Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
File: RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft (raw, json)
Hash identifier: qMCy4hXwhfpVFWQJzsadJA+rgkjrwQQw1Dayel7kbQw=
Subject key identifier: 3C:B9:E7:7D:39:20:FA:DD:B9:C0:23:77:E3:73:0C:E0:CD:B2:23:40
Authority key identifier: 45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
Certificate issuer: /CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Certificate serial: 01A0D83C5EF29812F0A4F3C06B837D843862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
Manifest number: 01B7
Signing time: Fri 25 Sep 2026 11:03:50 +0000
Manifest this update: Fri 25 Sep 2026 11:03:50 +0000
Manifest next update: Sat 26 Sep 2026 11:03:50 +0000
Files and hashes: 1: 9YAXEYjhmhkxq2c5qhBIIlTvS2E.roa (hash: 55R+jdR0UJQmE1oLQNFzIpJd7w8rR1Qa8V5eWHVN66M=)
2: ELEtRZ5loRIGKf7-scqLr4hB53s.roa (hash: +gEhdH/1tkJ13QzR+izIQZXALlED/+ktkwEfPUTaTI8=)
3: Kl8Av8HTSqqtsIKPFJ9eAM1tcW8.asa (hash: 6I/UFrfGHL7pXTEoCzAXCGu9B83vEUFGM5JCdXCnrA0=)
4: RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl (hash: we+0Q93JCwk/ug07f6B4OyRdKqP+PRsBESfgzIhfCHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:5e:f2:98:12:f0:a4:f3:c0:6b:83:7d:84:38:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450cf1cc73826111ff975665b03a2648bb8c8d10
Validity
Not Before: Sep 25 11:03:50 2026 GMT
Not After : Sep 26 11:03:50 2026 GMT
Subject: CN=3cb9e77d3920faddb9c02377e3730ce0cdb22340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d2:76:54:86:d3:de:18:8b:27:ca:5d:9b:5c:
74:b5:68:25:e9:40:2b:b5:1f:7d:02:c5:c4:fc:41:
20:0f:d7:7f:fa:6c:01:fe:bd:98:f4:4b:e5:d5:df:
cd:19:7e:5a:7e:ff:f4:18:39:08:32:f7:7d:49:ad:
83:35:c2:f4:1f:4a:48:8f:ab:e8:42:d8:69:7e:54:
7c:e8:c7:43:c2:7c:78:ce:c0:5c:7c:e6:86:9d:6b:
c5:85:a9:b8:43:b9:75:8a:b3:f7:9c:1a:4f:5c:d9:
31:ff:79:64:96:14:d8:81:51:86:6d:b8:e9:13:5e:
bb:a3:08:37:ec:b2:31:53:5b:e5:22:66:3c:23:58:
af:a5:87:02:ea:cd:cf:43:68:a4:3f:f1:75:a7:ab:
8f:d5:bf:88:e1:8d:d7:b9:ea:e3:84:28:7b:ff:08:
b4:2c:60:e3:51:d2:b9:5f:ae:fb:2f:89:f2:c6:63:
a0:10:6d:28:44:0a:c6:ae:95:9a:91:6b:e0:7d:15:
cd:e8:72:ea:97:e4:43:29:94:03:07:6f:96:2f:06:
1f:7f:5e:d0:ac:8f:74:b2:cd:48:fc:a7:2e:8d:fa:
dc:46:d4:f6:ae:2b:cf:36:5b:63:99:dd:41:5e:a5:
ef:b5:9c:08:b5:0a:46:34:00:fb:54:ed:ee:1d:64:
02:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B9:E7:7D:39:20:FA:DD:B9:C0:23:77:E3:73:0C:E0:CD:B2:23:40
X509v3 Authority Key Identifier:
keyid:45:0C:F1:CC:73:82:61:11:FF:97:56:65:B0:3A:26:48:BB:8C:8D:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQzxzHOCYRH_l1ZlsDomSLuMjRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/00ddd7-0afa-41da-a339-b557862e5188/1/RQzxzHOCYRH_l1ZlsDomSLuMjRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1c:1b:f6:bd:e6:68:39:09:9d:42:15:9e:53:4c:7d:a0:0e:
dc:08:93:b6:69:12:79:c1:a5:86:82:37:81:cf:27:25:dc:58:
55:f0:40:55:5e:77:ca:22:cd:6e:64:ea:23:98:b4:6e:5c:ca:
29:b9:9d:65:ba:dc:24:5f:22:07:a6:c1:cd:e6:39:41:6e:ca:
b4:4a:2d:d1:1a:69:7c:6a:81:63:ff:f0:e2:fc:b7:2f:3c:b6:
4f:5c:00:8b:fc:69:56:27:0b:4b:01:b5:0c:7a:67:25:cf:96:
90:c8:5b:68:11:55:c2:71:5c:2e:06:08:46:41:e0:c1:db:19:
c4:6b:ce:42:29:59:a3:5f:67:32:85:7e:51:69:40:48:7b:84:
a6:41:ab:95:f8:f1:45:f9:c0:ba:77:55:88:b0:11:86:58:ac:
e6:db:14:4c:02:ac:94:b5:84:c8:11:88:b5:f3:d5:29:f6:69:
bf:17:bd:04:07:ad:75:7d:8e:c1:ab:35:76:9f:a0:68:a2:a9:
d7:82:1c:7d:71:24:94:a9:a1:9e:2a:93:be:c5:fe:a8:6e:9f:
98:5b:95:2a:de:d3:5a:41:88:ef:b0:75:20:e1:ec:73:35:25:
67:55:89:b8:0b:f5:b6:1b:e1:2a:97:0a:32:d7:00:44:f5:75:
da:93:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:31:21 2026 by rpki-client