Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json)
Hash identifier: jq7IxF5iZAbXeqe44UWwkiT8HA3XT9JmHCoSYNeVwGI=
Subject key identifier: C3:7C:FA:B8:79:72:8F:4E:F5:4A:DB:0D:AC:3C:0F:3F:31:17:7D:19
Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939
Certificate serial: 01A01FB021106C87BBB54356772428E567B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
Manifest number: 17E0
Signing time: Thu 20 Aug 2026 15:00:31 +0000
Manifest this update: Thu 20 Aug 2026 15:00:31 +0000
Manifest next update: Fri 21 Aug 2026 15:00:31 +0000
Files and hashes: 1: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: UBtuZkVHfCy6cfTATroq+OLQbVNuwaL0ByklBY6QysY=)
2: vN94HUAPgmvQh3qxUmTqfU_xu68.roa (hash: 9/wGgd57yRAqhby3LLSAoNbCoPVWoNBJaPZEuWx53As=)
3: xBgy_H62jp_peWFVNL2jCljFBzw.roa (hash: FsGIuRvPcEfadNKC9UqpUs/32O7Qa+ZVXh6PzF+igCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b0:21:10:6c:87:bb:b5:43:56:77:24:28:e5:67:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8551e851e69db165c6c632af45f21715512939
Validity
Not Before: Aug 20 15:00:31 2026 GMT
Not After : Aug 21 15:00:31 2026 GMT
Subject: CN=c37cfab879728f4ef54adb0dac3c0f3f31177d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7c:2b:47:ee:54:ed:0e:38:ba:0f:45:52:70:
be:35:54:b9:f4:e3:34:a5:10:ef:07:5a:0e:c7:1a:
3e:ed:45:48:d8:19:7f:c2:b9:3b:67:b0:1b:b1:56:
4c:0c:fa:8e:53:aa:44:57:2b:69:ae:57:65:bc:c7:
5e:cb:bf:6c:a7:2e:2b:44:36:f3:d3:16:51:14:9e:
14:da:0d:d0:83:8d:8d:a2:58:57:d3:33:6d:e3:4a:
ce:5a:3b:69:f7:fc:a9:54:ea:9a:3f:02:ef:47:26:
62:5e:8d:56:07:9c:75:c7:9d:76:51:1f:fd:01:e9:
6d:9f:7f:16:f7:b0:1a:4a:77:57:fd:a9:48:7f:99:
82:62:ba:62:80:ec:70:f7:01:f2:e4:c8:2b:bd:0b:
3d:95:ab:3c:55:bc:81:9b:c5:bd:18:ba:3a:65:c5:
c2:8f:45:33:f5:93:ee:17:b5:36:01:fb:e6:e9:69:
66:4c:86:ac:81:e4:54:06:62:22:4a:b6:8c:45:c2:
53:ba:1e:9e:71:93:78:b7:53:02:3d:c7:d9:ad:5b:
48:a0:78:d7:b6:09:e9:71:20:28:67:45:a6:f0:4b:
92:1e:04:65:99:a1:ad:bf:1f:fc:41:0d:ed:99:d6:
c7:4c:78:8a:b4:f9:2a:5a:fd:cb:3b:c0:ca:11:c7:
66:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:FA:B8:79:72:8F:4E:F5:4A:DB:0D:AC:3C:0F:3F:31:17:7D:19
X509v3 Authority Key Identifier:
keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9d:d1:98:d2:be:fc:9b:bf:6e:4f:2c:1e:e6:df:17:37:0f:
f9:1f:89:0f:9a:b7:2b:c7:53:9a:fa:5c:69:30:5c:28:d5:61:
de:78:e6:ed:51:4a:b9:d2:92:7f:94:40:3e:9b:5d:78:5d:48:
27:98:17:3f:e4:93:c2:8c:97:3c:49:65:72:9b:b4:1e:9e:07:
db:af:e5:5b:a5:75:31:1d:6c:f0:b2:85:19:cc:5e:2b:31:2d:
d9:97:6b:ca:21:a8:c5:ae:b4:a9:0f:b1:d0:05:29:97:72:5a:
77:d0:8d:46:25:a2:ab:18:d4:61:cc:72:0e:39:a1:90:6a:19:
2c:30:29:05:06:f9:11:c4:e3:c2:b5:34:09:85:be:df:7d:59:
66:05:9b:0e:ab:10:70:63:f1:34:84:3e:cd:80:44:0e:7a:f7:
bb:0e:c4:20:84:cc:dc:aa:e3:8d:59:90:60:fe:47:07:5b:44:
f7:e6:7f:96:0c:e2:07:c3:48:b5:46:d5:5c:15:dc:99:b3:3f:
f8:dd:e4:db:1a:d5:7c:5d:35:58:cc:94:eb:13:3c:07:95:92:
d7:b1:8c:28:6c:8c:d6:6d:17:51:60:23:fd:ea:22:66:d1:34:
c4:95:fa:3f:f6:13:ea:70:9b:4a:00:65:7d:1f:b2:91:e1:a4:
e9:07:59:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:58 2026 by rpki-client