Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: Z7o8o9EqFmGotMsvg5tzyHe7Q2W6W5wspQaCY/5VRWw=
Subject key identifier: 44:12:1C:3E:69:62:16:2C:91:37:61:11:50:E8:20:32:2E:3C:7B:30
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 01A0D237B7558965BE8027C713B70C729F3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 07:01:01 +0000
Manifest this update: Thu 24 Sep 2026 07:01:01 +0000
Manifest next update: Fri 25 Sep 2026 07:01:01 +0000
Files and hashes: 1: 1gpC6ZZOyt2mOkXIYbt5K_lzXps.asa (hash: JDIIwJMIws7Yan/EHkT9Ljq/fUXQU7hpu1yjAvkm5mo=)
2: SATda0Q9JgLf7FNzUfrTDL5vnEQ.roa (hash: XGliMsZWtirHhZX2xfYpxBaxkmF1dTUTYWoC+BYAPKw=)
3: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: WJSbWjQTsV364X0Wmxrj4+6VxAzAAgNCjBy315AYnNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:b7:55:89:65:be:80:27:c7:13:b7:0c:72:9f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Sep 24 07:01:01 2026 GMT
Not After : Sep 25 07:01:01 2026 GMT
Subject: CN=44121c3e6962162c9137611150e820322e3c7b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:c7:c7:29:84:e9:7c:f8:2c:e7:12:6e:34:
66:b9:f2:63:ec:56:90:8c:07:0a:63:39:d4:ff:c9:
1f:0f:67:fc:23:e5:bd:77:d7:78:0a:0c:ac:88:3e:
04:b9:5c:f2:03:88:13:0a:58:fc:db:3d:c8:69:98:
8a:28:fd:0b:b5:6d:b5:cf:c1:6d:42:36:c7:43:f1:
6b:41:d8:c4:5b:e6:31:57:0a:b3:8a:9c:7c:b2:fb:
c5:a2:b9:9b:4f:4a:9a:36:79:0b:4d:b6:7d:3c:e7:
c8:67:9d:2e:33:53:36:b2:18:99:b3:63:65:06:ef:
ce:1b:37:b7:a4:fa:b9:fd:e8:fb:6b:2e:e3:a5:b0:
dd:8f:75:73:17:3d:ff:fa:d2:bc:17:50:6c:bb:b5:
67:cd:31:47:2c:87:d7:85:b2:b4:df:4d:60:a0:fb:
99:fb:5e:d9:7b:93:ea:3b:2e:29:2a:8a:97:39:28:
77:a6:4e:29:f4:da:d1:f7:b6:3b:bf:14:92:b7:f0:
30:e0:3a:f2:1d:0b:ea:2e:09:67:34:10:ae:19:62:
e0:c3:5c:18:46:10:83:da:10:1a:3b:a2:c3:0d:ec:
28:0b:2b:1a:c0:08:c9:e0:11:05:e3:91:e7:4e:01:
c1:9a:d9:56:c8:3b:b8:0b:5b:b7:44:e4:de:3c:6c:
a1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:12:1C:3E:69:62:16:2C:91:37:61:11:50:E8:20:32:2E:3C:7B:30
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ef:dc:3a:56:bf:07:c6:5b:0d:81:65:e4:5b:0e:03:f1:4d:
54:26:e5:92:87:61:d8:f9:34:6b:15:64:48:71:60:c4:14:25:
29:7b:e3:e9:a4:95:d2:a0:33:fd:d0:77:6c:52:50:cb:34:d0:
a0:be:3b:3b:22:0d:81:6b:cc:85:79:28:8c:8f:f8:47:94:47:
aa:49:0c:26:35:b2:39:0c:4a:95:f1:26:d3:79:75:b7:0b:2e:
7f:98:23:6f:b7:04:4f:90:bf:fc:23:84:68:26:4b:ba:b7:81:
f2:f6:e6:49:55:c9:5b:59:98:88:a6:90:66:06:fe:60:fe:54:
52:a0:22:da:99:6b:f9:0c:55:ca:8e:26:6b:34:8a:6d:1b:8b:
80:bb:6a:63:9e:d7:f4:fc:ee:59:6f:9f:97:81:8b:25:34:0e:
97:1e:b4:8b:6d:c2:84:5b:f6:af:21:73:a5:e5:b7:b7:55:9b:
54:b6:24:04:2b:5e:fc:89:b8:f1:65:0c:20:4b:4e:b4:de:52:
38:a2:4b:4b:82:d3:39:95:f6:76:f3:73:b9:5e:7e:e0:79:13:
39:fb:3a:80:63:6c:34:66:34:84:47:d7:bf:a3:be:74:95:cd:
46:fd:72:0e:cd:be:31:e3:22:53:c9:52:bb:dd:7e:a0:82:05:
08:4b:e0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:01:38 2026 by rpki-client