Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
File: qYB_bVDZfZcdzy4uUGTpuQets-w.mft (raw, json)
Hash identifier: Z3WRkoxobppna9lhVahEsnisKVWwaGXVND7ifqunqNo=
Subject key identifier: 38:1D:5B:8E:58:F1:B7:A2:51:C3:3B:C1:70:02:0C:89:A2:BE:68:28
Authority key identifier: A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
Certificate issuer: /CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Certificate serial: 01A0D200A91476F483DE71E34E55B11F4DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
Manifest number: 1A99
Signing time: Thu 24 Sep 2026 06:00:53 +0000
Manifest this update: Thu 24 Sep 2026 06:00:53 +0000
Manifest next update: Fri 25 Sep 2026 06:00:53 +0000
Files and hashes: 1: MUooZ1Ov9expLMpavng4DbjsbpE.roa (hash: eswDXNZ/AXtbqsm+yzDr7T0oqWysTnskZK6VmBCDemc=)
2: qYB_bVDZfZcdzy4uUGTpuQets-w.crl (hash: kFlhGj5zFv/JNlQRLGzWWZUqflSchC7W3AFxFcXaiVs=)
3: rX1Ss2CK_g4_GFrLEnzxw6wGXIU.roa (hash: cw+3g+tlflCYhhvX9gDsDKPmWsCROnLpk0xinhWv2AY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:a9:14:76:f4:83:de:71:e3:4e:55:b1:1f:4d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9807f6d50d97d971dcf2e2e5064e9b907adb3ec
Validity
Not Before: Sep 24 06:00:53 2026 GMT
Not After : Sep 25 06:00:53 2026 GMT
Subject: CN=381d5b8e58f1b7a251c33bc170020c89a2be6828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:48:df:f1:fd:04:61:01:99:75:1c:00:c4:5e:
d7:79:97:63:3c:a1:e0:2b:60:8a:95:27:37:40:dd:
ce:a8:b5:3a:54:4d:74:28:06:46:1e:a3:4b:60:b5:
b4:2e:33:4d:a4:1b:06:8e:9e:ad:07:88:88:99:b6:
58:18:50:62:23:5d:bd:b0:67:5e:3e:3c:86:b8:02:
05:8c:3a:bf:3b:1d:10:60:63:54:40:df:dc:d6:89:
07:17:2e:2e:a7:ce:36:d6:4a:d3:3e:7b:8f:37:82:
81:04:dc:11:af:e5:f3:2e:da:04:00:d0:4c:48:27:
c3:60:fa:f1:a8:8d:e3:33:a9:b2:5d:84:09:d4:c3:
32:61:21:c2:a9:65:cb:9b:68:f5:e6:f7:a3:34:3f:
c2:27:99:0a:e5:91:6a:29:24:08:5c:0f:57:01:1c:
3e:db:de:ca:c9:f5:24:66:63:38:ed:fa:a3:de:bc:
cf:be:8e:c9:49:2f:b1:af:92:03:23:7c:96:bf:f5:
5e:c0:d7:7d:cd:4c:2a:a6:7d:51:d3:72:da:69:26:
9c:a5:9c:0a:62:5d:64:4c:62:6b:b4:f6:eb:1e:56:
a9:f8:0f:29:51:c3:73:28:f2:a0:fb:90:b2:ac:cc:
c8:ea:0e:2d:2d:20:4c:34:bb:53:92:42:c9:ec:d0:
a2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1D:5B:8E:58:F1:B7:A2:51:C3:3B:C1:70:02:0C:89:A2:BE:68:28
X509v3 Authority Key Identifier:
keyid:A9:80:7F:6D:50:D9:7D:97:1D:CF:2E:2E:50:64:E9:B9:07:AD:B3:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYB_bVDZfZcdzy4uUGTpuQets-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ca9dbe-0095-40f3-b932-0d8f7dd8cce6/1/qYB_bVDZfZcdzy4uUGTpuQets-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8b:e5:68:e3:16:f9:bb:05:67:c0:c6:6f:62:fb:c0:45:56:
34:92:0f:e4:66:c7:15:f4:96:b0:78:60:41:3f:f8:04:a6:d9:
1a:5a:be:49:dd:20:31:ed:3f:f9:61:62:3a:2d:83:50:8f:6d:
42:a5:f8:4a:ff:cb:37:33:06:88:9d:6c:6b:90:27:21:b2:ee:
f9:27:72:a5:a4:91:77:04:a7:90:cb:12:ec:97:46:08:99:3b:
8c:29:e7:04:51:ca:f5:db:6b:47:07:1f:2f:97:c5:d7:2e:39:
bd:fc:18:b6:6b:ce:2a:1f:75:79:df:19:2f:52:4b:91:fc:ff:
14:1e:55:b7:ec:38:42:99:93:71:2c:af:29:ca:ee:2e:72:a2:
dd:3c:3e:e6:f5:23:e6:83:ed:ba:3f:42:51:9d:e2:f9:f2:e9:
2f:f3:3b:4c:2b:02:66:93:40:cc:f5:5e:1b:f4:1f:ca:83:d9:
fc:d9:fc:96:b0:68:74:9e:28:89:57:f8:4a:22:f1:76:6b:c3:
53:93:23:d2:33:13:51:fb:6f:f0:c5:91:cb:4e:5d:0e:36:99:
26:2b:dd:ea:0f:c2:bc:96:0b:20:74:1b:65:5e:52:d0:56:a1:
2b:cd:0f:3f:d0:ad:13:1c:5d:5f:a1:6d:3a:e1:55:fb:90:3a:
4d:58:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:59:52 2026 by rpki-client