Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
File: qnXo86HZziwBs21atvwvdScw6-o.mft (raw, json)
Hash identifier: llzOJWqJbWDZ2mQLsJIzz3c1Z26VtE60IyxX6a/czAU=
Subject key identifier: 15:B2:9C:2C:A0:EB:06:55:1E:EC:7F:38:B8:40:D6:D0:67:B0:FD:94
Authority key identifier: AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
Certificate issuer: /CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Certificate serial: 01A0257B405B3D91C459C676A6AF45C0787F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
Manifest number: 66
Signing time: Fri 21 Aug 2026 18:00:29 +0000
Manifest this update: Fri 21 Aug 2026 18:00:29 +0000
Manifest next update: Sat 22 Aug 2026 18:00:29 +0000
Files and hashes: 1: F4bHO26ov_LXN2HmDVipaawO7m8.roa (hash: h7Mt3mdiFgijsbzUiijnPcewxsQWfduQBQ9fyFS37oY=)
2: qnXo86HZziwBs21atvwvdScw6-o.crl (hash: SfC+PhrrOzg0zZZNb+qT8nimIU0fxdeEW6VgQx2FMq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:25:7b:40:5b:3d:91:c4:59:c6:76:a6:af:45:c0:78:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Validity
Not Before: Aug 21 18:00:29 2026 GMT
Not After : Aug 22 18:00:29 2026 GMT
Subject: CN=15b29c2ca0eb06551eec7f38b840d6d067b0fd94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1f:dc:e0:cd:54:df:a8:73:3f:01:4e:fb:2f:
14:62:44:15:38:49:93:75:90:c7:44:1c:63:3c:a5:
1f:06:77:73:70:12:0c:f1:d7:25:d8:46:83:9f:43:
b7:87:93:2d:60:2a:eb:36:0e:e4:df:e5:cf:0a:19:
14:00:d6:c9:1c:a3:f5:5d:cb:88:f9:45:eb:49:99:
47:20:1b:63:4d:5f:73:c6:c1:1f:68:dd:c4:de:14:
19:e2:4d:1f:78:9b:a4:af:4e:8f:b4:7d:7e:46:be:
5d:50:84:78:22:8f:7e:3d:86:77:44:67:50:ca:89:
e3:c9:cb:5c:ee:34:89:37:6b:b4:ae:2f:b0:77:88:
57:e6:d2:e5:c6:42:9c:94:81:84:39:11:92:a1:23:
36:4c:e0:e0:10:cf:d0:4d:ac:d0:8a:c8:07:ff:dc:
26:a6:83:4e:f2:2e:a6:77:22:39:cb:84:d9:c4:3c:
bb:9b:41:28:0a:a8:bb:ee:44:c2:a2:b5:20:d2:d7:
53:b2:ac:fe:64:6b:cf:8a:37:0e:d3:9c:18:1d:a4:
a6:d0:b4:d7:04:14:9b:d7:69:0a:f2:19:0f:cc:fb:
ca:e2:7e:4c:b2:16:17:59:9c:aa:57:81:6b:7d:1a:
2a:38:5f:80:82:30:87:2a:b9:7e:16:af:d2:3d:ee:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:9C:2C:A0:EB:06:55:1E:EC:7F:38:B8:40:D6:D0:67:B0:FD:94
X509v3 Authority Key Identifier:
keyid:AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:f7:43:f3:d8:e3:38:80:58:75:04:cd:b3:60:f7:66:56:4f:
ac:92:be:a4:74:ec:0b:ca:fe:7c:2e:08:d0:70:b4:bb:70:25:
b0:1d:be:72:f1:52:24:9d:96:c3:74:f1:85:82:6b:c7:8a:0d:
df:17:49:19:8c:cd:64:fb:ae:e7:93:a4:23:db:9d:12:8d:bd:
5e:3c:42:33:1e:a6:0a:e6:31:66:f4:e2:6f:61:32:4f:f8:2e:
cd:eb:28:14:e6:f2:f8:e6:a2:dc:f8:d9:a2:43:8d:8c:70:d2:
46:5e:18:78:44:4a:7d:cf:b0:a4:c6:9b:ca:6d:a2:8e:c8:d1:
34:8a:e0:af:6a:66:83:fe:54:2b:38:66:de:f4:12:02:ab:bc:
ef:ad:9e:79:24:b1:15:3c:4b:96:ee:56:f8:b6:4d:75:0f:ce:
c0:23:88:d5:3f:4d:00:91:5b:fc:58:e1:84:3c:50:d0:2b:c8:
49:2d:98:95:6d:ab:2f:6b:f5:2f:04:0f:0a:f0:78:20:ee:b9:
b5:99:9f:d1:4d:37:a5:67:05:92:a7:b3:cd:66:81:3e:4d:46:
25:b1:5a:28:81:82:9f:d3:8f:17:61:24:dd:55:bc:e8:f1:0e:
b2:b6:bf:a0:74:6f:0e:59:cd:27:17:0b:cc:a5:9e:34:c0:ee:
68:b0:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:31:57 2026 by rpki-client