Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: gNgaprRmQkVhX1vlZsDzfMUfK0rp9Ok1pJ/ixwHNyEY=
Subject key identifier: 1C:CB:56:B3:3C:A0:35:87:DA:BC:6F:07:3A:3E:1B:57:57:09:84:40
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 01A08ED77172C720DE871EFE1B7DA1C6CBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 0BFC
Signing time: Fri 11 Sep 2026 05:01:18 +0000
Manifest this update: Fri 11 Sep 2026 05:01:18 +0000
Manifest next update: Sat 12 Sep 2026 05:01:18 +0000
Files and hashes: 1: Nd2VWji2-npmv2b1apqFNWYSkaY.roa (hash: BWQO3/ctGckcd4Dl6OgXbOo4/UEjPFHnSYCpr3sCzaU=)
2: dKP6zKEOjA35eNWIADhSGj3djko.roa (hash: 2Lz2j2XDdHTzfHzI32dG004beOMGbTVI9KUsaPstIRU=)
3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: 9gz/y3X67nrMYgicttZFqUj2Tmj82v97eYHk1X403ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:d7:71:72:c7:20:de:87:1e:fe:1b:7d:a1:c6:cb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Sep 11 05:01:18 2026 GMT
Not After : Sep 12 05:01:18 2026 GMT
Subject: CN=1ccb56b33ca03587dabc6f073a3e1b5757098440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:95:8a:e7:98:d8:0a:05:4a:ab:21:f4:be:f0:
82:66:c2:e7:95:11:bc:fb:bb:58:a4:71:ca:43:15:
0d:ac:12:10:da:b9:3e:35:36:55:f4:48:15:bb:c3:
27:fe:83:74:72:8a:bd:15:31:4b:40:d3:0e:08:07:
92:2e:81:dc:d6:2e:52:e5:67:e9:64:35:34:6d:2c:
21:dd:72:17:e0:b9:b8:9b:8e:ac:54:1d:1d:79:95:
68:22:17:17:37:2c:7f:88:64:dd:a4:62:28:0c:ba:
6f:ab:13:7c:ce:ca:73:9b:aa:cf:cb:7d:16:85:96:
30:b0:1e:1e:9a:90:2d:64:44:dc:0e:cc:01:10:34:
ad:34:2d:a6:34:43:76:bf:74:9f:0a:f8:92:87:f1:
01:b9:c2:15:5a:9a:e5:c3:f0:fd:fa:c1:6c:42:ed:
ee:17:5f:79:0d:ab:f7:22:59:bc:2e:21:5b:6d:58:
75:cb:7d:ec:77:69:ca:86:d7:65:ee:d0:d6:c2:3c:
57:e9:c6:43:8f:9a:4b:84:b8:96:67:cc:9c:14:27:
cb:5e:0a:c5:99:a1:17:fe:dd:d8:09:a3:c4:25:67:
a0:6b:af:d2:67:27:cd:b4:0c:90:ba:58:f3:19:fb:
e4:cb:9e:2c:a9:a9:d5:77:b0:86:3a:ee:b4:6e:41:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CB:56:B3:3C:A0:35:87:DA:BC:6F:07:3A:3E:1B:57:57:09:84:40
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:09:24:b3:c5:82:8d:cd:59:f7:1e:39:25:c1:09:79:3a:92:
d9:eb:23:78:7d:58:7c:06:1a:df:b5:42:78:cf:1d:56:b8:b1:
d5:d4:af:bd:f7:1b:16:21:df:7f:00:71:be:eb:7e:83:c4:9a:
64:b1:8a:a1:dd:8a:9d:6e:35:e0:cb:2f:e9:cf:2b:8a:10:44:
04:f5:a0:53:1b:70:10:83:61:f3:ec:69:8b:70:85:9c:bd:8c:
3d:98:e2:71:7e:cd:22:a1:f6:57:cc:d4:45:f4:43:32:f4:3d:
4b:ac:83:69:10:ee:b2:73:8f:1c:bf:aa:22:1d:ce:c0:13:2d:
bc:33:22:e9:1d:a4:0a:62:b1:a1:74:e1:72:87:ad:df:ef:6f:
63:54:31:c1:d1:ba:27:ef:62:34:c3:ed:58:23:e1:45:ad:36:
f0:84:c5:87:1a:44:2a:72:ee:84:48:60:74:b8:66:fe:fb:79:
4d:73:02:eb:5e:2c:8d:bf:b2:5a:7e:d0:fd:b8:31:fd:c2:e0:
8e:a1:03:ce:54:76:ef:ea:f7:37:c3:da:ed:29:7b:42:9e:ac:
66:53:a7:d8:21:f9:f3:d7:f4:30:45:70:5b:aa:fa:02:22:6b:
12:04:e3:3f:db:25:4b:50:a0:ac:2f:b3:ae:4a:42:ee:55:ef:
a6:23:41:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:09:41 2026 by rpki-client