Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
File: q9PisS9HkZgpT69gxuNqCht7_VQ.mft (raw, json)
Hash identifier: MhJgv/QB8b17GlaDBT+lDc4SWQJVOlQ7HCPXIHbS+cU=
Subject key identifier: 3D:A2:EE:1C:10:8C:F5:FE:81:42:02:E1:3D:5F:44:E9:4A:CC:41:40
Authority key identifier: AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
Certificate issuer: /CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Certificate serial: 01A0D192356B3817B2DA4CAA0D6A4B6C1D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 04:00:15 +0000
Manifest this update: Thu 24 Sep 2026 04:00:15 +0000
Manifest next update: Fri 25 Sep 2026 04:00:15 +0000
Files and hashes: 1: e6rt8CL4Tt23u6mnF3HX9gILLdw.roa (hash: 0VKltNMP0fVwSJth+lSOjHYVHCR+JxiPMU1thfnFsLc=)
2: q9PisS9HkZgpT69gxuNqCht7_VQ.crl (hash: fDqAzSZzbn6ICEuCJ7y/fyEZOH1Mt5+Uj5TEIeu7NR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:35:6b:38:17:b2:da:4c:aa:0d:6a:4b:6c:1d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd3e2b12f479198294faf60c6e36a0a1b7bfd54
Validity
Not Before: Sep 24 04:00:15 2026 GMT
Not After : Sep 25 04:00:15 2026 GMT
Subject: CN=3da2ee1c108cf5fe814202e13d5f44e94acc4140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:3d:c1:5b:64:5f:cb:84:bb:2d:97:88:5d:
f1:23:c9:37:0b:9f:42:a0:d4:27:69:1a:44:4e:fb:
88:6d:de:2f:59:d1:5f:3f:ba:f3:3b:22:45:b4:1a:
14:e6:4d:ab:c8:8f:fe:79:c4:cd:7d:a4:f9:34:60:
e9:19:66:01:61:5d:e2:ce:8c:c1:68:c9:fe:57:47:
81:4c:a3:20:c0:18:a0:36:d3:f9:c3:91:65:35:a4:
c0:cf:e8:06:36:4b:87:6e:b3:f9:05:89:68:f1:98:
6b:0d:5a:43:bd:23:16:5c:c0:a5:b3:6e:9c:6b:34:
bf:14:2c:40:41:e3:a4:cb:43:23:35:81:6b:62:93:
19:48:d7:cc:3f:5c:56:ac:d8:19:40:af:af:b2:3b:
2c:69:c5:cd:c7:e7:cf:ea:5e:7a:90:26:5b:f8:9f:
52:ea:61:6e:5f:30:70:c1:ce:97:ac:50:1e:21:26:
cf:d0:87:6e:e8:0b:d1:40:8a:32:b9:c4:10:30:8a:
2f:27:b5:a9:69:13:3a:8a:94:29:e4:4d:99:06:ae:
e2:4d:9c:26:f5:ee:94:4a:68:5b:d5:21:92:50:4a:
52:0d:10:a2:33:9c:09:1b:05:17:2d:23:f1:1e:f8:
84:47:f4:52:dd:50:98:df:fd:15:37:53:0c:71:33:
f0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A2:EE:1C:10:8C:F5:FE:81:42:02:E1:3D:5F:44:E9:4A:CC:41:40
X509v3 Authority Key Identifier:
keyid:AB:D3:E2:B1:2F:47:91:98:29:4F:AF:60:C6:E3:6A:0A:1B:7B:FD:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9PisS9HkZgpT69gxuNqCht7_VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/791fb5-a5eb-47f5-ad9a-997f47ab7df2/1/q9PisS9HkZgpT69gxuNqCht7_VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:4a:a2:52:d8:92:c5:51:dc:08:8e:16:48:0b:d1:0a:4e:e3:
09:3a:a1:51:8d:b4:90:bf:27:ac:55:1b:39:53:60:a1:3f:2b:
1a:3c:d4:52:f4:c4:39:53:d7:67:6a:2a:bf:06:c3:11:93:64:
d5:11:b7:76:6c:c6:14:65:d0:1a:7a:0f:03:65:92:ba:ed:b1:
e5:f4:7c:ee:13:45:5a:48:25:66:5e:bd:25:31:24:0f:5e:c5:
ea:51:94:5d:35:14:d9:86:a0:38:af:31:4b:a9:69:6d:61:97:
32:dd:fb:89:21:e1:ef:91:0b:49:8e:bb:00:e3:9b:b0:87:fd:
ec:af:34:cc:39:62:5d:f6:28:f0:fb:16:92:1d:d1:80:02:21:
ab:a3:c5:fb:22:ca:9b:11:7c:45:86:54:c7:c3:84:a4:ec:43:
db:7f:77:a5:b8:89:6c:2b:08:65:b7:35:99:39:2e:2f:c7:a5:
cf:69:dc:9c:1b:33:e2:87:fa:87:33:9b:6e:63:08:51:ab:73:
93:c9:87:3c:19:95:e5:c6:0f:1e:6e:2b:22:11:64:64:97:1f:
09:ee:09:7c:14:6a:08:97:b8:b0:14:04:99:4a:30:d0:67:7a:
74:26:5a:e8:8f:39:e4:c6:d2:bd:11:c8:ad:b5:10:8f:9b:3c:
4b:0b:7b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:37:28 2026 by rpki-client