Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
File: Q8FllZZq-wus8deTfyRdagUiIaM.mft (raw, json)
Hash identifier: abnxD0uQSURqQHg7teJdNDG4gex4evVcZ9P2CgDNsy4=
Subject key identifier: 00:1E:1C:EA:08:A3:B9:3C:0B:6C:18:7F:B8:02:1B:D7:27:D1:69:59
Authority key identifier: 43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
Certificate issuer: /CN=43c16595966afb0bacf1d7937f245d6a052221a3
Certificate serial: 01A08C0D33706FAADF69E54E55F7F6C52AAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 16:01:10 +0000
Manifest this update: Thu 10 Sep 2026 16:01:10 +0000
Manifest next update: Fri 11 Sep 2026 16:01:10 +0000
Files and hashes: 1: 4txRYI484TEAkKZQuGXE7v7kNFE.roa (hash: 0LHuR+m3x801pvrNDlfkYNVRhvh7QTNXeF2avzGdu+o=)
2: 7j99n4d6ANqzBKZIb7AtbN16HNM.roa (hash: rlAo1p9sV9yO7tsi280DXkwJRnsLW38pb6gpoEvvu7w=)
3: Oo3ap3FWMfZFuKT_5X4cPgbvWBY.roa (hash: SClF6a/p5GxrqHhEbYnu5sljGKEXM6UG1fAy0VW6itY=)
4: Q8FllZZq-wus8deTfyRdagUiIaM.crl (hash: CDhc5iNaZjb/L2Vnlw8WoZEyBThOagE/nvj0KoQoIsg=)
5: ZoLYEk24uuNv33EjJ4m1okSNS6w.roa (hash: aOyue5Aqc/KW4Mnoyy7ahJjLtcQmVKEsi36/Y3I9yHA=)
6: aj9euBKzI3NIH66jZPh8bbmGI6A.roa (hash: 8jTNJ61hr37vcKXTL8TlYqDMnFRq1ith6TwEVeBelwE=)
7: nH1OKpXJbAvAHxN6XWdXMd6gZuY.roa (hash: j3S1I730IB3QQneXnDNotR19hJRoRUA2SbUVmp/YndQ=)
8: ottEKlKze703Xucot2ljZZmoong.roa (hash: 1DtEnDgUDcQi4vqWCrTRW5+Lsqb1kTbcbswrOF8wGaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:33:70:6f:aa:df:69:e5:4e:55:f7:f6:c5:2a:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16595966afb0bacf1d7937f245d6a052221a3
Validity
Not Before: Sep 10 16:01:10 2026 GMT
Not After : Sep 11 16:01:10 2026 GMT
Subject: CN=001e1cea08a3b93c0b6c187fb8021bd727d16959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:85:ef:9c:1b:39:c5:f7:96:18:4f:88:e9:dd:
43:29:ed:f8:b1:89:2b:00:ed:0c:86:c0:39:88:1c:
ce:c8:60:41:db:5e:f4:ef:4c:83:b0:12:2a:21:4f:
7d:2b:93:88:4a:8c:b7:6b:60:72:4e:9c:ca:c5:79:
61:c8:73:f5:ff:8e:b8:9e:e5:98:be:7e:bc:3c:9e:
87:5a:2f:1c:0b:44:ed:ab:c8:99:77:61:2c:6e:39:
96:03:2a:a4:76:a0:de:f3:e4:a8:b7:d8:61:83:6b:
b8:f8:62:18:2a:4d:aa:a9:8d:be:bc:00:ba:53:55:
04:88:d5:f4:40:4d:38:d8:7c:d3:a5:ad:47:bc:a2:
e6:08:bd:bb:81:ae:ef:5e:d5:c8:d0:0c:9c:b1:46:
7e:d4:96:e2:b8:d5:18:b1:13:53:82:91:74:f0:34:
f3:19:72:40:ea:d2:0a:3c:01:69:e4:47:df:db:dd:
08:b8:9f:b3:f6:b5:6b:62:07:4d:79:73:d6:0c:09:
4a:59:da:c6:09:cb:6b:c8:56:13:76:82:a5:1f:b4:
55:d2:52:55:71:ca:ec:3b:e9:40:17:6b:6f:23:7b:
d3:2a:b4:72:4f:66:ff:77:91:c9:c2:f7:9f:98:96:
a0:4c:58:b0:28:24:2a:49:df:1c:f2:7a:9e:64:0e:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1E:1C:EA:08:A3:B9:3C:0B:6C:18:7F:B8:02:1B:D7:27:D1:69:59
X509v3 Authority Key Identifier:
keyid:43:C1:65:95:96:6A:FB:0B:AC:F1:D7:93:7F:24:5D:6A:05:22:21:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8FllZZq-wus8deTfyRdagUiIaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d92919-962b-448d-98db-5990ea58e030/1/Q8FllZZq-wus8deTfyRdagUiIaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b3:48:0e:6f:47:1e:0a:65:d3:89:4a:51:80:8d:de:50:78:
60:fb:bb:ff:3d:66:4e:2a:26:87:78:cf:df:cc:a4:cc:cf:5d:
9f:1f:06:8a:f1:e0:ba:79:ab:e7:60:91:61:1f:e7:06:18:6b:
09:16:9a:6a:a4:d3:1b:43:f5:af:10:a3:0e:25:72:13:7c:b1:
a1:70:75:0c:e3:11:e4:0f:d5:9d:a1:0f:4f:83:d6:74:2b:f6:
54:7d:6b:ba:84:c4:49:83:8b:a0:6b:e1:2c:a4:85:d9:66:c1:
7b:da:f3:a2:c7:40:11:e3:48:2f:fa:9f:a8:e5:54:c8:b1:f1:
46:fd:42:83:9d:a9:32:77:ae:9d:ef:45:77:c6:e0:6b:0c:2c:
67:40:ef:b9:65:c6:05:bb:47:d0:80:1e:7e:6b:35:9d:b7:a1:
59:64:94:5b:9b:5f:95:92:98:df:56:15:56:c9:66:26:84:c6:
9e:99:c1:2a:ba:49:ca:63:5b:17:57:ab:7c:09:05:24:18:e6:
4b:e3:20:12:e5:c6:23:22:62:04:89:a3:8a:c1:73:87:5f:e1:
a6:15:4f:e0:17:68:13:0a:44:8d:2e:dd:75:50:f5:c1:a1:45:
51:d7:79:44:ee:6d:b9:71:f1:c1:ab:ed:52:67:4f:b7:2f:50:
7b:9a:db:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:12:18 2026 by rpki-client