Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
File: qnXo86HZziwBs21atvwvdScw6-o.mft (raw, json)
Hash identifier: UM1qzTZnM1ivWlgSKjTFakw6Vas2YsEpMtgLIu1DY5A=
Subject key identifier: 09:1F:88:3D:5A:A9:32:CE:70:A7:B9:B6:F5:FF:2B:6B:A8:51:60:0C
Authority key identifier: AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
Certificate issuer: /CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Certificate serial: 01A135C7AF24397EFD7CFC56B734A48E9972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
Manifest number: F3
Signing time: Tue 13 Oct 2026 15:00:40 +0000
Manifest this update: Tue 13 Oct 2026 15:00:40 +0000
Manifest next update: Wed 14 Oct 2026 15:00:40 +0000
Files and hashes: 1: F4bHO26ov_LXN2HmDVipaawO7m8.roa (hash: h7Mt3mdiFgijsbzUiijnPcewxsQWfduQBQ9fyFS37oY=)
2: qnXo86HZziwBs21atvwvdScw6-o.crl (hash: oRr2bIU79/gzoWFTM/r/gJt5V9LnapfdOUrWhHkhBiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:c7:af:24:39:7e:fd:7c:fc:56:b7:34:a4:8e:99:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa75e8f3a1d9ce2c01b36d5ab6fc2f752730ebea
Validity
Not Before: Oct 13 15:00:40 2026 GMT
Not After : Oct 14 15:00:40 2026 GMT
Subject: CN=091f883d5aa932ce70a7b9b6f5ff2b6ba851600c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bc:ae:65:c9:07:c0:b5:be:34:93:d3:31:9f:
fa:ad:40:2c:95:76:35:7b:5a:36:d0:6a:52:0c:63:
c3:b4:a1:03:0f:1a:ed:e2:f9:bf:bc:7b:51:b0:fd:
87:b5:97:ea:61:09:f6:2c:8d:4e:5b:43:ec:f2:e3:
11:6d:ca:93:aa:8d:7b:ee:44:58:18:9b:c0:92:be:
09:0f:cf:f7:b8:8c:dc:50:ca:34:9f:a5:82:bd:0e:
41:0d:a4:80:fe:c2:c9:9d:53:8d:76:cb:a3:9f:78:
c2:c9:aa:9f:92:b3:56:a4:4b:07:4a:49:e5:12:d6:
b8:67:01:11:33:0f:eb:a8:a8:1c:b3:3b:13:a9:fc:
80:7e:da:1b:8f:77:45:2e:46:b1:e8:40:34:4c:66:
23:d0:94:70:5a:6c:43:58:1d:13:b3:98:ab:cb:c9:
d0:24:b1:fc:6a:f9:1d:f3:52:a1:04:bd:88:e3:3f:
d2:52:5e:19:53:9a:58:4e:45:f9:e3:1f:f3:fb:c2:
bf:f4:c4:96:a2:1e:ff:d7:eb:90:e5:a5:60:39:be:
e8:ca:73:8a:73:7b:28:71:7a:34:62:75:23:c2:29:
6f:3a:9d:a8:da:fb:f9:4a:af:00:dc:9d:e1:8f:db:
fe:44:2a:02:57:eb:72:0d:fe:66:11:b3:d6:1d:d7:
5e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:1F:88:3D:5A:A9:32:CE:70:A7:B9:B6:F5:FF:2B:6B:A8:51:60:0C
X509v3 Authority Key Identifier:
keyid:AA:75:E8:F3:A1:D9:CE:2C:01:B3:6D:5A:B6:FC:2F:75:27:30:EB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnXo86HZziwBs21atvwvdScw6-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a2b150-c611-4d80-a0cc-981150a18a2b/1/qnXo86HZziwBs21atvwvdScw6-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:32:30:d8:9e:c6:96:2b:2a:1e:e2:6f:b6:72:a4:c1:c4:2a:
6b:13:d9:26:d8:09:5b:39:03:fc:91:e1:38:68:b0:bf:58:53:
19:c3:25:4a:98:63:62:3f:b5:7a:a3:10:71:c2:bb:5c:8a:0b:
a5:fc:20:8c:e7:17:90:f9:9f:5b:e9:1c:d6:92:7a:b8:98:ed:
11:50:3f:25:d1:81:45:0e:8c:33:c7:d6:d7:01:a1:a0:02:9c:
05:22:5b:f9:06:fa:b4:94:40:93:0c:91:4d:3c:2d:f0:cb:06:
54:2e:1b:7a:61:c1:e1:92:e4:bf:10:17:7d:1c:1d:cb:06:24:
9a:b8:5e:4e:eb:10:ce:e0:f9:f6:ad:e5:99:54:c2:68:4b:47:
a5:5e:fd:bb:85:c7:28:e8:d3:ae:cd:0c:50:3d:e5:c2:e6:c6:
f4:c6:e2:db:95:36:d2:d8:e8:78:b5:98:83:37:f0:c9:b3:7d:
9d:fb:ab:8b:fb:3c:cc:5d:2f:15:63:0c:db:99:4d:91:21:64:
cd:8b:8a:bd:f3:74:50:5b:8e:2e:7e:6f:59:b5:e9:72:d1:ae:
9e:e6:db:ba:41:f5:0c:d4:b8:4c:79:4c:0a:61:9d:c4:cc:ae:
ac:1e:3d:46:dd:94:bf:a2:ab:ca:65:b8:65:89:f4:78:e2:d9:
a3:c0:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:43:05 2026 by rpki-client