Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: SdqlXhUyesw0yuJ4PunUmQ9aUHL4RwpG52wFojZSFFo=
Subject key identifier: 7F:4F:4A:EF:F6:8F:D7:C9:E9:53:FA:A4:92:EC:2B:B2:97:9D:14:FE
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 01A139DB398512F364E0BC1DFA4C5E822432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 162E
Signing time: Wed 14 Oct 2026 10:00:30 +0000
Manifest this update: Wed 14 Oct 2026 10:00:30 +0000
Manifest next update: Thu 15 Oct 2026 10:00:30 +0000
Files and hashes: 1: _GMjCgOppj-cDNqGf9sL7bV12vk.roa (hash: TsdjcA8kBAsvuIEMhSHqHIIP+sdYNNN8QiJUeKvHVXo=)
2: gCXrBFLxOw6kqjD16CuMsL6zWgE.roa (hash: v9RU6FPgMI/ClMLp92GPHhi/v35/JkjC+Xjyrv6zdv8=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: jmd8T5pEzgLoiEQCIYzqNmdAGcEs3tr4nYZBbGlyU+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:39:85:12:f3:64:e0:bc:1d:fa:4c:5e:82:24:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Oct 14 10:00:30 2026 GMT
Not After : Oct 15 10:00:30 2026 GMT
Subject: CN=7f4f4aeff68fd7c9e953faa492ec2bb2979d14fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:72:5a:ed:c5:bb:37:81:97:89:c2:1b:ff:06:
d6:e3:52:33:c3:a6:76:89:36:9d:aa:f6:2f:d3:a5:
e9:f3:2b:5d:1d:a9:6a:e5:3b:b6:83:7a:c2:3e:c5:
96:47:6d:d5:33:00:86:5e:f7:46:46:ef:f8:ba:23:
c9:4d:15:79:bf:1c:48:68:b9:9b:67:20:e3:39:8f:
a8:cc:f9:ff:c2:a5:a4:e5:28:70:fa:7e:db:ec:b1:
02:ad:74:68:4f:a9:94:1a:53:48:40:e1:d7:7a:4a:
ad:62:5f:70:92:2a:6b:1b:32:35:e7:62:14:c8:e6:
c2:ab:bb:ce:c4:6b:bc:b7:cb:f2:16:06:75:26:d7:
79:a6:23:86:6d:38:19:a6:b4:ab:bb:5e:c9:19:87:
ed:0f:a2:33:bc:bb:97:b2:55:56:c8:02:6f:58:e7:
6e:8c:38:3e:23:3b:ff:36:1a:69:09:03:ab:6a:81:
1a:7c:fb:a1:c8:24:42:c1:87:04:89:4a:7c:d3:43:
b3:fc:d2:62:b7:64:48:7e:27:b8:0c:d2:f9:0c:42:
f1:1f:ee:41:46:c2:8e:b4:6b:e5:e7:51:dc:4d:c2:
84:08:a9:13:5d:be:fc:1e:7f:9d:05:70:2a:c4:97:
07:6b:50:bb:42:d1:82:00:7e:5f:98:63:51:23:74:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4F:4A:EF:F6:8F:D7:C9:E9:53:FA:A4:92:EC:2B:B2:97:9D:14:FE
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ea:5c:b4:55:9e:81:c5:02:a9:2b:4b:5f:85:c0:ce:af:57:
69:2a:52:0f:45:c2:4a:1f:6c:b2:ff:24:14:b9:a0:6f:e8:1d:
74:bb:0f:da:06:90:5c:42:ba:44:6a:91:b1:6d:f0:13:4d:4a:
81:b7:7c:82:88:59:9e:d0:8a:08:63:32:f9:69:34:8b:51:2a:
d7:fb:ee:e2:33:a8:30:86:17:f1:07:38:df:55:18:16:b4:07:
8e:33:42:fd:02:33:e3:73:60:62:f4:f4:0e:69:49:c1:a2:c1:
93:3d:dd:d4:4c:44:21:9d:b9:0d:2c:7c:fa:db:50:f8:f1:fb:
98:59:a5:5e:49:5a:94:c5:53:77:f4:3d:9e:34:80:11:f3:dc:
2a:54:7b:5d:ee:73:f0:1e:69:bc:5f:49:ca:57:0f:bd:2b:c6:
eb:e7:af:ce:69:2c:fe:bc:31:58:d0:07:8a:ce:c6:26:be:5b:
2e:ab:f5:0d:43:e6:c1:6d:9b:dc:b7:57:6d:63:af:f6:c9:12:
a5:3f:7b:1e:83:b0:32:57:eb:8b:85:27:30:5e:a3:f9:3a:8f:
e4:cf:32:21:14:e5:ab:df:ae:13:33:ba:c6:e7:72:eb:25:41:
04:02:e5:97:f0:ae:0d:e9:c6:c1:dc:ac:98:3d:11:9d:62:3a:
af:0f:1e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 19:30:37 2026 by rpki-client