Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json)
Hash identifier: 28YwdZyQYPdtlfVrjmlJhpY8QYTIyaL7iynbyGmfHfo=
Subject key identifier: 2E:EC:36:D5:BA:68:A5:0E:4D:22:73:10:CE:3B:18:FC:49:73:28:3A
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 01A089E76420C13D2ACE7D5613CD5C0B1574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 06:00:38 +0000
Manifest this update: Thu 10 Sep 2026 06:00:38 +0000
Manifest next update: Fri 11 Sep 2026 06:00:38 +0000
Files and hashes: 1: PwXZ36ew-cUGZEoEjPsdiwlwGDg.roa (hash: nvE+bb5C5rtF8YiUnSsjumFKZwx9bfJMyTTo8X52rsc=)
2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: oZpH+rP1gGIEmA6U5hnS99LrONhOGvFlAqq9QGr4cMc=)
3: kKPUL3XL5kfL6DXSXiFlJFUqzf8.roa (hash: MqfgECWtHRXZOaXWHtLXuKHhrTsYhuIDOqY4suEA3jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:64:20:c1:3d:2a:ce:7d:56:13:cd:5c:0b:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Sep 10 06:00:38 2026 GMT
Not After : Sep 11 06:00:38 2026 GMT
Subject: CN=2eec36d5ba68a50e4d227310ce3b18fc4973283a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:72:e3:46:be:bd:e5:93:33:b1:f0:68:b3:d4:
41:9d:ae:03:4b:01:86:16:3a:0f:9b:1d:93:dc:dd:
67:99:59:79:ab:a4:11:bd:a5:4c:0b:fc:fe:71:2d:
d0:72:5f:0c:36:67:7a:cf:6e:ae:6f:c9:91:c5:c3:
38:a8:67:dc:ed:56:53:27:b5:73:21:48:37:8d:10:
21:55:04:80:7a:1f:3f:fd:c5:b4:82:b7:03:dd:a6:
f4:af:6c:c1:ed:d5:0f:38:24:f8:c8:aa:60:79:06:
8e:f2:f1:8b:ea:97:ab:14:f0:8f:43:8b:46:96:95:
03:61:b9:c6:40:eb:6c:98:bf:cf:70:2d:0c:30:a1:
92:5f:0a:bd:6c:68:a3:14:ab:3e:ad:6e:b8:87:84:
69:49:3a:63:31:09:7a:b1:d2:07:9f:8b:16:1e:de:
94:8d:22:8a:a7:3b:fc:c9:46:08:2a:26:12:6e:d5:
39:31:38:ed:75:19:92:c6:e1:1a:49:a9:73:e2:17:
9a:ce:bd:45:7a:61:e7:31:03:2a:e4:3f:d3:cd:a7:
3b:a9:58:01:ec:fa:d8:38:5d:28:5f:b2:4e:68:33:
1d:f9:01:57:6a:c4:a7:78:3a:02:37:a2:35:dc:dd:
42:03:32:df:44:9c:cb:70:78:26:e0:63:9b:7d:45:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:EC:36:D5:BA:68:A5:0E:4D:22:73:10:CE:3B:18:FC:49:73:28:3A
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ee:c2:2e:49:fa:13:07:49:ea:c9:7e:b0:11:10:1a:8f:31:
95:5b:d5:36:c3:68:48:49:f4:c9:d5:e7:c2:d5:bf:a5:11:29:
c6:34:6a:36:3b:d6:a1:4b:ad:54:3f:b2:a8:90:a8:39:e4:d8:
d1:9c:24:3e:32:6f:d9:94:6d:61:42:37:5e:16:a5:28:4a:e2:
28:65:89:92:c9:6a:6a:b0:f8:5a:5b:f5:1a:ae:2b:1e:c7:d2:
88:d3:73:1d:c6:3b:9b:2f:c9:71:a3:c7:8b:bb:41:b1:a1:bc:
be:56:3e:45:80:db:68:4d:c2:12:61:b9:0b:40:fe:f3:0e:47:
b1:bf:b2:73:2f:58:e3:5f:17:c3:9b:c6:ed:74:a6:99:26:84:
29:23:5d:87:20:65:e0:e4:70:64:f3:76:15:bf:ad:69:e5:7f:
22:17:d0:34:ea:8e:16:48:b4:fd:73:62:7b:ed:21:b9:17:ed:
a3:fa:e6:9c:e5:b3:de:89:0b:68:be:52:c4:f0:db:ec:ee:48:
50:93:8d:c6:0d:92:a5:62:ab:45:9a:ff:8c:3b:14:d7:a1:c9:
5e:75:a7:34:d1:fd:f3:1a:d5:a9:8d:30:81:e9:c7:06:14:dd:
f9:8e:ab:11:c3:7d:85:f3:1b:23:89:4b:0e:6c:60:05:6f:cb:
87:dd:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:25:03 2026 by rpki-client