Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
File: q-FU0X720TcQvhRyrlfy0Datb9Q.mft (raw, json)
Hash identifier: hXUk0/LxYX1IIi2tqaWYb55Ur5jhjZU68jedV/4o4Tg=
Subject key identifier: B1:2E:B3:49:8C:55:99:61:B3:A7:02:AB:7C:F2:93:D1:6B:B5:32:94
Authority key identifier: AB:E1:54:D1:7E:F6:D1:37:10:BE:14:72:AE:57:F2:D0:36:AD:6F:D4
Certificate issuer: /CN=abe154d17ef6d13710be1472ae57f2d036ad6fd4
Certificate serial: 01A03E5F5747EDD676B1180CDEDF59ABEE9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
Manifest number: 020B
Signing time: Wed 26 Aug 2026 14:00:30 +0000
Manifest this update: Wed 26 Aug 2026 14:00:30 +0000
Manifest next update: Thu 27 Aug 2026 14:00:30 +0000
Files and hashes: 1: 3SqaGJh1CAZSPdm7paJ5Lxw0R-E.asa (hash: Qx2uSh9Bbe8qrzpUWt9UFlCgyrEzeWhs9geX1SlGDJI=)
2: q-FU0X720TcQvhRyrlfy0Datb9Q.crl (hash: SxxQMcIIkPvsKMgIixYv0DXA7mBzMCm62n+SwEUImT8=)
3: zF2FGxoX0ZoqBJpAdIrHjnJr748.roa (hash: Or8elDoj8qDhg577TX6Kjac9Hx8P3Z6GCnTIDEkjYE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:57:47:ed:d6:76:b1:18:0c:de:df:59:ab:ee:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe154d17ef6d13710be1472ae57f2d036ad6fd4
Validity
Not Before: Aug 26 14:00:30 2026 GMT
Not After : Aug 27 14:00:30 2026 GMT
Subject: CN=b12eb3498c559961b3a702ab7cf293d16bb53294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ca:d5:bc:5d:28:6f:38:f6:98:59:0c:61:15:
27:aa:83:8d:c8:24:e2:c9:52:e0:9b:4a:58:df:6e:
3e:d4:c4:78:cd:56:65:96:b2:55:a2:ab:61:2c:42:
35:06:c8:09:b4:e1:e0:09:6b:68:15:e2:84:2c:71:
7c:2c:ee:e0:a6:ed:60:70:89:fd:26:5c:23:87:58:
ad:83:49:6d:a8:32:64:99:b7:64:c9:af:cd:07:b5:
58:f4:c4:b8:e6:33:a8:38:ad:bd:b6:6e:7e:34:a1:
57:a9:d4:a5:d7:a4:66:f4:ae:44:61:e1:26:72:6d:
89:92:6a:9f:b5:c1:bc:8f:fc:78:53:0a:1f:df:b0:
6b:29:d2:0e:20:aa:35:a6:8b:b0:c6:fa:74:c5:ed:
5d:84:a4:04:3b:ea:3e:9b:21:41:7b:b8:65:59:4a:
4d:89:80:3c:29:e3:77:77:fe:e0:17:7d:bf:22:df:
08:98:ae:30:5b:45:40:2b:af:d8:c9:3e:f4:27:e2:
39:5f:c6:6d:a0:21:c9:ac:ce:56:f1:70:53:6d:07:
00:94:fa:19:0e:39:44:e3:6a:b8:9d:a7:56:22:7f:
ad:d4:df:df:4f:74:6f:33:3a:92:20:b7:b6:9e:61:
8f:b6:b3:83:a0:56:60:e6:77:af:b8:f4:b5:86:14:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2E:B3:49:8C:55:99:61:B3:A7:02:AB:7C:F2:93:D1:6B:B5:32:94
X509v3 Authority Key Identifier:
keyid:AB:E1:54:D1:7E:F6:D1:37:10:BE:14:72:AE:57:F2:D0:36:AD:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-FU0X720TcQvhRyrlfy0Datb9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26c3e8-86a9-4f0c-a83f-4bdf24857211/1/q-FU0X720TcQvhRyrlfy0Datb9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:09:77:f6:d0:21:dd:db:59:94:e9:7e:80:b9:2d:d5:70:75:
c7:c5:78:e5:3c:1c:68:d7:08:c4:e6:4e:42:ff:b8:ae:b2:d9:
47:f4:5f:a7:6e:9a:8c:2a:63:73:f7:75:22:15:8d:42:8d:47:
a6:6e:c1:ce:7c:52:52:79:dd:7d:e6:25:52:d5:dd:b6:e4:81:
e9:13:c6:b7:ae:27:55:6b:3c:28:b1:8b:a8:ee:a6:95:c3:c3:
bd:08:e7:90:8c:b7:aa:79:ad:05:0d:35:99:f2:b3:4e:cc:08:
81:e8:ac:6b:74:e4:85:c5:b1:38:d2:b3:fc:ed:91:91:f1:d0:
0c:47:d3:41:b5:00:8e:d6:d1:6d:48:2c:e3:0c:69:e1:ce:72:
cb:72:00:0b:6f:99:f1:1e:b5:b6:71:2e:70:44:f5:af:e0:b7:
05:a8:6e:b6:3d:46:83:7d:5d:07:d9:1d:ad:dc:73:72:94:ef:
97:fa:48:60:da:81:23:ad:66:2b:ef:f4:15:23:3e:e3:ee:f7:
01:e9:f4:16:c7:9e:08:ae:b9:6f:1b:03:41:00:59:01:03:17:
ee:6e:32:36:aa:8b:c5:3b:0a:31:94:6a:8f:ec:c9:0d:a9:77:
fd:b5:fd:33:cd:5e:bb:6a:56:bb:ac:34:84:d3:37:ee:bb:85:
7a:3a:1b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:56:29 2026 by rpki-client