Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: CrTvCgADX60rRjMG6uZ1XVUatawlkjlpc+VeWPu7Pbk=
Subject key identifier: 0B:B6:89:9D:9C:4A:B6:19:56:69:57:82:2B:B8:7F:CE:71:4F:65:17
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 01A06D27BD336681341EBE522EAD18268927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0AD1
Signing time: Fri 04 Sep 2026 16:01:55 +0000
Manifest this update: Fri 04 Sep 2026 16:01:55 +0000
Manifest next update: Sat 05 Sep 2026 16:01:55 +0000
Files and hashes: 1: XdHfu4aNbbqY05djIHZSat5N9NA.asa (hash: AUEcvgTMi0kC5OD2yO9q7Au5IXQUp3/LdfUmGStQlvw=)
2: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: xl8DS8UlvPCaHDH26cxE1HbcyzlwFGzDb67a/7X3UJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:27:bd:33:66:81:34:1e:be:52:2e:ad:18:26:89:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Sep 4 16:01:55 2026 GMT
Not After : Sep 5 16:01:55 2026 GMT
Subject: CN=0bb6899d9c4ab619566957822bb87fce714f6517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5a:fe:7b:f8:d6:a0:cd:3a:01:73:a7:53:55:
01:78:91:07:22:3d:ba:f3:0a:64:3a:b3:65:c0:0b:
0a:f6:8a:25:e2:b4:a6:a1:36:08:0c:64:d0:ea:2b:
0d:4a:1d:d5:33:18:9c:55:eb:0e:ea:b6:07:9b:c4:
01:b2:c3:f7:1c:a5:d0:35:be:37:c6:42:bb:23:4a:
20:85:da:f6:d9:f4:3f:1e:19:b0:a1:94:8a:56:53:
10:2e:91:25:65:fb:20:24:e6:ab:86:02:1a:8e:e5:
91:99:e5:61:67:e2:f9:35:75:86:8c:c2:0e:b9:ef:
bb:7d:c5:c9:4c:be:63:3f:19:78:1e:46:34:62:f6:
4e:23:69:75:22:3e:14:d9:b2:a5:54:bc:c5:f1:29:
f5:6d:92:eb:e3:68:27:76:ca:a4:43:8d:96:84:77:
d2:fb:6f:5a:05:d6:9d:d0:74:85:8a:20:f5:2e:b6:
75:b1:60:85:0d:06:96:a7:5b:5d:56:9d:39:4e:ad:
74:5f:90:3f:20:4b:49:4e:76:64:2c:6e:f2:17:ee:
b1:e4:a2:35:8a:7c:cf:da:bf:82:a4:9a:26:19:cf:
00:9b:83:5d:a2:a4:83:ea:27:d7:37:7c:04:f2:15:
67:08:14:87:b3:90:d9:93:23:da:0d:5b:68:b6:45:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B6:89:9D:9C:4A:B6:19:56:69:57:82:2B:B8:7F:CE:71:4F:65:17
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:58:79:bc:92:d1:2d:db:b4:33:c5:0c:44:88:8f:5a:d6:51:
3e:51:3d:50:ee:90:86:79:85:7d:14:77:ba:8c:4d:bf:83:f4:
37:8f:65:e6:15:5a:1e:43:ac:94:3a:d5:1c:ab:ca:7f:f3:5c:
66:e7:61:1b:ac:ce:e3:8c:a3:a2:fc:1c:eb:7b:57:0e:2d:d5:
88:1c:8d:5b:11:e2:3a:37:40:1b:94:cf:39:f9:f5:59:de:6a:
bf:5f:89:e4:ea:99:85:58:54:45:3f:ae:d4:f6:2c:f0:9e:54:
be:3f:6a:41:79:3a:54:cc:36:69:5f:16:76:01:20:59:eb:07:
bd:49:d9:95:1d:6e:91:20:88:a0:35:3c:e6:85:18:d2:a6:16:
be:f3:ae:0a:54:df:7a:82:e9:cf:af:70:da:ad:0a:d9:fe:b8:
31:c3:87:ea:40:7d:c7:36:13:9d:26:04:15:04:7e:1f:1a:26:
06:2a:ec:85:ac:a7:40:4f:97:00:cc:df:a3:a1:47:7e:88:99:
fb:99:5b:33:16:43:ff:b0:ff:24:ea:bb:ac:13:a8:90:bc:8b:
75:a5:10:c1:4a:c0:81:22:bd:75:43:03:71:64:aa:de:60:b0:
1c:48:84:ad:3e:7f:ac:4f:ab:85:9d:c9:dd:52:8d:d6:5a:a5:
6c:0e:4e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:47:24 2026 by rpki-client