Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: /9DvxyiOoXksa03mWBiNAx113L3z2iowvS3AsvLS8K0=
Subject key identifier: 16:EB:2E:90:67:D7:58:7D:F3:70:48:9E:9B:15:3D:8A:F9:49:54:F1
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 01A10DDE22B8A59C6B6759C0539BFBF00E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 18DA
Signing time: Mon 05 Oct 2026 21:00:23 +0000
Manifest this update: Mon 05 Oct 2026 21:00:23 +0000
Manifest next update: Tue 06 Oct 2026 21:00:23 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: 6VDSb/GpWxLQahKtKDbPkGzchjH6OILh6RPd6FvLGdI=)
2: eqD1-410xbl18T07yvCtbxsa1Ms.roa (hash: IGD8JZ6WIWOq2cxiQwhCeO2QQ+pd/nJb7mzndaBQXkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0d:de:22:b8:a5:9c:6b:67:59:c0:53:9b:fb:f0:0e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Oct 5 21:00:23 2026 GMT
Not After : Oct 6 21:00:23 2026 GMT
Subject: CN=16eb2e9067d7587df370489e9b153d8af94954f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:92:63:c1:b2:e5:99:84:35:df:25:16:36:
5b:0e:7c:bd:06:d7:c5:5f:bf:60:0d:f7:4f:c1:8f:
c5:3a:2d:f6:7c:ae:44:db:a3:83:47:03:5d:6e:16:
7f:9e:15:9b:42:6f:d5:7c:bb:c4:68:33:fe:21:62:
57:85:38:08:f5:88:8e:73:73:85:70:08:1f:ce:8e:
d8:94:ce:d8:19:11:eb:d0:f4:e4:bf:a6:42:7b:c5:
ad:22:72:2c:7e:3b:47:ca:d8:31:51:f3:ba:6a:81:
93:bd:08:cc:aa:a5:c1:8b:31:e0:1b:5e:39:47:ba:
fa:9f:e9:e1:fe:0f:8d:bd:f3:23:92:a3:d0:89:8f:
b2:57:2a:b1:3d:b8:40:78:31:b9:00:57:50:5c:ae:
f8:47:78:78:d0:4d:e6:00:ef:1d:72:29:47:b2:ab:
e1:ca:fe:d6:70:cb:7b:1a:26:91:5a:d6:c3:fa:35:
73:a2:6d:94:d2:96:e9:68:a8:0c:25:81:67:ff:b9:
ad:f3:5f:76:8a:4b:a0:a5:eb:36:c5:3d:92:c1:31:
1c:b0:4e:6b:56:f5:a8:9a:15:59:a5:08:89:fe:8e:
66:64:83:4d:43:c0:d8:87:9e:ad:52:ae:2e:d2:96:
d3:03:69:14:74:31:5f:c6:bb:bb:ee:d1:f4:2f:7a:
52:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EB:2E:90:67:D7:58:7D:F3:70:48:9E:9B:15:3D:8A:F9:49:54:F1
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b1:02:28:c8:42:72:bf:bd:f0:f6:2e:c6:a7:1f:87:39:b1:
e7:bf:ff:c5:4b:0b:67:aa:b4:98:26:86:8b:3e:44:86:85:55:
4c:6a:7a:0d:e2:d3:26:42:db:9b:39:04:1d:d7:8b:75:6e:2b:
a3:53:a1:92:18:f2:85:91:87:3d:d3:7f:4c:d6:90:b7:7d:fd:
fb:a9:9e:e8:e4:09:3d:9d:ad:7c:b0:bd:2b:00:47:0e:11:02:
85:da:de:9a:cb:55:d7:02:92:82:20:9b:47:ff:dc:89:7c:e6:
f4:37:ab:9e:b3:c2:14:a0:23:cc:a5:23:d6:b6:72:69:44:13:
7d:97:cc:29:83:30:93:f2:56:2d:f1:ab:f0:b8:29:c0:07:e5:
61:f5:16:13:b0:97:c3:8b:fb:f3:2e:f6:b0:bc:77:5d:76:77:
67:95:30:54:87:33:b1:95:df:0c:71:50:63:8b:83:24:46:bc:
a7:4d:ae:7c:4a:ed:16:d9:4b:97:0b:91:c9:5e:a6:fa:18:ee:
34:a3:71:fc:78:04:87:41:a0:c3:c2:91:00:ae:65:6b:ee:4b:
6c:64:f3:da:fa:50:42:e3:f7:9a:b7:15:e0:81:51:54:45:b1:
01:f5:c7:1f:2e:7f:ab:11:bf:32:6d:df:01:71:6a:5d:86:cd:
4b:eb:8b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:53:55 2026 by rpki-client