Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
File: QfpvoAiYrTXuZ_taWhkQXbbB0es.mft (raw, json)
Hash identifier: asJuceGny/EdG+XQo5wBoIgj0zYaQXrKTMg27Iwo3as=
Subject key identifier: F4:66:B5:4D:B1:36:FB:3C:D7:12:DA:B0:DD:0A:C0:99:67:35:66:3A
Authority key identifier: 41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
Certificate issuer: /CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Certificate serial: 01A06D269AEA607160C58D83B1AAD9AB05C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
Manifest number: 0225
Signing time: Fri 04 Sep 2026 16:00:41 +0000
Manifest this update: Fri 04 Sep 2026 16:00:41 +0000
Manifest next update: Sat 05 Sep 2026 16:00:41 +0000
Files and hashes: 1: QfpvoAiYrTXuZ_taWhkQXbbB0es.crl (hash: stmC2dOu38SVxS2KltgcYH/2Vd+mK8vhO14BF3BMNhU=)
2: tUgLrvuas3A8ffagzPey3XzQQXM.roa (hash: nldIcz0O0+/Bm3m2OMxGodFkGt2Ggg8SRrnW6hRBtug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:26:9a:ea:60:71:60:c5:8d:83:b1:aa:d9:ab:05:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Validity
Not Before: Sep 4 16:00:41 2026 GMT
Not After : Sep 5 16:00:41 2026 GMT
Subject: CN=f466b54db136fb3cd712dab0dd0ac0996735663a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:3c:3f:97:fd:80:09:6a:83:5a:5b:90:63:
9d:24:e3:d1:84:a6:06:cc:c9:4b:c0:12:48:03:ae:
ed:28:bf:e7:08:cc:70:63:31:e7:7f:e7:7b:f6:8f:
cd:34:64:9b:dd:ba:f5:9d:50:45:b9:a2:b0:cc:a2:
1d:ce:12:8f:bb:d6:bc:d3:ab:1a:de:55:9f:a0:43:
60:b0:fd:9c:b7:13:c0:2a:e4:d6:fe:ce:76:c2:bf:
b9:42:9f:d9:c4:6b:ce:d2:07:b1:27:30:c5:52:27:
f8:f8:55:79:71:be:e2:1f:84:d3:7f:46:a2:c7:4e:
b0:63:b8:e3:a9:0f:62:d0:e3:1e:6c:93:f1:6b:1e:
3a:9f:a6:d6:bd:44:7a:ff:f8:c6:2c:ec:e7:5d:14:
22:32:83:09:9d:a3:a4:77:33:9d:01:03:03:49:6c:
b7:5c:1e:99:d2:b0:81:8e:39:17:ab:19:65:1c:e1:
c8:12:7f:b2:00:e0:01:c3:b2:1d:83:33:69:0b:72:
4d:d1:7f:8d:cb:92:2d:12:ee:2c:51:2b:4a:47:41:
bc:7b:0f:7c:17:93:b2:07:2e:9a:27:3a:fc:0c:e0:
d1:0e:29:fc:eb:8e:80:93:1c:86:2e:86:ed:e4:05:
53:78:b6:7d:e4:d3:a5:69:b9:13:a5:d5:99:4a:eb:
49:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:66:B5:4D:B1:36:FB:3C:D7:12:DA:B0:DD:0A:C0:99:67:35:66:3A
X509v3 Authority Key Identifier:
keyid:41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:68:f2:f2:be:b8:9a:fe:d8:ee:12:25:c8:b4:5b:ba:d1:56:
0c:7f:45:d1:d8:3f:d4:a6:1f:ea:c6:b5:00:a2:45:61:13:6d:
e0:39:65:f0:fa:b7:4a:a4:8b:ab:fb:a0:62:81:df:4a:64:fb:
8d:72:fd:35:41:5c:87:b6:be:eb:fa:fa:aa:fe:54:bd:51:b1:
1f:1b:9a:46:6b:1a:10:c4:c5:ed:c0:5e:fd:57:96:aa:be:c4:
50:c4:a4:f7:9a:1f:15:ad:68:f6:b3:c1:5d:e7:dd:d4:47:68:
93:b1:56:26:1e:dc:b9:a9:20:b5:98:23:19:4c:25:dd:c6:26:
88:dd:3c:9e:fb:64:16:c5:8b:08:d7:df:e6:41:ab:8b:05:d0:
50:ba:6f:7f:6b:c2:7a:dc:d0:6e:a7:31:fb:2d:70:d0:bf:6b:
df:5f:9b:e9:00:95:c5:a6:55:90:cc:e4:2d:56:e7:ab:62:22:
2c:92:5d:46:6b:5c:f5:96:a2:5f:cb:91:31:87:3e:3a:27:57:
52:c1:9b:f7:f4:03:f4:6c:b6:11:9b:92:d5:cc:c0:ad:84:e4:
39:aa:ff:dd:51:a5:42:2b:1a:c6:b9:bf:7d:49:7b:55:be:de:
52:d4:2d:9b:93:0b:97:6e:79:4f:bf:d7:df:34:b9:59:90:53:
48:e0:4e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:27:49 2026 by rpki-client