Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: 1I3E73GCkG+HyKqiqpWUj3rxQYmY5W8UZ2ChUHozMG4=
Subject key identifier: CF:FA:C7:DC:FC:A9:E0:FE:3E:EA:75:AA:49:A6:9E:56:EB:B9:8C:DB
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 01A002822AA4537B69FD0362F8E317125127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 158C
Signing time: Fri 14 Aug 2026 23:01:19 +0000
Manifest this update: Fri 14 Aug 2026 23:01:19 +0000
Manifest next update: Sat 15 Aug 2026 23:01:19 +0000
Files and hashes: 1: gCXrBFLxOw6kqjD16CuMsL6zWgE.roa (hash: v9RU6FPgMI/ClMLp92GPHhi/v35/JkjC+Xjyrv6zdv8=)
2: gKSA9C01bh9TzjI8socY0aOqSWo.roa (hash: /00W/aM+47tlUTvfcHQg7c95+kNT0zWHs82O05qfa0U=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: 2ReUDHbwMEh7a0pUDXGnbGTCYqZ9axUh14iAcxwd354=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:82:2a:a4:53:7b:69:fd:03:62:f8:e3:17:12:51:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Aug 14 23:01:19 2026 GMT
Not After : Aug 15 23:01:19 2026 GMT
Subject: CN=cffac7dcfca9e0fe3eea75aa49a69e56ebb98cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:0c:3e:3a:a5:17:d5:06:a4:02:48:23:3b:a6:
41:57:11:aa:dd:88:fc:47:4b:98:48:04:20:0a:7f:
3f:6d:36:d5:23:03:09:16:de:7e:95:bd:33:a9:9d:
b0:0e:71:8f:36:06:f4:34:1f:c4:8b:60:61:74:0f:
26:30:4f:42:70:82:a9:cb:c7:91:4a:5e:ba:73:bc:
f2:1a:1e:8c:a4:30:c5:ad:3d:e7:9c:26:7b:42:cb:
f3:04:cc:3f:bd:23:91:1a:ff:c5:d7:a6:39:c8:be:
85:34:41:ab:44:33:3d:68:55:b5:6c:43:7a:bc:f7:
81:8e:26:96:2f:c7:48:dd:fc:58:71:3c:2a:77:6e:
ee:f0:f4:bf:0a:f8:b2:36:97:35:7b:b0:af:09:39:
e0:5f:c5:51:7d:af:80:e1:d8:b7:91:10:96:ef:ff:
8c:d9:a7:c2:c3:87:88:17:83:61:eb:29:3b:2b:a6:
e7:ca:dc:6f:70:db:73:4a:e7:17:d2:68:f3:82:a7:
e9:d4:b0:53:ad:53:44:94:a2:50:9d:80:af:dc:54:
0c:a6:ca:dc:22:49:cf:51:da:a0:75:1a:a7:cd:e1:
76:30:96:5e:33:1b:6b:17:d6:e5:fc:26:af:4f:f6:
b4:c1:b4:2c:ed:2c:82:dd:21:34:28:9c:c2:a0:2e:
61:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:FA:C7:DC:FC:A9:E0:FE:3E:EA:75:AA:49:A6:9E:56:EB:B9:8C:DB
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:77:43:ad:0d:db:63:fa:2a:d5:e4:a9:74:38:bb:44:66:95:
73:f6:af:13:d1:15:03:67:dd:14:fa:5a:9b:ce:9a:68:6d:a6:
b7:de:02:8e:69:12:85:33:da:9c:02:f9:f4:ab:c4:f1:18:97:
6d:fd:57:1f:e0:a3:af:fd:fc:35:07:3e:72:bf:8c:ef:6d:ed:
f2:3e:29:fb:5b:da:f7:6b:3f:02:be:dc:d7:35:8e:22:40:65:
a0:be:99:8d:e6:1b:cd:b6:29:45:4c:20:1a:73:ef:f6:3e:2c:
54:ad:b3:a1:e4:51:96:30:e2:d0:1b:09:74:bc:95:42:56:b6:
ab:fe:9f:1e:28:34:87:c6:2e:2c:bf:9c:a7:8d:e1:6a:49:39:
40:c1:13:3a:ae:98:3b:dc:56:69:51:50:3c:07:d0:c1:91:49:
6f:3c:c7:bc:e5:15:79:0d:93:48:dc:86:f9:6d:c5:b0:32:63:
c3:cb:20:fc:38:87:5d:8e:21:bb:9d:1c:04:6c:91:64:8c:df:
6b:40:62:01:3d:6e:9e:46:02:a9:f9:5b:5d:6d:0a:94:31:d7:
74:4a:da:9c:22:b9:23:97:4e:90:18:0a:89:d0:ae:e0:78:23:
8a:ab:5e:d5:39:e5:30:6c:87:2e:46:4d:b0:fd:d6:f3:2f:be:
85:65:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:07:41 2026 by rpki-client