Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
File: QA8uoVe7tTqwJgEazlzRNg7y930.mft (raw, json)
Hash identifier: ce1zCvjfYkfDUS07v6rsK/vFljO4RhoAcarBtDQTPxU=
Subject key identifier: 2A:44:6F:E4:71:68:9C:AD:11:91:FE:23:C6:A8:01:6F:8E:C9:DC:48
Authority key identifier: 40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
Certificate issuer: /CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Certificate serial: 01A08C0DBEB0C0565F31B921B7B21C8BC205
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
Manifest number: 199D
Signing time: Thu 10 Sep 2026 16:01:46 +0000
Manifest this update: Thu 10 Sep 2026 16:01:46 +0000
Manifest next update: Fri 11 Sep 2026 16:01:46 +0000
Files and hashes: 1: 4oXgZ-1Ye2fC1cFU0rvhklNnNQI.roa (hash: b9MP0rdkmPkjLsxKnX60/w1PVwahqRg3qlsqfmJHgCk=)
2: QA8uoVe7tTqwJgEazlzRNg7y930.crl (hash: OB4j36ZooQujysJV+gYNoMla0L2VlvmsgSTD4KbDJuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:be:b0:c0:56:5f:31:b9:21:b7:b2:1c:8b:c2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=400f2ea157bbb53ab026011ace5cd1360ef2f77d
Validity
Not Before: Sep 10 16:01:46 2026 GMT
Not After : Sep 11 16:01:46 2026 GMT
Subject: CN=2a446fe471689cad1191fe23c6a8016f8ec9dc48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:22:7b:44:97:b5:91:63:10:81:24:03:78:82:
9d:71:21:b7:3a:38:f9:9e:63:52:10:a2:ee:cb:ac:
ba:1a:37:c9:3e:54:2a:08:5d:a3:05:56:13:02:81:
9b:45:e5:3e:3e:b6:4d:39:e8:fa:df:6b:97:04:36:
7d:d1:4a:48:1c:2d:bc:48:61:12:5b:1f:af:c6:54:
7c:3b:09:65:e6:d1:ad:be:64:ba:fa:9e:eb:68:2d:
58:b4:29:aa:69:d6:40:b8:42:f4:b9:43:e8:98:c4:
ee:54:f0:b2:9d:c8:46:b0:00:dd:37:9e:19:dd:93:
42:ef:ba:57:e6:b1:45:be:db:a7:ec:d4:ca:f9:10:
94:82:da:07:ce:56:64:f2:03:25:fa:14:7a:65:69:
f3:a8:73:3e:87:b1:db:20:70:fc:bf:3e:dc:4f:78:
11:f1:bc:55:63:d1:bd:75:cf:77:34:d4:e2:dc:1b:
09:96:c7:f7:36:04:1b:c7:51:ad:14:7b:8e:62:eb:
2f:5b:62:28:60:89:80:3a:91:de:4d:d5:55:4b:c4:
35:03:b0:11:6f:84:9d:ff:a6:21:05:c5:40:39:a0:
96:07:8c:0b:84:48:fb:65:a0:21:cf:35:7d:23:8f:
02:a4:ec:a2:e8:47:19:a5:95:1f:5c:dc:09:90:ab:
96:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:44:6F:E4:71:68:9C:AD:11:91:FE:23:C6:A8:01:6F:8E:C9:DC:48
X509v3 Authority Key Identifier:
keyid:40:0F:2E:A1:57:BB:B5:3A:B0:26:01:1A:CE:5C:D1:36:0E:F2:F7:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QA8uoVe7tTqwJgEazlzRNg7y930.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4bfd56-880d-499b-8724-d7971f1e599d/1/QA8uoVe7tTqwJgEazlzRNg7y930.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cf:e9:76:bb:35:22:9b:e4:45:a6:89:35:6e:f6:a0:48:53:
54:ec:b6:d0:b9:ea:61:d4:c4:64:db:d4:1e:8d:c6:41:ba:2f:
a4:87:6b:b9:33:3e:b4:b5:62:9e:5e:51:68:ed:44:00:2e:51:
83:3d:44:ec:36:b0:04:0d:39:ba:28:e0:1b:bf:5b:ba:32:0c:
fa:0c:54:6e:a9:3b:e4:54:99:84:7c:5c:6e:4d:c5:ca:25:e0:
a9:28:c3:6e:bb:22:1f:e4:1d:17:b5:8c:61:ad:98:2e:3d:dd:
31:17:31:9d:84:cc:96:18:3f:73:6f:43:f3:f1:32:bb:73:40:
65:e7:5a:58:0f:8b:c2:12:ec:37:cb:50:c6:4b:3d:cb:94:4b:
cd:b7:a7:90:80:9c:32:e7:c6:4b:87:ae:c0:00:08:84:24:ca:
4d:b1:2c:cf:e6:69:0a:31:a4:d0:14:d2:e8:c4:eb:d0:ab:f2:
5d:67:93:10:21:a3:dc:7f:d1:79:59:f2:9c:1f:02:23:b0:70:
df:5d:df:16:fc:a5:9f:ca:aa:1e:d5:b0:9b:d9:65:a7:8e:0f:
24:d3:6f:0b:24:f9:07:39:84:80:e4:73:3f:d9:65:94:23:b9:
05:32:f1:c6:b1:39:31:8c:4a:36:bd:22:52:80:75:08:c7:d3:
84:21:e1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:45:08 2026 by rpki-client