Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
File: qIrVRvGg74z3XJKnSL1chjYuIJs.mft (raw, json)
Hash identifier: u7Ba6KEe9DDFCQ9vlzhrdUuy0Yuty8VMItW52EgK0LE=
Subject key identifier: FB:37:74:9B:91:9B:A5:DD:AD:7D:20:55:FB:BD:51:BF:91:22:60:13
Authority key identifier: A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
Certificate issuer: /CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Certificate serial: 01A0B04FB47C913131794FD0C4B6EDA86B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
Manifest number: 1408
Signing time: Thu 17 Sep 2026 17:00:08 +0000
Manifest this update: Thu 17 Sep 2026 17:00:08 +0000
Manifest next update: Fri 18 Sep 2026 17:00:08 +0000
Files and hashes: 1: qIrVRvGg74z3XJKnSL1chjYuIJs.crl (hash: x0zRHNWgpik2fQNkfK7HT4B3TmHVdrv07yjI/OKVdbM=)
2: y4ozBsAhD0SXzDXTnSLIwi05yzY.roa (hash: UpquKmMoHnebuH46QTJH9ZI2B7xELceGE768LObgLRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 17:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:4f:b4:7c:91:31:31:79:4f:d0:c4:b6:ed:a8:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88ad546f1a0ef8cf75c92a748bd5c86362e209b
Validity
Not Before: Sep 17 17:00:08 2026 GMT
Not After : Sep 18 17:00:08 2026 GMT
Subject: CN=fb37749b919ba5ddad7d2055fbbd51bf91226013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d7:24:3e:dd:b9:7d:ff:01:c8:4d:1e:d0:9d:
4f:03:08:4c:f5:60:16:99:f0:71:36:bd:3f:c5:e2:
e9:67:c6:83:e2:9b:3c:19:fd:0c:a5:5c:2a:47:1c:
c0:f1:2e:47:ba:fc:1e:05:8a:75:29:47:d7:13:7d:
81:4e:ce:91:0b:01:2a:7e:f1:28:06:77:b7:6d:87:
b2:ae:4d:3d:42:84:45:47:62:ff:e2:f4:60:ad:77:
0d:83:0e:0b:69:97:fa:54:ee:13:d4:63:a5:e7:42:
4d:a0:7e:e6:22:bd:1a:93:28:23:93:5c:38:55:82:
6d:cd:50:84:fd:11:6d:c2:b9:82:67:fe:b8:b4:96:
2e:35:40:a0:7d:18:f7:1b:e3:4b:b5:98:44:e7:00:
e1:af:9d:c1:60:1b:31:7e:01:46:79:21:9b:0a:7d:
27:04:38:18:53:3a:ee:6c:13:d7:ca:16:40:08:51:
2e:96:2a:5a:9a:f8:79:fd:b5:86:25:91:f5:96:98:
f7:d5:47:b2:eb:28:87:01:a1:11:88:9d:6b:2d:d1:
b4:59:5d:ae:ea:c0:9b:78:51:10:3e:d3:ae:ae:6d:
f7:39:e8:15:e5:49:c6:f7:30:fc:0a:85:c9:68:d4:
8d:6d:a4:bd:ff:43:ce:c1:2c:08:92:b0:d7:e8:18:
4f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:74:9B:91:9B:A5:DD:AD:7D:20:55:FB:BD:51:BF:91:22:60:13
X509v3 Authority Key Identifier:
keyid:A8:8A:D5:46:F1:A0:EF:8C:F7:5C:92:A7:48:BD:5C:86:36:2E:20:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIrVRvGg74z3XJKnSL1chjYuIJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/500a8c-6a2d-434b-96f1-18eb779a6497/1/qIrVRvGg74z3XJKnSL1chjYuIJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:75:ff:83:a3:70:00:c8:6f:e0:1d:f5:bb:32:10:f9:8e:1c:
8d:5d:12:25:ad:25:c0:24:23:83:3c:04:2f:ea:3a:91:b6:a1:
54:7a:33:be:16:ad:c0:c7:c0:0c:83:47:d8:ac:25:4b:ee:1f:
af:56:96:c4:79:14:d3:29:0f:8d:b9:a3:38:80:9d:41:38:40:
53:21:47:1e:fb:ea:fe:ce:cc:5e:ae:a5:3b:db:29:57:61:39:
d4:04:6f:a5:60:0a:93:f6:52:cb:de:bc:dc:9c:70:10:9f:cb:
3e:b0:9e:f4:9d:ab:f9:77:2b:0b:1e:2a:dd:fd:9f:14:02:1f:
b2:c1:92:dc:3b:30:cd:e1:b6:02:61:57:7d:59:20:68:bc:00:
17:b7:2d:6e:c7:d8:18:9d:64:20:b7:90:ad:2e:4f:1f:ea:6b:
7d:10:0e:9a:94:23:24:72:2b:20:15:8b:db:c8:93:54:d5:76:
9b:ac:76:2d:ec:d6:9e:11:54:81:39:63:37:1e:a2:9d:1b:14:
1f:d0:f3:a2:31:d4:7c:6d:3b:45:71:13:11:5d:3c:ca:4f:75:
e0:b9:41:6f:b9:ee:75:4b:4d:d6:60:d0:9a:88:3f:cb:42:e5:
7d:e2:00:af:31:2e:3c:0d:91:d5:bb:d1:3f:ff:82:fe:a8:e7:
83:ef:84:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 02:29:04 2026 by rpki-client