Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
File: qFERp16dOcxDDqhbjSkgYNnop8I.mft (raw, json)
Hash identifier: 51QrjLMOrC7Gz6R9mkS65Hq2pWRloMTPgXLXZmJc+8I=
Subject key identifier: 5F:AA:6A:2D:C1:A3:8A:58:15:53:38:2D:BD:AB:FE:35:34:01:86:0E
Authority key identifier: A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
Certificate issuer: /CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Certificate serial: 01A039391C520190BA9035E749EB6D3926C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
Manifest number: C7
Signing time: Tue 25 Aug 2026 14:00:39 +0000
Manifest this update: Tue 25 Aug 2026 14:00:39 +0000
Manifest next update: Wed 26 Aug 2026 14:00:39 +0000
Files and hashes: 1: h6c3rKlsCh2Ta6ieH4wNZunbZ_c.asa (hash: wHSgIizYN0GV/TTAR4CRTTTf21VDW35ePjsqiIQojnU=)
2: qFERp16dOcxDDqhbjSkgYNnop8I.crl (hash: DZb5cZpzQRV1brK9NTTEMmoVmx7XtVxVeGfNHDgBBro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:39:1c:52:01:90:ba:90:35:e7:49:eb:6d:39:26:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Validity
Not Before: Aug 25 14:00:39 2026 GMT
Not After : Aug 26 14:00:39 2026 GMT
Subject: CN=5faa6a2dc1a38a581553382dbdabfe353401860e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:aa:06:93:48:2c:3a:19:a5:06:62:c4:27:7f:
71:df:ac:e5:c1:5c:41:af:e9:b8:db:02:b8:48:f8:
97:6e:b8:77:b0:f0:9d:d1:61:34:c3:c1:87:ab:ff:
72:c7:13:31:b0:63:b4:3e:82:23:8f:0b:69:25:b2:
36:e9:ab:f2:b1:bd:04:1f:4d:19:47:da:b1:f0:f3:
8a:72:01:b4:63:60:a5:7e:66:76:d6:89:08:c0:ab:
5e:0a:2a:46:86:d0:56:b1:a4:c9:d0:c0:19:21:c4:
59:49:25:87:eb:e2:9f:06:1e:31:7a:8e:09:6a:c2:
22:94:7d:4d:3d:40:49:91:31:27:e6:9c:ff:50:f9:
ec:27:f2:6e:fb:c1:13:52:5c:da:61:f1:11:eb:2e:
21:7f:ec:ce:3f:9b:69:0e:c5:8a:a2:68:1c:66:fe:
ca:65:7c:3f:9e:85:7e:46:5c:37:d9:73:03:83:3a:
9a:3e:e3:45:9b:f7:3b:d0:da:79:e8:e7:f8:c1:e5:
3c:3c:aa:12:a8:cd:fa:04:36:17:55:18:4b:61:28:
86:42:ac:90:9f:b5:f8:6e:30:eb:5a:45:33:b0:35:
9d:5d:bc:d7:ba:92:02:41:76:ef:96:c8:4e:e6:73:
c4:d1:57:ff:4b:16:d4:a4:23:b3:40:bb:02:35:62:
2c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AA:6A:2D:C1:A3:8A:58:15:53:38:2D:BD:AB:FE:35:34:01:86:0E
X509v3 Authority Key Identifier:
keyid:A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:25:66:3f:c2:ff:61:ba:2e:87:9a:e9:49:ce:da:c2:72:d3:
59:3d:df:48:56:ef:0c:8e:14:2f:b9:66:16:b1:a7:98:55:7f:
db:6c:9a:c2:7b:3d:49:86:d2:97:88:f7:cd:74:5d:3a:45:6c:
62:80:39:4d:96:a0:7d:71:21:70:90:f5:57:e8:53:8d:11:36:
1a:cb:69:34:c7:dc:89:71:84:d9:be:f4:b7:e1:f3:57:bc:4a:
ef:cc:46:b7:36:a3:fd:54:65:2e:49:62:9c:8d:e2:69:a0:12:
55:7f:33:5a:7c:53:31:48:08:fa:21:91:e8:8e:a7:b0:23:90:
34:26:93:91:88:f9:55:25:6d:96:35:bf:02:b2:d1:6b:73:c0:
fe:b2:d1:ef:6e:83:cc:bc:0b:21:0d:4e:cc:01:be:0f:f6:31:
1b:5c:73:e8:d0:1c:dc:c0:c6:36:ea:d0:e8:7b:bb:71:2b:e1:
87:b6:ed:36:2a:1a:3c:d4:73:7a:55:30:9e:3e:53:7f:cd:8f:
16:85:b8:6f:cf:a5:91:31:34:8c:a1:ae:f7:49:91:e5:30:00:
42:b5:9a:f9:5d:63:06:ea:9c:ab:26:67:7f:a5:c7:58:39:80:
c3:57:6b:1a:55:ef:c5:be:34:7d:b2:41:09:9a:2b:04:71:bd:
aa:0d:19:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 19:16:53 2026 by rpki-client