Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: 7P2kmP/+bLHatx292MvYMkZa0RnxIjHFKBzXYAJF7i8=
Subject key identifier: 0F:31:F3:9D:73:29:57:C4:1A:97:2D:9B:E9:77:C4:BF:99:8E:34:E2
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 01A11ED1988360E430A6FCAEE309B9D95C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 1A97
Signing time: Fri 09 Oct 2026 04:00:14 +0000
Manifest this update: Fri 09 Oct 2026 04:00:14 +0000
Manifest next update: Sat 10 Oct 2026 04:00:14 +0000
Files and hashes: 1: 0ECEewsHbpx9zU1JX2DIun14wc4.roa (hash: 3xUQ5J+uKoXf2K0tx/gaMVdbcJCYxizBzW4f58o5Lj4=)
2: nwtdhhsA3tvO15UW5ngy7VolYDA.roa (hash: jJBsatbPceBiOY7mvKtU7D/vsxD74iAJJTBCJFC0Hqs=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: NClERPyTbNyD23k77VE3HmTJ4JDONU+Es7oJGaaeoB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 04:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1e:d1:98:83:60:e4:30:a6:fc:ae:e3:09:b9:d9:5c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Oct 9 04:00:14 2026 GMT
Not After : Oct 10 04:00:14 2026 GMT
Subject: CN=0f31f39d732957c41a972d9be977c4bf998e34e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:79:1a:08:49:da:83:44:a3:24:81:b8:83:
39:c5:61:31:2f:d8:04:72:92:a2:fd:7e:f1:e5:af:
fa:a3:19:a9:a0:d9:a8:71:8b:a9:4f:6c:c4:8b:92:
b6:ba:00:41:a5:f0:a8:51:5f:22:df:6a:5d:75:f2:
08:b8:79:ab:06:0f:db:2e:f5:40:b5:60:71:a9:28:
8f:cd:ca:04:92:3f:7c:47:0c:0a:c6:d3:45:12:16:
17:cb:88:43:49:8c:4b:33:a0:6b:06:e6:1f:e7:f1:
ff:da:a0:27:45:01:63:89:da:cc:0f:3e:1a:b6:4d:
49:1d:a9:13:1d:ef:c3:92:1e:de:09:5e:c1:20:32:
91:99:e1:6a:62:ad:34:38:09:69:d6:4d:e0:89:18:
7d:c5:72:52:89:7f:45:ee:00:f9:f2:f2:6a:69:6a:
3b:07:16:90:a4:5d:23:7c:9b:07:0f:96:e6:50:9e:
5f:ca:cc:e7:65:2a:8d:80:71:14:ad:ee:21:fa:7a:
e7:eb:9f:ee:fd:2d:bd:ab:c5:f5:1d:7a:29:39:58:
b3:a9:1b:e1:99:00:98:4b:aa:0d:82:88:77:c2:d8:
16:c8:02:f9:73:1c:cb:a5:4c:b5:ff:35:81:a2:1f:
46:80:ec:ba:09:0d:a5:8c:11:71:05:8c:ea:94:f8:
03:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:31:F3:9D:73:29:57:C4:1A:97:2D:9B:E9:77:C4:BF:99:8E:34:E2
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4b:79:c4:50:e2:7a:18:8a:a0:3a:70:de:68:ca:fb:0d:bf:
65:31:e5:f3:1e:1b:6c:c0:2b:16:3e:67:c7:66:03:84:28:12:
f5:6d:4f:ba:14:42:fb:12:72:d9:50:c0:a3:38:6b:b9:75:7c:
9c:81:02:20:66:59:97:6e:1b:6b:eb:41:f5:0a:fd:17:cf:43:
c9:b0:0e:f6:fb:c9:6a:d1:f5:fa:4e:c9:cb:b3:25:b5:cf:6e:
f1:b7:ad:fa:11:e3:d6:d3:14:05:bc:db:75:e3:9d:fa:99:6b:
b1:06:5c:3d:21:58:2d:da:cc:57:74:12:97:42:b5:f0:92:5f:
cc:09:ed:d0:14:10:60:ca:41:31:9d:79:87:8a:77:24:fe:18:
2e:05:dd:64:e1:4e:3f:2d:66:8e:a3:86:d7:e0:35:7f:d8:c6:
5c:60:36:97:ac:1f:b7:38:c7:31:47:94:b8:04:f3:60:4c:f1:
a0:5a:39:02:0a:13:21:61:27:5b:11:d7:c3:dd:04:6e:42:10:
9f:e1:94:93:ee:fd:da:77:24:5a:4e:06:2f:02:92:71:44:44:
d0:48:b9:11:40:8f:3e:84:7a:b3:ed:17:96:34:35:c8:06:7e:
72:17:73:3f:41:4d:84:7e:de:59:08:5c:2c:58:05:5d:8d:0b:
f3:0b:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:41:29 2026 by rpki-client