Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
File: qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft (raw, json)
Hash identifier: ++r4l0HhR96gx3HTfMuxYt/365FrOtUuyXbh0DI8jlY=
Subject key identifier: 11:D0:C7:85:9F:65:9E:0D:CA:40:E8:4A:3F:90:40:03:DD:C1:2C:BC
Authority key identifier: A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
Certificate issuer: /CN=a986a0677b91c45667e45e12ee07f5219901a87a
Certificate serial: 01A0DCF3100821A600404CEA59F4ED454067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
Manifest number: 08A0
Signing time: Sat 26 Sep 2026 09:01:51 +0000
Manifest this update: Sat 26 Sep 2026 09:01:51 +0000
Manifest next update: Sun 27 Sep 2026 09:01:51 +0000
Files and hashes: 1: bLk88x2HL-2GICyBNcP5Qc7qD64.roa (hash: 4cgQdkwpHUEmwJaaIvwsSgvpblfNuKKSJZKxTdOD8Wk=)
2: qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl (hash: GAK0JtobWd7sbtmlTKNOqHmpi/tkGx9cZWs0dU1e0r4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f3:10:08:21:a6:00:40:4c:ea:59:f4:ed:45:40:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a986a0677b91c45667e45e12ee07f5219901a87a
Validity
Not Before: Sep 26 09:01:51 2026 GMT
Not After : Sep 27 09:01:51 2026 GMT
Subject: CN=11d0c7859f659e0dca40e84a3f904003ddc12cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:50:31:43:f6:15:42:e5:71:5f:f9:56:21:
32:82:a3:52:5e:6f:b8:44:47:83:c5:aa:8e:d6:00:
cb:0c:96:c7:81:b8:d4:55:c9:cd:43:0f:c4:2f:3f:
6c:68:a6:67:74:d8:56:d5:ad:47:f0:8a:f8:40:68:
3a:58:4a:90:09:35:b6:01:32:bb:41:7b:30:c7:6f:
bd:d9:84:96:ee:f0:ce:f5:af:ae:98:e1:9a:9b:76:
f0:f6:86:d6:4c:aa:ab:ee:8d:a6:6b:cd:13:15:bd:
85:5c:87:83:7b:59:9e:c8:b5:8a:61:9b:58:31:f1:
14:d3:10:3c:14:dc:69:23:22:a9:fb:e2:2a:5e:9d:
22:09:0d:5b:8c:09:0f:66:9a:90:c5:1d:f0:90:21:
65:98:cd:1e:89:f7:5b:93:f5:90:60:6f:c0:fc:39:
1c:fb:21:bf:5d:b8:21:91:bb:dd:2e:66:be:82:03:
26:d5:82:00:61:7f:49:dc:29:1c:5a:3c:9c:de:b3:
e5:7a:11:2d:7f:bd:36:16:32:db:73:c0:7f:ab:23:
1b:2b:93:68:ec:db:0d:59:0f:ac:81:b6:76:06:56:
f1:b7:f1:4b:62:a0:5f:c5:36:ce:35:38:ca:6d:84:
5e:36:ed:7d:09:33:97:89:41:a5:d5:ae:75:11:36:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:C7:85:9F:65:9E:0D:CA:40:E8:4A:3F:90:40:03:DD:C1:2C:BC
X509v3 Authority Key Identifier:
keyid:A9:86:A0:67:7B:91:C4:56:67:E4:5E:12:EE:07:F5:21:99:01:A8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYagZ3uRxFZn5F4S7gf1IZkBqHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/f0b954-9886-409b-8219-d3fdfa9a8f14/1/qYagZ3uRxFZn5F4S7gf1IZkBqHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fb:3b:f7:a6:fa:ee:ec:6e:18:36:94:40:03:de:fe:66:74:
18:f5:59:7c:96:ca:e3:d8:4f:62:eb:4b:d8:29:dc:3b:99:0d:
a2:02:32:2d:7a:4f:88:c2:6f:e6:8d:16:34:6d:0f:bd:40:6c:
0b:83:18:68:fa:ad:9b:84:f1:fe:cf:48:34:14:96:35:61:b2:
e9:9f:d9:79:8f:7e:6e:92:aa:92:2e:1a:e1:83:a7:39:21:8a:
c7:3c:8b:87:bb:4f:cf:91:74:8d:63:a2:31:f7:5f:68:a9:a5:
27:4d:94:33:7c:2a:0a:87:64:66:35:25:90:61:b7:53:bf:e5:
0b:6c:82:2b:a8:bc:24:b9:8a:6e:3d:8e:4b:af:a8:0e:2f:52:
68:ce:e4:4f:79:dc:bd:fd:39:ab:39:4a:c1:b7:8f:e1:68:54:
12:e0:c5:0f:c1:3a:54:7a:3b:60:cb:31:d0:2e:40:ef:63:c1:
f5:96:a2:8d:8f:1f:e7:14:a8:43:28:07:a3:ec:ce:58:58:eb:
f3:2a:ed:bd:f8:fb:12:63:50:6e:7e:de:a3:f7:72:91:63:d0:
9f:cc:8b:3b:9d:0f:94:e5:0e:aa:63:db:7e:ac:ab:39:23:1f:
17:33:33:a4:9c:ff:57:6f:ed:22:93:ae:68:27:cf:03:7e:24:
6b:af:18:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:23:03 2026 by rpki-client