Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File: q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier: NfWHHFyV7L+NUItZ5+WPDR/7OqeQB7mq4+WhNIE+FYg=
Subject key identifier: 67:8F:C7:D8:4D:42:CE:9D:B4:B5:E1:F7:53:42:4A:22:F9:B8:22:74
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 01A111BC17E9E5317A86078EA99930366AD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number: 1AD2
Signing time: Tue 06 Oct 2026 15:01:41 +0000
Manifest this update: Tue 06 Oct 2026 15:01:41 +0000
Manifest next update: Wed 07 Oct 2026 15:01:41 +0000
Files and hashes: 1: 7QXSQMVR5e3PA33Tbe1jUFBiBtU.roa (hash: Fu/x5ydAHbzxjRuQ9kPsYtD1frLQkvc1el/MBrSoppE=)
2: D_nN_vPhKORNTjWjIas_aeL_fw4.roa (hash: 2kCeAo6j8PDX4i6BTYf7QZybuVQ19wHuoI+CXgfbp/g=)
3: NIWJ9b544URGWTLtmkZjvf2kxIA.roa (hash: DSfziWB0uqzODbT1D3jvb0WNAfepSpfXbax16O29J9U=)
4: e7dlLb1mQuulDFLIJIubZnzn92Y.roa (hash: pjhxvegNUc0jD9hr5mE16h6OsbQxuTM2Z8MfFLGcvIk=)
5: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: tiOd9C9PMbsxlqPNFey6XxqLsP69KDpuXQ4bTDnVFq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:bc:17:e9:e5:31:7a:86:07:8e:a9:99:30:36:6a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Oct 6 15:01:41 2026 GMT
Not After : Oct 7 15:01:41 2026 GMT
Subject: CN=678fc7d84d42ce9db4b5e1f753424a22f9b82274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:cf:5e:d8:b2:2f:26:c7:51:27:ce:fb:b8:
b7:ed:4a:32:a9:35:fc:5a:a9:39:e9:ce:0f:b9:1d:
2c:91:54:a9:5a:b0:9b:33:c2:5b:d7:6a:8f:40:b4:
83:10:40:b0:10:34:37:a6:f4:ea:4c:48:6f:f3:19:
e9:d8:6f:b1:9f:cb:9d:62:e4:41:8f:fd:75:a6:80:
41:80:bc:4b:97:24:74:d0:30:0c:87:96:af:f7:b5:
d3:20:ee:9b:83:e3:4d:ae:1e:af:9a:59:f1:4a:c9:
a1:76:14:7f:fa:39:6d:9e:47:81:81:dd:2d:ac:63:
0b:63:49:2f:6e:6f:5c:a3:a6:ae:ea:2f:f0:8a:62:
14:1f:71:b6:16:38:36:c9:15:ef:5d:7c:34:53:d2:
1c:65:73:4a:f0:8e:73:3f:57:c2:85:e7:d5:31:5c:
a2:6e:ea:46:ca:ef:68:02:51:b3:36:42:be:60:1d:
e3:ac:5f:d9:2b:15:c5:f7:1d:28:7d:16:09:8f:a1:
e4:86:98:d0:ef:ae:c5:cb:c7:09:49:54:2f:1e:89:
ef:06:3b:4f:78:2b:24:3f:dd:22:c4:07:f6:c0:50:
80:88:99:a4:8e:e4:cc:60:ae:3d:99:e1:80:af:35:
e5:84:6c:12:dc:c6:b5:bc:b5:47:63:20:45:56:ee:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8F:C7:D8:4D:42:CE:9D:B4:B5:E1:F7:53:42:4A:22:F9:B8:22:74
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:df:ce:29:82:cc:b2:7f:f1:fe:fc:0f:0c:9b:e9:03:42:b0:
88:68:74:18:fb:23:7c:35:2b:d6:a3:83:a2:10:c2:d3:0e:98:
68:d6:f5:aa:82:5a:2d:d7:83:32:bd:10:0f:a3:4f:fa:dd:93:
1b:a3:d1:d7:36:6a:93:f6:6e:70:6e:f4:09:5c:72:22:2b:8b:
0f:c3:ef:28:5d:19:ec:2b:25:79:05:2c:5c:72:cb:6b:1c:1e:
35:bd:f7:56:0f:11:27:e2:a4:9a:07:44:00:5d:99:f0:37:cf:
ae:cc:99:a4:fd:25:9d:54:95:3b:f1:10:52:b7:8f:67:9f:9d:
e3:a1:c8:0b:e4:be:42:70:66:23:ca:b0:ed:d8:ef:b5:12:24:
67:be:6f:b6:d0:ee:5a:5a:53:dd:d4:3f:40:10:41:f5:90:91:
9c:16:9f:6c:e8:78:39:3b:12:f8:f2:9f:43:27:e3:33:fc:39:
84:69:4f:35:1b:03:9f:54:2f:01:3e:0f:48:10:7c:e2:0b:44:
99:05:66:90:14:82:a5:5d:4f:f3:6a:69:b6:61:99:d3:7f:bc:
ab:8a:37:83:0c:85:2e:95:51:e6:a9:3e:6f:7c:41:76:9b:2a:
63:55:31:c1:73:17:22:16:8f:d5:75:a3:c1:0e:ca:8c:84:22:
82:6a:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:53:44 2026 by rpki-client