Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
File: q6gfB6STo-ZDdS5mvYFG9Xca34g.mft (raw, json)
Hash identifier: 1UkFm1v4OZvf/ObAONwhYkYS8xCxc4gfUgxI0FzRtbo=
Subject key identifier: 67:3E:EE:3D:22:00:9B:CF:C8:B8:BB:7B:A0:BC:A2:C9:2A:36:D8:CC
Authority key identifier: AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
Certificate issuer: /CN=aba81f07a493a3e643752e66bd8146f5771adf88
Certificate serial: 01A08A1E303BF21E76BB25146168316DF0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
Manifest number: 1A22
Signing time: Thu 10 Sep 2026 07:00:29 +0000
Manifest this update: Thu 10 Sep 2026 07:00:29 +0000
Manifest next update: Fri 11 Sep 2026 07:00:29 +0000
Files and hashes: 1: KVyFy8VhCmWDFDfi6hznjqY-CiM.roa (hash: gxDIq6BgrSNUPikORcjw6F0p9+XkSRUjM2gZnMVK/i4=)
2: mHnLIzDp0K0uZ34p1Ju5C7yV-Jc.roa (hash: ndDoF5lyW5EcQE2tsppbm+3E+OkI4cfheb+pzHW2skk=)
3: q6gfB6STo-ZDdS5mvYFG9Xca34g.crl (hash: sKcolQoT/9gK/T7YKoqr8Aj5kCTh1viUUfyTZfR4AE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1e:30:3b:f2:1e:76:bb:25:14:61:68:31:6d:f0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aba81f07a493a3e643752e66bd8146f5771adf88
Validity
Not Before: Sep 10 07:00:29 2026 GMT
Not After : Sep 11 07:00:29 2026 GMT
Subject: CN=673eee3d22009bcfc8b8bb7ba0bca2c92a36d8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:06:e2:07:45:b0:59:ae:f7:a2:d8:f9:b3:
1c:8b:04:4c:8a:00:de:0f:76:b4:34:bf:d2:42:ff:
48:ba:58:6c:ab:dd:40:70:09:f7:45:c0:8b:c5:c3:
b6:9d:c0:09:4b:00:c3:1c:36:d0:ab:5d:a1:9d:43:
3c:92:8f:ad:bb:80:2b:33:f8:6d:78:d5:f3:f2:6a:
a3:66:e9:e4:dd:3b:66:c3:72:e3:c8:f3:56:e7:ca:
09:54:e4:30:4f:ee:c9:71:cd:c1:e9:1e:27:32:c9:
0b:7a:a1:c9:5d:2a:ae:87:ef:41:09:bf:b1:a7:cc:
bb:fe:b1:82:45:1c:9f:6e:b1:d6:df:28:4e:5f:36:
47:61:53:5f:91:f1:bf:64:c9:da:9f:5b:99:ce:81:
2d:f8:35:79:b1:77:d2:69:c0:d3:b1:9c:96:c7:01:
1f:38:ab:ca:47:da:82:fc:e0:d3:f2:f5:65:83:14:
6d:85:d7:cc:0e:86:88:f3:a4:33:e8:88:66:43:2d:
94:69:d4:5c:56:56:c5:75:bd:48:06:dd:f9:dc:e4:
08:2b:96:63:32:33:71:98:3e:f1:9a:3b:7d:8a:cf:
ed:bc:04:d4:4e:40:35:9c:62:72:05:25:49:12:4d:
76:e2:4f:a8:64:7b:dd:cf:9d:90:04:f1:6e:0a:ce:
1e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3E:EE:3D:22:00:9B:CF:C8:B8:BB:7B:A0:BC:A2:C9:2A:36:D8:CC
X509v3 Authority Key Identifier:
keyid:AB:A8:1F:07:A4:93:A3:E6:43:75:2E:66:BD:81:46:F5:77:1A:DF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6gfB6STo-ZDdS5mvYFG9Xca34g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/84e2ce-1eac-4e12-ac58-51c3ccce72df/1/q6gfB6STo-ZDdS5mvYFG9Xca34g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cf:a7:92:99:57:ea:5b:da:5e:34:e5:6f:6d:49:d0:ae:29:
60:1f:b2:34:1a:4c:31:4d:5a:c1:03:4f:af:3b:c3:7c:c8:df:
58:e7:03:5a:94:42:ba:9f:0a:6a:70:37:a1:16:20:fc:43:9c:
1c:5a:28:b4:5a:35:0a:d5:9e:7e:87:fc:7b:bd:45:77:62:44:
ff:10:b5:ba:0c:82:58:48:eb:af:a6:13:7a:17:2d:53:5f:f4:
1a:8c:65:f9:a8:2a:51:f0:17:0e:33:2b:47:e1:ef:02:50:1b:
43:ef:2f:7d:d0:a8:02:04:0e:4f:5c:e3:04:88:5b:32:d9:61:
90:f9:ce:28:90:53:c0:6d:55:6c:cc:6b:d7:ec:28:1d:e7:be:
df:d3:29:37:08:85:8f:8a:6d:cd:c8:bb:7b:db:a1:42:b1:f3:
17:b3:d0:d2:26:29:22:e9:a5:d1:53:b0:5e:1c:d6:0d:d6:db:
64:d5:ec:77:e6:9b:bc:07:91:67:d8:6a:5e:ea:5e:2f:cf:23:
77:cc:ec:2a:34:60:62:77:46:30:f2:28:97:c7:58:2a:95:eb:
97:20:4f:85:64:67:fa:cf:13:7a:bf:81:ab:92:b6:68:28:c6:
cd:e3:0c:e1:46:a8:b5:6f:6d:69:0c:83:8f:cd:9c:d6:d3:11:
22:3f:62:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:08:33 2026 by rpki-client