Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: uh/xiIJNqBBJrxX9cGG+w3VPVR3WdyGvGMJlgHZj2bo=
Subject key identifier: 2C:00:E8:91:16:83:D3:10:E2:C6:67:16:B4:5B:4E:10:BD:52:9F:29
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01A0D3F077966A6D7ABABC4B16B2D31E3200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 1A9A
Signing time: Thu 24 Sep 2026 15:02:26 +0000
Manifest this update: Thu 24 Sep 2026 15:02:26 +0000
Manifest next update: Fri 25 Sep 2026 15:02:26 +0000
Files and hashes: 1: MUooZ1Ov9expLMpavng4DbjsbpE.roa (hash: eswDXNZ/AXtbqsm+yzDr7T0oqWysTnskZK6VmBCDemc=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: Va3V3aIrrz4PVjzgtiNo/tC39MmJmzMPjAPtoZse/8o=)
3: rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa (hash: cw+3g+tlflCYhhvX9gDsDKPmWsCROnLpk0xinhWv2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:77:96:6a:6d:7a:ba:bc:4b:16:b2:d3:1e:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Sep 24 15:02:26 2026 GMT
Not After : Sep 25 15:02:26 2026 GMT
Subject: CN=2c00e8911683d310e2c66716b45b4e10bd529f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8d:5f:5c:8c:2c:a8:58:07:75:40:7b:75:b4:
a1:4e:0c:7d:3a:d7:32:d4:74:c5:93:47:25:ea:f8:
a9:d1:c2:a0:57:53:4d:1c:13:ee:3a:3f:f9:70:64:
6a:c1:c3:17:8c:c7:7b:9a:f0:92:d3:1d:6f:ba:04:
0a:b8:97:bb:83:da:88:81:16:09:d4:45:37:f0:f4:
b2:ec:fe:82:9f:c9:8f:c0:0d:03:95:41:f0:7b:e8:
b0:f2:e4:77:6a:8f:28:5d:27:50:22:60:6c:2a:e7:
30:66:db:5b:b2:1a:67:e4:84:0e:e2:62:80:f6:9a:
93:0b:f3:00:d1:2d:f1:3f:ec:c0:e9:60:89:a2:8b:
de:02:78:e8:c0:0c:29:c2:6e:35:63:cc:26:72:86:
8a:70:d6:b5:65:45:e6:d3:0e:49:6a:1e:d3:17:76:
b3:3e:87:39:6f:42:b9:9d:fb:20:12:06:29:b1:6b:
2a:8d:19:fd:10:69:90:d1:b5:25:6e:67:24:41:51:
dc:1c:0c:0b:ae:b0:3d:69:35:2c:68:79:a7:45:08:
60:b0:c0:b2:2e:81:3c:79:26:00:05:6a:59:3e:a9:
d4:98:be:13:f0:7e:ac:1a:c5:23:a9:13:99:22:40:
ae:a9:77:ce:08:bd:d6:e0:e8:a0:5b:23:97:19:0f:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:00:E8:91:16:83:D3:10:E2:C6:67:16:B4:5B:4E:10:BD:52:9F:29
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:37:f1:ab:34:51:69:c4:a3:dc:94:3a:e3:ee:8f:fc:9e:f4:
cb:8b:6d:12:6e:d8:32:4c:fc:59:fd:eb:a2:67:e8:05:76:f7:
8b:95:31:49:4a:d2:f5:bb:2a:9f:35:e0:61:4c:c0:f8:c6:ab:
86:89:94:b9:0f:04:92:7e:f9:5b:2a:84:14:9f:a0:d2:db:89:
cb:63:05:8f:bf:59:4d:3f:da:c2:fc:5c:3f:36:68:25:20:f7:
fd:1d:39:7f:73:19:bb:1e:3b:2c:d9:1c:d7:e4:58:94:07:83:
6f:28:5c:32:20:96:10:52:15:60:73:f8:74:5b:c5:5c:0c:60:
5f:ec:46:73:e8:40:24:6d:85:3e:e7:4f:9b:1f:64:ed:2a:19:
11:72:27:29:ea:8e:07:d6:4b:0d:d3:1f:d0:68:02:97:c7:a7:
15:1b:35:82:21:5e:2d:46:1e:33:a0:31:1c:f9:ff:54:3d:13:
cd:f0:20:a1:c9:da:ae:d0:3c:58:4b:6a:52:49:ac:7d:7d:49:
cb:88:d7:f6:0b:75:ab:7e:d6:a9:e1:02:3c:34:6e:6b:f1:ae:
02:3f:2b:08:63:bf:da:d0:3f:6b:d5:2f:fb:1a:4a:6d:b0:a6:
05:e6:37:06:62:4b:69:51:dd:ed:05:92:2a:56:49:96:c3:f8:
17:15:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:40:49 2026 by rpki-client