Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
File: qHxnPzWntwWmtCTTORT6OS07li4.mft (raw, json)
Hash identifier: /366UJcEQbfHUPzfqu0uaour83vrPKhg3BYqjXq2oRQ=
Subject key identifier: 4A:0E:19:41:E5:9F:60:D2:E3:37:E7:89:D4:1C:CD:17:B6:F6:A7:C5
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 01A0DD29C0AECFF9D9C8F89154180417DC0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
Manifest number: 0CED
Signing time: Sat 26 Sep 2026 10:01:35 +0000
Manifest this update: Sat 26 Sep 2026 10:01:35 +0000
Manifest next update: Sun 27 Sep 2026 10:01:35 +0000
Files and hashes: 1: MdQ19d3eFkD78fJxuXq5iy-2rpM.roa (hash: rp9j2xxR/tRXFv1++j74kJ2PghVMO1/nSR5xC0/6LuE=)
2: qHxnPzWntwWmtCTTORT6OS07li4.crl (hash: 1pXN7+Ulr2Ha5TmvNDQwAw2K/kc9WrQm3GOYONhzay8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:29:c0:ae:cf:f9:d9:c8:f8:91:54:18:04:17:dc:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Sep 26 10:01:35 2026 GMT
Not After : Sep 27 10:01:35 2026 GMT
Subject: CN=4a0e1941e59f60d2e337e789d41ccd17b6f6a7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:3f:fe:4d:14:34:2f:14:3d:64:92:5d:53:
42:58:42:6f:b9:87:04:66:59:e2:c3:02:10:4f:17:
47:28:25:a5:e1:61:88:93:87:a5:42:f5:9a:e4:6c:
81:0c:61:26:08:c4:50:3e:8d:f8:8c:55:64:e4:b2:
f9:d4:fe:39:22:56:20:1b:a9:55:8b:3a:b9:cf:15:
52:27:89:c0:de:59:11:e1:fe:f3:c4:35:69:cd:7d:
d5:7c:ba:b2:20:c5:59:f1:ff:f8:45:40:a1:fb:c6:
88:0d:01:66:fc:26:40:51:85:c4:f6:11:d4:29:0a:
cc:41:b5:3c:1d:e8:35:42:c9:ff:13:a5:c2:81:48:
94:d7:f5:80:2d:3b:80:36:59:59:47:72:c9:cc:8a:
7c:b5:67:00:e5:1d:b1:d5:ce:a9:4d:be:2f:bd:82:
98:08:4e:15:ab:99:b0:fb:7e:ba:b9:ad:1a:e1:76:
eb:9f:3c:2b:85:91:74:1d:9d:9c:47:9a:69:95:11:
d2:9b:5b:68:9a:08:0a:4c:b9:6a:bb:2d:e6:21:e3:
aa:c9:ae:a2:ce:9e:61:22:fc:31:79:aa:b5:15:c6:
93:b0:af:7d:3f:63:05:5e:e2:fa:f2:1d:65:e4:ca:
87:99:1f:75:dc:27:d1:84:8a:6f:ec:d2:52:0b:e7:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0E:19:41:E5:9F:60:D2:E3:37:E7:89:D4:1C:CD:17:B6:F6:A7:C5
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b5:6e:15:8a:19:15:14:c6:58:da:f1:70:d7:47:ed:e9:bb:
81:c6:b9:1b:2a:a8:9e:28:24:51:f6:65:00:2f:3e:12:ec:be:
ad:8d:ed:d1:c6:0e:03:f2:32:25:dc:76:8a:43:10:9b:1c:d3:
5c:b8:11:5f:96:d0:fd:92:a2:e9:80:ba:89:d4:95:fa:48:dc:
4a:54:af:4c:54:98:5c:ad:75:e9:d7:ca:7b:47:7f:42:c5:4d:
79:d9:cd:fe:6c:45:60:9f:18:7b:03:5e:7b:a1:9f:7a:9b:f1:
97:1e:ed:1b:2d:b2:bc:d5:87:25:92:aa:d8:cb:4b:a3:70:80:
bb:50:df:54:61:59:e2:e1:53:3a:12:f5:14:0f:bb:d2:41:e8:
03:02:ec:17:68:b5:ee:f3:6c:03:55:cd:37:ef:e4:8b:97:90:
d5:ba:30:f3:bc:13:95:f8:f2:6b:2f:94:7f:06:cd:b7:9e:8d:
0d:a8:76:8c:f7:f6:cf:56:d5:42:61:9b:8b:8f:3e:93:91:f1:
54:b8:41:85:ef:4d:50:31:0c:07:7f:b5:bb:a4:d5:cb:b9:95:
22:e5:fd:d2:7b:7a:e0:ca:83:af:ab:d3:3e:5a:69:c2:12:a2:
5f:4a:92:01:1e:b4:13:41:69:b9:99:c5:d6:a4:ce:a3:ab:60:
7e:97:4b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:29:04 2026 by rpki-client