Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
File: qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft (raw, json)
Hash identifier: Z91mmKSbHDoWlhSSHx3CSG8697KGiTcCLxA8ImF4vtc=
Subject key identifier: AB:9D:88:84:FE:16:9C:C1:2C:EC:26:98:4C:5D:75:4C:A3:78:E5:EA
Authority key identifier: AA:45:F8:0F:85:F6:87:A4:5E:30:C8:73:AA:A5:B4:55:B4:B1:17:B0
Certificate issuer: /CN=aa45f80f85f687a45e30c873aaa5b455b4b117b0
Certificate serial: 01A0ED0BA19516AD31E00999640D6D566E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
Manifest number: F4
Signing time: Tue 29 Sep 2026 12:02:37 +0000
Manifest this update: Tue 29 Sep 2026 12:02:37 +0000
Manifest next update: Wed 30 Sep 2026 12:02:37 +0000
Files and hashes: 1: U24ztcfwe3Tx-MO4rdSFI0KvV9A.roa (hash: gljBzuHljgAofqghGfm0+QrU01lsOtyBOdrBsukDw8w=)
2: qkX4D4X2h6ReMMhzqqW0VbSxF7A.crl (hash: aHcMBqIa3PYb5vdKz/G87599hTAe1+tJldsGqcSNDO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0b:a1:95:16:ad:31:e0:09:99:64:0d:6d:56:6e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa45f80f85f687a45e30c873aaa5b455b4b117b0
Validity
Not Before: Sep 29 12:02:37 2026 GMT
Not After : Sep 30 12:02:37 2026 GMT
Subject: CN=ab9d8884fe169cc12cec26984c5d754ca378e5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:6b:fa:aa:1b:5c:3a:b6:83:33:13:78:92:
bf:eb:06:19:bc:61:e3:87:32:71:c0:11:a7:f6:5e:
da:66:7e:71:dd:68:1a:d3:d5:21:6a:c2:e7:5f:25:
91:5c:be:24:8b:77:71:92:33:a9:ae:4a:8a:d8:f7:
fa:c5:89:df:4b:e2:19:88:6f:a8:c5:94:33:80:ae:
c4:04:74:e6:1e:4f:55:89:5c:55:fb:af:f0:54:0c:
3a:88:ab:ba:2f:db:b5:5d:0e:db:bf:74:51:32:de:
38:97:4c:ec:bc:15:3a:65:b5:f6:e0:51:68:f4:d6:
18:c1:cf:5d:3f:ab:e8:7c:5d:e0:70:32:51:66:72:
53:2c:bb:d2:38:ba:76:42:47:8e:9a:2f:d6:a8:96:
ce:1f:b1:86:40:90:6d:21:7d:00:70:20:60:66:12:
1d:e9:dc:ce:66:a8:5d:4c:f7:29:e5:20:a7:e7:ef:
bc:2a:27:01:d7:2d:7c:ff:16:18:50:85:2a:b0:fc:
6f:a7:8d:80:94:b8:63:55:b9:22:41:75:35:9b:ff:
7d:e0:c9:fe:22:7f:74:89:85:10:8d:df:65:ab:dd:
4a:dc:1a:5c:d9:28:74:e9:ed:83:69:ae:88:d6:1c:
2b:35:1a:26:8f:02:59:53:35:61:eb:46:f7:07:a7:
95:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:9D:88:84:FE:16:9C:C1:2C:EC:26:98:4C:5D:75:4C:A3:78:E5:EA
X509v3 Authority Key Identifier:
keyid:AA:45:F8:0F:85:F6:87:A4:5E:30:C8:73:AA:A5:B4:55:B4:B1:17:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkX4D4X2h6ReMMhzqqW0VbSxF7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fca2ae-25fc-444b-a868-810dc9e1aa54/1/qkX4D4X2h6ReMMhzqqW0VbSxF7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1c:9c:71:61:58:55:a2:af:be:4e:d9:3a:29:a6:48:79:10:
2c:38:82:f2:36:f8:56:1e:12:aa:91:4a:62:5c:ad:f2:8d:09:
f4:35:cb:b0:b9:e1:c8:8c:ba:af:34:12:c7:78:82:ef:5c:ae:
61:15:55:37:eb:78:62:e6:ca:25:9d:b8:ab:fd:28:ac:75:18:
80:2d:a8:36:19:81:15:19:9a:9c:f7:f4:ac:96:19:5c:10:16:
58:f0:0a:6d:21:83:22:81:89:db:6e:f1:38:58:78:bd:11:86:
ca:8f:85:72:47:19:71:22:b7:13:b1:c5:9d:49:b7:60:37:16:
c3:59:c6:c5:48:67:ed:7b:1d:8e:65:10:39:e3:b6:91:fe:5d:
01:6a:3e:0a:b7:5e:8e:ad:d7:37:11:25:77:83:75:b8:01:f2:
84:31:2d:69:8a:2f:e0:9c:28:96:b7:e3:32:26:b7:9b:5c:9f:
a9:78:15:97:c7:83:91:02:ff:82:77:3d:6d:bf:26:91:44:fd:
4a:35:52:c2:61:4e:8e:f6:f0:bc:12:6b:1e:2a:f2:df:6d:4e:
d8:8b:30:53:b7:d1:20:e3:db:93:e4:75:6f:1e:99:69:98:97:
9e:d9:c6:47:88:a6:5a:e7:91:2f:65:2b:54:3e:c3:ab:29:b1:
62:87:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:28:16 2026 by rpki-client