Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
File: q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json)
Hash identifier: d4Z3TPYsS2KCcQskO+aps4+GVt5YPCUBNEYKzlMmbE4=
Subject key identifier: 70:97:F4:8C:5A:D7:70:48:DC:BD:81:A6:C7:E7:B5:26:AF:12:EA:5E
Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Certificate serial: 01A0EA4044AC37A4D5A7B0C0916542714C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
Manifest number: 0425
Signing time: Mon 28 Sep 2026 23:01:15 +0000
Manifest this update: Mon 28 Sep 2026 23:01:15 +0000
Manifest next update: Tue 29 Sep 2026 23:01:15 +0000
Files and hashes: 1: LTVOJrN7tMu87dFspIcmBlzwME4.asa (hash: tHJyxmUmJCWBdZOh74CFjQH4LfeAyi34h5vxnLm7Pjk=)
2: SZY6wsq_78e2nLvWAkeHk1piMW4.roa (hash: crCAmARzqXmw7E9/kb/thI4py7GtbXwH0Xp22Jp2Zrs=)
3: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: IK+eDfXu2Ro4WlJOgGnw66KqgXx69TABcc5kix9zFq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:40:44:ac:37:a4:d5:a7:b0:c0:91:65:42:71:4c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Validity
Not Before: Sep 28 23:01:15 2026 GMT
Not After : Sep 29 23:01:15 2026 GMT
Subject: CN=7097f48c5ad77048dcbd81a6c7e7b526af12ea5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:e5:7a:0a:eb:cf:d4:17:6d:41:8c:88:15:f1:
4f:ca:2a:13:be:f7:33:56:99:66:13:33:d0:59:f8:
e8:f7:8c:aa:f1:f7:e5:c6:ff:dc:0b:7a:c9:3b:10:
dc:53:c8:27:52:10:13:25:76:7f:60:3e:f6:d1:05:
78:ea:6b:20:fc:98:9e:ad:44:d4:9b:53:8f:e2:31:
cd:a6:04:46:e9:79:d2:3f:39:e4:11:2b:c0:ab:5b:
12:2b:5e:60:59:96:1d:00:51:f1:6e:9f:cd:44:de:
b0:cd:ab:ee:1d:8d:0c:3e:0d:07:a9:47:e5:77:60:
52:b0:a6:8d:33:61:6c:a5:14:9b:9d:c9:31:78:29:
1e:ca:d2:5a:cb:8d:b9:fd:8b:8e:b7:61:d3:f2:fb:
b6:e5:14:60:1c:2c:87:42:aa:5d:df:69:04:96:e5:
b5:f9:69:53:28:37:11:e9:c1:7d:39:6b:6c:2c:2d:
78:3b:a6:49:9a:6d:b1:f4:ab:f8:fa:e2:85:51:de:
5d:26:df:64:fe:e8:47:f0:fb:b6:2b:3b:85:af:b5:
0b:bd:83:1c:84:f9:b9:e3:ab:ae:1c:50:df:a6:5d:
f9:64:28:12:cc:6c:ec:9c:5d:bc:60:61:ec:52:19:
7c:fd:22:e8:a5:5b:23:a6:ed:e1:eb:65:b8:ba:29:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:97:F4:8C:5A:D7:70:48:DC:BD:81:A6:C7:E7:B5:26:AF:12:EA:5E
X509v3 Authority Key Identifier:
keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:73:a6:d8:26:9d:8b:08:f5:58:06:3d:06:a4:b1:35:fd:fc:
65:e7:f0:fb:c5:7c:22:58:ec:e3:1c:5c:e7:a0:10:ba:08:bd:
6b:47:bd:8b:75:ed:69:d6:67:f1:ae:36:5c:1d:4e:08:8a:8c:
9b:33:76:f9:fa:9c:01:dc:ca:64:a9:34:7c:66:ae:c4:1e:26:
17:a1:0c:a1:67:8d:f4:f0:fb:e7:39:36:8b:60:11:70:f6:b8:
ba:ff:a9:d2:48:c8:79:bc:2e:27:ea:21:ec:18:50:12:06:2e:
3f:3c:77:8c:1e:68:cf:8e:1f:4b:4e:9b:06:5b:c7:9b:94:e5:
23:8a:b1:bc:0a:78:42:c8:5d:e5:80:c4:ab:0b:34:e5:0c:b0:
9f:1c:b9:be:f3:18:d2:4f:a7:19:54:1d:1b:61:73:a1:18:8e:
b7:70:5e:0c:83:40:5f:cd:91:fe:9d:77:80:74:ee:54:a4:19:
07:63:d2:a5:8a:1d:54:a1:fa:ef:40:91:b8:e8:07:24:16:1c:
e8:28:34:ac:bc:78:74:4e:14:e5:25:84:d9:65:93:e9:05:17:
de:6d:6a:2b:b9:01:98:f3:59:f6:d5:9e:f2:f0:bc:d1:ff:2c:
e3:d3:51:f4:b6:35:94:0f:a5:e5:9c:6c:ab:95:7d:a6:f4:0d:
70:15:9e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:00:41 2026 by rpki-client