Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
File: q9h7vvWUNUayqD0x7CuZrYg9Udc.mft (raw, json)
Hash identifier: iReS4VVj0WUqb8Vr0dPm7OYwFdw/cSvTWtRZBvdoKTo=
Subject key identifier: 02:32:11:87:CA:E4:68:7D:7A:76:6C:59:E5:14:C3:6E:66:C2:A4:38
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 01A0803FDF00690CC1E396D40CAD80A0DA32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
Manifest number: 0FAC
Signing time: Tue 08 Sep 2026 09:01:04 +0000
Manifest this update: Tue 08 Sep 2026 09:01:04 +0000
Manifest next update: Wed 09 Sep 2026 09:01:04 +0000
Files and hashes: 1: AvxqIWZ-E7bh6G4yF6njgmxxMMI.roa (hash: Z+imZ5655NZiZ8Bxl+9m7o5Ixqod9YPgL5ar48lEv6c=)
2: K-ahINdD41JgL-Byf45-aq4Yt-Y.roa (hash: nC9sN51cfa4HOZXcNsr856hkOqt8qHqp9jXmGyml7So=)
3: Vm1c1WtjyqpCDDaFqRgWBPRuzTE.roa (hash: PhCalGp+MfsuVT1o+EaqpG+ubg4eyRCw+3C+dRQltm0=)
4: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (hash: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA=)
5: f2zTZpEDsIvIxhsE_dnFRl5OG_8.roa (hash: yHUBFABw75uTYWV0KIBM0hBMuveMLRvOaFfpx4Yhnrs=)
6: q9h7vvWUNUayqD0x7CuZrYg9Udc.crl (hash: P5HfZTugKuRqfORrNCfnSXCKidLeyqib08EE12Pz1rE=)
7: xPg3ixts576_t0Y2Dcdl16y63bo.roa (hash: H6jrNL+Kk9BCnloBNI5o9De2Xbd5ueQf5l8EejUb5Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:3f:df:00:69:0c:c1:e3:96:d4:0c:ad:80:a0:da:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: Sep 8 09:01:04 2026 GMT
Not After : Sep 9 09:01:04 2026 GMT
Subject: CN=02321187cae4687d7a766c59e514c36e66c2a438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:6d:ea:f2:3f:37:44:f1:ee:24:e0:10:b3:
64:e0:3c:36:cd:d1:bb:5e:94:c9:ea:a0:c5:c0:5a:
2b:4d:23:7b:2f:e9:39:00:b9:05:41:13:69:20:87:
64:43:ec:f8:9b:ba:ab:d2:c9:59:63:ca:9e:c0:14:
f6:a1:3a:e0:a1:3c:8b:28:ad:cf:3d:e8:5a:92:c1:
b7:aa:ed:75:37:64:4f:b6:28:c8:3f:3b:b8:88:6d:
83:a9:92:ea:11:ab:4c:4d:be:28:9f:95:50:b7:79:
61:35:59:53:4b:65:d7:34:95:37:44:2e:e6:74:8b:
68:bb:6a:d2:a3:b9:b6:22:26:c7:df:b6:87:d0:cb:
57:6c:8d:46:53:55:f1:66:6d:0a:3b:da:d3:4a:aa:
b5:71:65:96:ca:39:c6:7a:6c:da:e4:9b:24:7c:21:
be:54:a0:56:19:cd:d0:e0:35:3f:6c:1e:3e:4b:ba:
e6:06:83:e9:c7:76:a5:45:aa:70:45:0e:40:99:45:
50:d9:c9:03:86:a8:fe:b0:00:ee:d0:0b:36:19:8d:
34:1e:08:87:55:fe:ad:bc:f3:6e:3d:a1:93:b4:fe:
45:43:b6:1e:9c:9a:b4:7b:45:b8:e4:72:1a:04:6c:
03:33:3f:6b:0f:7e:7a:1a:08:df:30:50:ef:71:6f:
2a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:32:11:87:CA:E4:68:7D:7A:76:6C:59:E5:14:C3:6E:66:C2:A4:38
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d3:1b:0a:42:26:4d:9b:73:9f:44:ba:7b:8b:6a:39:b5:15:
28:ca:29:94:97:3c:87:c7:ea:74:17:4c:f4:12:b2:dd:92:1f:
29:68:b4:04:2c:10:28:f2:45:9a:8a:55:a0:d5:16:d1:aa:cb:
aa:cc:68:1e:fe:ae:cb:18:45:b5:fc:c2:e1:23:46:83:36:d0:
a7:3b:12:40:41:05:af:f6:60:ce:89:bd:4d:63:4a:57:c2:ac:
c1:f6:9e:3c:69:3c:45:c9:ec:21:df:bf:ef:43:c0:4f:db:c1:
96:b4:ee:a2:7b:8a:e2:5f:c7:ba:e5:3a:f6:7d:d0:78:70:40:
e7:3c:f6:da:1d:85:ab:78:68:50:6b:49:71:68:19:a1:5d:54:
69:3a:8e:79:5b:23:9b:63:50:8a:da:ee:b8:fc:06:46:55:f7:
17:9b:77:d1:75:c7:47:c5:46:6f:1d:9a:4c:6c:e2:52:86:1b:
3b:9c:dc:00:c5:a9:f1:a5:e3:f6:e7:07:2e:82:1a:ec:c6:cf:
2d:f3:f5:24:40:dc:33:ec:3b:a5:dd:c0:fb:02:b6:c6:0e:d1:
a0:cb:3b:35:76:d8:eb:61:e8:23:92:43:c1:51:0e:96:64:1e:
e0:3a:01:35:96:4b:a3:0a:0f:3d:2b:73:4c:82:6a:f7:6b:a1:
ad:da:6f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 20:41:04 2026 by rpki-client