Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
File: qsqNwMC5IbCJ8WAmGORVN5enR0I.mft (raw, json)
Hash identifier: uSeAHqHJdhSl9nvxFanIsIcNv8NDKAVIwG8dPSm/Lxg=
Subject key identifier: E4:0B:E6:81:07:A2:73:91:4D:B7:35:0F:DA:71:75:A8:E7:BC:B3:70
Authority key identifier: AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
Certificate issuer: /CN=aaca8dc0c0b921b089f1602618e4553797a74742
Certificate serial: 01A0D94D226A24B99C09E404A3FB063B5E36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
Manifest number: 0613
Signing time: Fri 25 Sep 2026 16:01:45 +0000
Manifest this update: Fri 25 Sep 2026 16:01:45 +0000
Manifest next update: Sat 26 Sep 2026 16:01:45 +0000
Files and hashes: 1: G8uE_YXvAUsbhoJ7QQgS2ptGK4I.roa (hash: BCzWL8FjjNpuELNVuLODI9jH/96WSdwiWl+ywyyb3Cc=)
2: qsqNwMC5IbCJ8WAmGORVN5enR0I.crl (hash: SusIxJTloME/AqHFAnYkbAkXYX7osegxgsgaIKHQkWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:22:6a:24:b9:9c:09:e4:04:a3:fb:06:3b:5e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaca8dc0c0b921b089f1602618e4553797a74742
Validity
Not Before: Sep 25 16:01:45 2026 GMT
Not After : Sep 26 16:01:45 2026 GMT
Subject: CN=e40be68107a273914db7350fda7175a8e7bcb370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9a:92:78:52:aa:36:9c:69:67:f2:91:ef:b0:
53:f0:b4:49:b6:2f:37:06:50:11:f6:04:83:81:e5:
ee:e4:c7:08:fb:da:a4:68:26:0a:1a:76:4f:70:f6:
3b:1c:56:30:cf:75:58:90:a9:db:4b:ab:fa:82:d6:
d2:b8:a0:8f:3c:a8:bf:bf:f1:a0:a5:4b:cd:31:2d:
e2:29:22:ff:dd:28:f9:ff:b5:3f:34:88:9f:36:e2:
af:c2:76:d9:dd:b3:ed:5f:3b:fc:8d:83:38:7f:e6:
65:03:5d:c3:72:b7:d9:06:2d:f4:58:e9:b7:7d:d4:
3b:2e:b5:dc:6f:89:44:38:78:12:e2:68:cc:3d:42:
a5:d4:f0:8d:89:2e:d6:2d:5c:89:72:f0:99:da:7e:
cf:fa:c5:b1:b2:9a:fc:06:2e:c7:cc:53:31:4b:bc:
29:8e:12:a2:75:39:2c:e1:5d:e3:26:92:c3:54:d0:
37:c8:98:8c:1c:e0:43:5e:bd:16:ea:52:63:20:b4:
e4:3c:ac:1b:77:ed:9e:9d:05:68:59:84:7d:07:41:
34:71:94:ad:fb:88:1e:c9:d4:01:96:14:c2:c6:4c:
5f:74:b1:f0:e1:d7:8a:51:89:37:51:66:5b:b2:7e:
db:7d:cd:3f:10:18:39:fd:5c:60:42:65:2b:87:1a:
90:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0B:E6:81:07:A2:73:91:4D:B7:35:0F:DA:71:75:A8:E7:BC:B3:70
X509v3 Authority Key Identifier:
keyid:AA:CA:8D:C0:C0:B9:21:B0:89:F1:60:26:18:E4:55:37:97:A7:47:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qsqNwMC5IbCJ8WAmGORVN5enR0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eb31db-e654-491e-a141-91d50738d1e8/1/qsqNwMC5IbCJ8WAmGORVN5enR0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1b:be:bb:cb:a9:12:8f:46:4e:b9:64:c1:b2:14:d7:54:b5:
68:05:60:f2:f4:1e:41:4c:ff:87:58:63:f9:c3:0f:47:fa:a4:
9c:b4:0f:5f:c4:35:b6:dd:38:0d:ff:90:55:c3:b0:9e:02:6b:
fa:72:e1:d8:0e:f2:37:01:86:91:d2:0a:31:4b:25:38:8d:40:
a6:ad:e6:58:17:14:f7:6f:7d:2f:f8:a3:f6:58:ce:3f:27:c8:
e1:c8:7b:7d:58:05:24:92:35:c5:ae:33:a5:07:d3:c4:be:e1:
40:3b:9b:40:7f:52:f4:5f:d3:ca:5b:92:a7:53:f5:05:49:2c:
58:71:ae:85:26:83:7a:53:fb:d3:a7:b1:d0:34:cc:62:e6:13:
44:e4:fa:28:25:7c:8a:be:d7:b2:5b:74:ba:1d:09:dc:de:a1:
a8:e7:9e:ab:db:a2:bf:ef:9c:48:6e:8b:e4:6f:05:b6:48:9a:
7f:a7:cf:16:16:2c:43:8a:25:fd:d8:5b:3f:43:79:49:d0:91:
14:ec:00:c4:60:6e:28:a8:7f:0a:9f:72:96:3c:21:90:c3:5b:
48:c7:8d:32:88:be:3c:d8:43:d7:69:97:de:af:da:cf:59:2d:
9c:21:f6:63:a8:61:5b:69:7e:cc:f4:27:34:9a:1f:ef:62:5f:
04:b6:94:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:42:35 2026 by rpki-client