Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: Gj8s0W0m8jgF4p96+Jx2V07nRM65ZBp6wlksEZcDloQ=
Subject key identifier: E6:B1:B9:EA:D9:69:18:6E:90:BD:87:99:49:50:C3:05:F2:62:BB:A1
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 01A08DC465FC8344131A1C29176A3B87297B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 19DA
Signing time: Fri 11 Sep 2026 00:00:53 +0000
Manifest this update: Fri 11 Sep 2026 00:00:53 +0000
Manifest next update: Sat 12 Sep 2026 00:00:53 +0000
Files and hashes: 1: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (hash: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: CTgEUg4pO/6MgUFFLV/VziOlzB4cmW1ONYwURgIndvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:65:fc:83:44:13:1a:1c:29:17:6a:3b:87:29:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Sep 11 00:00:53 2026 GMT
Not After : Sep 12 00:00:53 2026 GMT
Subject: CN=e6b1b9ead969186e90bd87994950c305f262bba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:40:a3:05:d8:af:6f:ac:1e:e6:b5:a9:2b:b8:
64:b6:7d:95:3a:10:01:a6:e4:79:d4:de:13:60:be:
6f:74:78:27:61:45:32:00:a0:93:57:58:be:44:e2:
31:32:39:59:7b:3e:ed:e7:cc:04:bd:f7:74:bd:99:
b3:2b:f7:51:c2:af:d1:16:38:31:a3:82:62:ca:29:
47:05:d0:a9:7b:ff:fb:a0:0d:d9:f7:bc:d3:7d:4d:
64:77:0e:2d:20:a6:67:f6:18:ee:bf:17:18:37:d2:
4f:f6:49:8e:9b:a1:65:33:56:3d:3d:97:43:d0:fe:
8b:90:50:54:a8:ba:12:1f:1d:42:c0:ac:fe:17:93:
96:89:c9:d1:36:e3:43:ad:4d:bc:40:e1:fb:7a:c3:
c3:8d:be:f7:85:1c:a1:76:cc:32:08:1b:70:d7:6f:
35:6a:3a:e5:a9:2b:9c:93:54:06:92:03:0d:e6:62:
dd:f7:3f:b3:a7:8a:36:08:37:b1:58:95:2e:49:9b:
11:66:74:df:b7:f6:45:cc:7a:64:64:39:7d:5a:62:
8d:92:67:3c:09:a5:47:af:c7:d4:0e:1d:64:e4:e3:
c3:23:c3:5c:61:59:3a:60:7d:c2:36:ff:c7:b6:2e:
24:4e:84:b4:9d:38:82:58:18:31:98:f2:34:ae:7b:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B1:B9:EA:D9:69:18:6E:90:BD:87:99:49:50:C3:05:F2:62:BB:A1
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d6:cb:6f:77:89:00:14:af:df:1e:71:1f:87:8b:e3:31:f6:
0e:52:57:5f:d7:3b:81:39:70:14:4a:d1:db:cf:87:1f:f5:0b:
f3:3e:75:bb:a2:01:ba:8c:ea:aa:2b:f2:5a:53:23:e5:c6:e5:
e9:83:53:44:9e:3d:48:03:1c:49:88:cb:2d:ad:e7:e6:6f:03:
c3:46:f2:42:d4:77:3d:5a:89:6a:2a:ee:75:c5:05:40:2e:2f:
6f:e1:75:24:fd:f8:8f:6d:53:0c:30:60:01:8b:c9:f3:50:35:
ab:ff:60:bb:3f:4a:2c:3d:e6:88:60:71:57:c0:09:c3:e1:82:
98:4f:e4:c5:55:07:37:20:d4:4f:ea:5d:63:02:1d:28:47:44:
9d:e6:be:33:cd:c4:81:6f:72:c1:57:fe:48:3b:b9:ef:58:4e:
6b:7d:cc:1a:4f:33:25:7f:5e:4f:11:c1:91:6e:49:3f:71:28:
75:a8:e6:0b:89:1f:f7:02:29:e6:21:c6:80:ce:9b:29:72:74:
5d:28:c8:dc:dc:b8:94:60:6b:90:04:fe:9e:6c:29:7d:86:e5:
22:4f:47:0d:6c:ef:63:72:bb:a3:ad:71:66:dd:48:0c:05:ee:
66:48:7a:69:7a:1e:3b:a2:cc:f7:07:07:33:bc:24:7e:67:5b:
3e:30:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:19 2026 by rpki-client