Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
File: qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft (raw, json)
Hash identifier: o6fiwIk348Ykhg/3/jw17x35ZJ7YR0Q+dEJUZCBmNas=
Subject key identifier: 5B:4C:94:F5:62:4D:42:71:FE:0D:48:EE:D1:F6:AB:3A:D5:EB:37:3A
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 01A0021409571841D984A300F7C9FBFE83F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
Manifest number: 1096
Signing time: Fri 14 Aug 2026 21:01:02 +0000
Manifest this update: Fri 14 Aug 2026 21:01:02 +0000
Manifest next update: Sat 15 Aug 2026 21:01:02 +0000
Files and hashes: 1: bhlKdXGmWCr9DFWjhc8P0wglZIc.roa (hash: jECjuduWw41GZ7hEmsgN93fP6SWVQcwry3yoxhpzbrA=)
2: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (hash: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=)
3: qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl (hash: 3WxbspJG01ebR3phnQudwTQ6Wf2xpwaFDepJYToZHgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:09:57:18:41:d9:84:a3:00:f7:c9:fb:fe:83:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Aug 14 21:01:02 2026 GMT
Not After : Aug 15 21:01:02 2026 GMT
Subject: CN=5b4c94f5624d4271fe0d48eed1f6ab3ad5eb373a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ed:41:c3:24:3f:f8:17:5c:78:36:f7:5e:f3:
07:b4:0d:a8:f3:f8:b2:86:5a:5b:4c:f9:d4:d6:a3:
69:bb:88:e5:cc:f1:e4:ec:b7:ff:18:6a:62:0a:b4:
22:13:03:92:fc:86:a9:71:f1:79:9a:b0:30:7f:58:
a6:80:e7:59:7d:cf:1c:2d:9d:5e:85:c8:da:de:0a:
1f:85:b4:a7:da:c4:73:9c:5d:c5:0b:e0:aa:8f:7d:
f8:70:53:57:3f:56:34:27:1e:f3:f5:58:2b:4a:1e:
05:23:51:61:1f:0b:35:17:43:ee:51:d7:82:5f:78:
61:f7:d3:a2:b2:c6:21:37:11:6e:c4:5b:99:d6:2b:
fa:3d:42:f0:38:1b:f5:c8:7a:c8:93:b6:88:7d:21:
99:62:11:ea:18:1b:3f:c5:cb:be:4b:36:1a:75:3a:
be:a2:4a:4b:6e:17:95:96:fe:4a:7c:9e:41:48:37:
c4:31:76:20:b5:31:cb:eb:62:46:bd:ae:c0:3c:3f:
2a:49:02:76:1e:49:c5:e0:f7:1e:e6:ee:66:33:3e:
07:74:4b:49:a4:43:2d:c2:90:8c:df:5b:6c:fa:bc:
f0:16:42:c6:58:3b:93:ee:69:d1:8b:93:07:1a:03:
f5:7d:3e:76:c4:57:35:ad:8e:2b:54:8e:82:fb:3c:
6f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4C:94:F5:62:4D:42:71:FE:0D:48:EE:D1:F6:AB:3A:D5:EB:37:3A
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:75:aa:41:ae:d8:87:89:41:8e:bd:c2:70:88:82:46:2b:1c:
c3:18:6b:79:2b:35:b4:6b:2d:03:00:ba:c3:f0:20:95:7a:7c:
44:df:90:26:40:c7:9c:fe:e8:78:a8:0a:62:e8:58:f7:7e:2c:
3e:03:2b:01:e6:d9:7a:67:e0:36:30:4d:04:ca:dc:8c:a1:28:
9b:7e:e0:24:d4:0a:fa:c5:44:7a:a2:f0:23:6b:d6:7e:a3:d1:
2b:9a:0f:7d:dd:4f:69:c0:1a:a8:77:a7:f5:60:02:86:5d:4a:
4f:b9:24:29:b9:99:05:c8:46:3d:8d:14:2a:07:00:d3:e5:49:
c8:d7:d9:01:5e:41:51:40:25:f2:07:c4:7f:42:5f:7d:a8:3f:
f9:35:e5:f7:b7:df:16:f4:2e:76:a1:c1:8c:12:db:61:f3:74:
20:a5:ea:9a:23:3c:b9:8a:54:fb:ac:d0:9d:69:a1:ba:c0:b9:
5b:ac:a5:1c:49:45:34:cb:3b:6e:9d:ab:14:05:5f:f9:0f:47:
f6:79:a8:1e:90:46:eb:28:fa:bb:dd:06:c1:d3:ba:72:f9:20:
62:22:55:ca:d5:da:0e:b7:64:6d:47:40:24:65:c8:42:b4:5c:
ec:f2:3d:7a:87:b7:f5:29:24:4b:8a:a3:2f:a0:f8:04:bf:42:
52:e8:39:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:55:35 2026 by rpki-client