Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: q5ggVKbGA3nrWBauVctApdzJ4d09sJB5iQVdD94x7mo=
Subject key identifier: DD:66:E0:A4:56:E8:FF:47:3A:D8:DE:8B:51:DB:F9:07:7B:92:E4:15
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 01A1607B7B1C7A53CB67027F2215700ECF6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0B4F
Signing time: Wed 21 Oct 2026 22:01:07 +0000
Manifest this update: Wed 21 Oct 2026 22:01:07 +0000
Manifest next update: Thu 22 Oct 2026 22:01:07 +0000
Files and hashes: 1: XdHfu4aNbbqY05djIHZSat5N9NA.asa (hash: AUEcvgTMi0kC5OD2yO9q7Au5IXQUp3/LdfUmGStQlvw=)
2: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: MkC6xK9sj/heSt9ll5L0gt03bd0GpYi1LuhUW1suLhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:7b:7b:1c:7a:53:cb:67:02:7f:22:15:70:0e:cf:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Oct 21 22:01:07 2026 GMT
Not After : Oct 22 22:01:07 2026 GMT
Subject: CN=dd66e0a456e8ff473ad8de8b51dbf9077b92e415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:eb:29:da:9c:82:f6:43:49:56:37:77:25:
91:4b:dd:93:8e:e0:72:e2:fd:9f:2e:17:99:c5:5a:
b3:3f:52:40:00:e2:aa:f8:83:29:bf:73:de:41:b8:
1a:22:4c:ae:d5:b2:e4:dd:fe:a0:bf:bd:05:95:85:
bb:70:ca:e3:ae:18:2b:96:67:ed:0f:2a:f2:3f:9f:
1e:14:be:61:49:1c:9f:98:d0:c9:61:9d:40:8e:15:
e6:03:f9:d4:86:57:c4:8b:60:02:ee:35:cf:82:9d:
e8:4e:e9:85:f9:13:f1:a4:16:08:bd:33:b8:28:4f:
36:aa:33:69:c1:d5:43:63:95:ab:c0:46:9c:4a:51:
a7:ab:b4:28:90:b9:59:76:89:da:65:99:a7:ab:30:
0c:4d:2d:ca:f2:61:0b:fa:13:cd:b9:b0:30:4c:59:
f3:82:5a:96:f9:1d:b7:d5:ff:88:0f:1d:d4:3e:74:
8a:20:1e:4b:e6:64:21:36:14:39:82:42:27:78:5c:
c7:4f:36:74:3f:c0:f8:cd:eb:93:f6:39:c7:8e:46:
88:05:3d:ad:53:92:c8:8e:d8:98:03:d6:0a:3d:f9:
f7:f5:02:ed:89:49:3a:50:3b:b5:48:99:ed:38:9f:
44:bf:e0:17:be:20:e6:48:70:0f:79:8c:0a:7c:c5:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:E0:A4:56:E8:FF:47:3A:D8:DE:8B:51:DB:F9:07:7B:92:E4:15
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:98:9e:70:f5:aa:bd:0f:a5:6d:75:e8:2d:6c:38:e8:fe:54:
31:ec:50:19:3d:87:d6:df:60:bd:7c:61:5c:f7:be:e8:8f:15:
a1:ab:58:36:62:7c:29:9e:ba:c6:18:f3:2e:2a:c5:74:a3:93:
71:18:80:71:b8:d6:02:8e:9a:7d:f9:74:09:b2:3a:e4:44:55:
28:7e:c3:84:58:75:25:1c:0d:c4:e3:83:a5:dc:dd:72:22:27:
59:e7:5c:7c:f0:c0:42:24:18:41:a5:c1:e1:00:38:6f:69:02:
36:92:da:1d:7d:d8:64:5b:74:e0:ea:e1:b4:fd:96:82:5d:7a:
fa:aa:fd:c1:b5:9e:e4:35:ca:64:60:b4:a7:84:17:ac:c4:87:
f3:a5:83:fe:bc:ef:fd:0b:e7:b0:dc:20:1b:71:1e:97:6c:9c:
6b:03:b8:98:be:12:91:c6:e1:11:b8:53:2d:8a:78:66:a6:47:
23:0b:68:22:4a:c4:fd:26:69:53:25:40:b0:0e:4d:8a:a0:6e:
8f:34:60:e1:34:57:73:78:fe:1d:c1:80:24:01:56:b6:bd:fa:
01:76:c3:27:3d:12:bb:ea:82:78:47:fa:78:40:5d:0f:76:f2:
ff:57:ff:e4:e1:a0:9a:d1:96:25:5e:52:e5:67:6c:3e:3c:be:
27:b1:e5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:22:44 2026 by rpki-client