:85:aa:
1c:66:4e:e7:f1:2d:00:17:63:b7:16:16:1b:32:53:
d9:4d:f9:54:19:6e:28:8b:89:16:66:9d:76:fd:6f:
6d:59:b9:c6:e0:29:69:c3:b0:b7:7b:13:fb:dd:1c:
10:92:3f:24:46:2c:e9:ce:01:32:89:17:9d:8e:36:
d8:1c:d8:a4:0d:25:0a:a2:a2:0e:fe:a3:5b:a3:21:
97:f2:62:1b:75:0e:c8:0d:81:68:67:f4:f8:db:6e:
23:c2:86:49:a1:95:f9:91:4b:a4:53:ce:05:fa:89:
9c:62:65:38:f2:ab:ef:02:5d:8b:8c:3a:ce:d9:81:
b4:8b:ac:98:31:88:91:17:28:b3:75:09:06:90:88:
5d:16:e9:b1:ff:d5:8e:98:01:fd:4d:aa:b6:4f:07:
af:41:e1:fe:61:58:3f:b5:ed:75:b7:37:a7:17:ed:
9e:cc:ee:dd:44:02:b0:ab:a7:81:ac:0e:b3:06:df:
2a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:FC:71:32:10:C6:34:49:45:A6:24:9F:35:B0:A5:A6:0B:9F:E8:AA
X509v3 Authority Key Identifier:
keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:68:78:37:5c:5e:9f:24:50:1c:2b:2c:68:35:b6:3a:30:20:
f1:03:7d:6f:54:cc:dd:f6:fc:8a:83:05:fe:59:2e:04:17:bd:
9f:39:88:2e:d7:8f:7d:75:4a:a6:7d:8d:c9:c5:8b:12:ca:9a:
da:ec:af:db:56:d0:65:e3:a6:83:fa:e4:ff:2f:19:72:6d:b0:
e8:61:ab:63:58:76:e8:99:61:69:62:73:99:38:80:9e:1d:2b:
a5:f0:1c:4e:90:6f:31:e9:51:9e:d3:3d:71:3f:15:9a:9e:00:
ba:20:0d:b4:5e:78:95:8e:b7:86:8c:2a:e5:f6:78:77:e8:30:
e7:02:81:d3:56:26:40:88:be:d1:36:4a:74:4b:b6:3e:65:ea:
16:be:af:1e:fc:86:e9:e7:2e:ca:b8:e1:ef:c4:4e:cb:91:b1:
64:b2:16:f6:5d:04:66:24:52:32:81:bf:a5:aa:4b:bf:ef:af:
97:27:ef:75:fe:11:93:37:ce:86:25:7a:74:41:ac:e5:fb:a0:
63:5b:2e:c0:8d:0a:41:cc:5a:10:5d:24:95:0e:70:fb:ce:6c:
55:a2:e9:97:54:93:73:31:9e:f8:c8:de:70:bb:d0:6e:05:ce:
90:35:97:93:8c:a2:e8:a4:3b:f5:65:a9:74:1f:b0:27:ed:d6:
e4:10:f0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 05:52:51 2026 by rpki-client