Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
File: Q68umH0rY63apa3BePMekNh2qqc.mft (raw, json)
Hash identifier: iytRjsegfH9OpArq/zwx5xSgvDIOrDfH3+mo2s030HQ=
Subject key identifier: A2:EE:8D:B3:26:93:CF:8A:36:BA:F6:0E:B2:BF:92:CC:1F:E3:BD:F3
Authority key identifier: 43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
Certificate issuer: /CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Certificate serial: 01A0DEAA7E7E0BAD5D28C1C0E04E505B4A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
Manifest number: 1A7D
Signing time: Sat 26 Sep 2026 17:01:50 +0000
Manifest this update: Sat 26 Sep 2026 17:01:50 +0000
Manifest next update: Sun 27 Sep 2026 17:01:50 +0000
Files and hashes: 1: 6h1PvR00lCR4R_OK63mWuUNm8Ow.roa (hash: nK88CLEdk1ROq2MFGTRKCThSy5zWr4KCZ19shw/qtOU=)
2: LkGDyqDRG7mHRocUIkDmSuw1vWQ.roa (hash: J9hPT1FhbaaEOwCdYHU6hR/yFBmZm/8O5bYD8Dyfv0Y=)
3: Q68umH0rY63apa3BePMekNh2qqc.crl (hash: TgHE+vmnGLWsBmz+T3MYITXUjDaMX/cuoUdnyM7YKPM=)
4: qLlkVW88V5PBegH_90cR2KF7_xI.roa (hash: FkgU7aRp19Haw31aWCRlRZvTAOJ47Up6IijdLGyXvAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:aa:7e:7e:0b:ad:5d:28:c1:c0:e0:4e:50:5b:4a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43af2e987d2b63addaa5adc178f31e90d876aaa7
Validity
Not Before: Sep 26 17:01:50 2026 GMT
Not After : Sep 27 17:01:50 2026 GMT
Subject: CN=a2ee8db32693cf8a36baf60eb2bf92cc1fe3bdf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:03:c9:f7:f2:e8:26:50:8f:d6:71:c4:e0:a1:
a6:e4:37:ab:1a:75:c6:9e:11:41:d1:ae:fd:78:e1:
b2:79:4e:e8:05:3e:a0:fb:d3:c7:fa:9d:a9:a8:82:
f7:b9:08:e2:d5:1d:c0:ab:d7:0a:0f:c1:b1:e5:13:
80:43:e7:50:30:7e:e9:50:50:d4:b3:05:4b:d5:0e:
ce:37:b8:55:74:63:73:ba:bf:ce:4c:80:d5:22:35:
94:eb:88:e1:e1:4b:07:52:bf:41:2a:6e:93:26:b2:
58:33:52:93:9f:4a:a1:1d:6a:ba:31:d4:ad:e1:a2:
1b:7e:1c:0f:7e:35:28:a5:05:d3:c4:48:66:ce:1f:
f2:cb:35:f0:17:e9:46:49:4c:0e:77:c1:65:b7:44:
5b:58:fd:fb:2e:62:fd:f9:97:05:55:a9:7c:82:8e:
0a:c7:13:48:f2:0c:f0:1c:9d:07:5b:c5:eb:64:f5:
1d:51:88:01:08:ff:91:3f:a8:4e:35:01:53:1d:8f:
f8:f6:c4:20:c3:35:4b:40:99:5d:35:30:c2:77:50:
18:ce:18:87:ea:ac:71:39:65:87:f6:51:a4:0a:bf:
43:64:e9:fc:27:dc:d8:49:14:3e:86:f2:ff:19:26:
06:1b:5a:68:50:5b:ae:8f:96:50:d2:39:79:a4:25:
9a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EE:8D:B3:26:93:CF:8A:36:BA:F6:0E:B2:BF:92:CC:1F:E3:BD:F3
X509v3 Authority Key Identifier:
keyid:43:AF:2E:98:7D:2B:63:AD:DA:A5:AD:C1:78:F3:1E:90:D8:76:AA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q68umH0rY63apa3BePMekNh2qqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/668437-97c2-48c2-b7c8-cc7746719406/1/Q68umH0rY63apa3BePMekNh2qqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:19:0e:7a:f4:d2:96:86:58:7a:73:dc:9a:75:c1:7b:8c:ba:
02:c4:9d:10:ac:94:b5:31:d0:d8:12:87:16:48:3e:5b:cb:4f:
f3:35:bc:7d:78:ff:02:d5:cc:a4:53:8c:cc:03:bc:35:63:43:
9b:fa:04:c0:50:05:56:0f:38:15:05:e5:f2:40:c0:71:99:05:
c9:69:7f:2d:87:5e:b2:9c:db:30:a1:32:2d:f3:26:ed:a2:71:
71:bb:43:96:9c:0b:77:b0:77:75:10:fd:73:5f:d9:d9:a0:83:
7f:84:5e:e4:e4:4a:b7:70:04:c0:d3:99:32:60:ed:24:1a:35:
cd:09:fe:a4:df:98:43:bd:1e:49:1c:93:ee:8a:48:47:5c:0d:
6b:56:7f:09:0d:5e:a7:1b:47:51:0b:c7:0a:86:27:c8:a3:ea:
de:3a:02:67:62:8a:7d:b5:d5:7e:73:4a:88:b0:80:01:de:e2:
d0:9e:ca:90:21:be:00:45:55:91:03:93:90:6b:b6:6d:82:9f:
11:5c:b3:87:e9:8d:28:1a:63:66:52:3d:b3:fc:7e:d5:4b:12:
3e:c5:5b:8e:76:9d:50:6b:ec:c4:0b:8d:3e:ff:20:c3:42:e7:
0b:2b:d5:01:e9:0d:9d:15:4e:66:c8:01:44:62:08:4c:f9:6e:
d3:cd:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:20:59 2026 by rpki-client