Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
File: qERYOVOgK8amaZ3pJ89FcAfwVSg.mft (raw, json)
Hash identifier: 2mQP2j2eb0Mr/+bcM2Q9Xp6rlC9+Y/exOShEyNC0nRk=
Subject key identifier: 0B:87:EA:EA:88:F3:CE:EF:A1:00:25:0D:49:33:D2:04:86:A3:62:B3
Authority key identifier: A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
Certificate issuer: /CN=a844583953a02bc6a6699de927cf457007f05528
Certificate serial: 01A08B9F2F1F58AA9B0D16C50488E9415A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
Manifest number: 02DF
Signing time: Thu 10 Sep 2026 14:01:00 +0000
Manifest this update: Thu 10 Sep 2026 14:01:00 +0000
Manifest next update: Fri 11 Sep 2026 14:01:00 +0000
Files and hashes: 1: bzuHav72txau2Blj1JcbQR-3zHA.roa (hash: TCvNISq9G9+8+m7g0vleezt4nSYPh9D8kXCKj2MC7tQ=)
2: qERYOVOgK8amaZ3pJ89FcAfwVSg.crl (hash: 98I6fN2Tw9OZ0tijIP9f8fNvB0zYZje2kvl4yF3icMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:2f:1f:58:aa:9b:0d:16:c5:04:88:e9:41:5a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a844583953a02bc6a6699de927cf457007f05528
Validity
Not Before: Sep 10 14:01:00 2026 GMT
Not After : Sep 11 14:01:00 2026 GMT
Subject: CN=0b87eaea88f3ceefa100250d4933d20486a362b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0b:4b:f5:9b:35:84:9e:6d:c3:c2:48:a1:63:
4f:d9:30:0a:4b:ee:96:83:f6:99:e8:41:39:e0:db:
34:8a:ce:46:4b:a5:c6:a8:48:c5:7c:bd:d4:84:5d:
b2:e2:e4:d6:03:32:14:f9:cd:01:84:da:cc:3c:be:
77:f2:18:d6:81:e7:90:5f:b6:88:cd:e5:c9:93:d6:
8c:7d:20:15:5d:19:1f:48:c5:69:8c:19:d9:9b:02:
51:13:46:98:6c:e4:3a:41:36:fc:dd:e3:a9:4d:19:
1b:fd:a1:17:1c:d9:9b:f6:09:b7:dc:5c:05:a6:02:
67:56:4d:6c:87:12:6b:f2:20:25:c9:77:f8:9c:0c:
f3:9e:18:09:11:5c:04:ec:72:02:20:92:59:cc:3b:
da:20:d5:5c:16:c0:6e:52:58:d0:77:4c:d5:42:59:
a6:4f:b6:ea:c6:23:38:8c:bd:ea:7f:07:3e:6b:a3:
f4:ac:52:5a:ee:d0:d4:6c:8b:2c:7f:89:a7:82:a2:
e2:06:ee:8e:d2:dc:41:15:5b:51:ae:22:0b:57:1f:
41:48:f6:6a:c5:a5:c1:f4:d3:f9:b7:0c:2b:64:35:
79:0b:79:01:79:27:ce:17:d2:cc:c4:0d:96:61:10:
79:5f:f6:37:08:84:4d:08:ad:e0:ad:0b:01:50:9f:
74:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:87:EA:EA:88:F3:CE:EF:A1:00:25:0D:49:33:D2:04:86:A3:62:B3
X509v3 Authority Key Identifier:
keyid:A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ef:ea:c1:73:c3:10:24:48:cb:cc:d0:0a:b2:89:51:7d:47:
48:15:5f:ed:89:19:63:fe:b2:9b:d7:ab:8c:82:d9:6a:3a:c1:
d0:4a:b8:2d:44:45:7b:75:9f:ef:25:a3:79:5b:da:85:41:32:
68:70:6f:a9:f2:7f:41:76:20:4c:ca:2a:68:e8:77:62:62:05:
c3:ba:34:00:98:d8:80:6e:70:50:31:04:d3:bb:4e:6f:4f:79:
09:44:1e:7b:47:64:ad:33:1d:70:af:5d:88:c3:59:12:d0:c8:
ae:b1:ed:6e:5f:36:a2:cf:c6:de:3c:27:2e:dd:09:fd:c0:ea:
3b:84:a1:74:47:fb:bf:47:72:10:03:8a:39:18:4b:31:61:92:
ca:9e:ed:6d:88:a6:f8:5b:40:e0:d0:26:24:ff:9e:37:d2:59:
42:62:c5:1f:09:83:00:cd:f8:6e:bd:b5:95:14:7a:68:d4:80:
5a:e4:c3:a1:ae:36:59:71:d0:22:3b:6f:d9:e2:5f:2e:33:d4:
d6:9f:e8:c6:43:70:17:38:01:9e:e0:6f:06:c0:f8:b8:51:a2:
46:71:18:34:bc:ba:9f:f2:09:4d:38:f5:3a:41:72:70:63:08:
de:ad:71:28:6a:a0:5f:74:1e:16:6c:a4:17:49:93:a6:ae:ae:
b6:8b:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:20:23 2026 by rpki-client