Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
File: qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft (raw, json)
Hash identifier: +WSzOIYm22WARcFZFzzMyJmxeXfmoKGcAK9tH7JGGU4=
Subject key identifier: B0:01:4E:47:3C:82:93:8F:EE:6A:4F:F9:F5:CB:41:23:A2:08:AD:77
Authority key identifier: AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
Certificate issuer: /CN=ab19000781c183366cba55416fd75b57dba0e4bb
Certificate serial: 01A0D23724CEDAEBF42A99F4485DE3808244
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
Manifest number: 073D
Signing time: Thu 24 Sep 2026 07:00:24 +0000
Manifest this update: Thu 24 Sep 2026 07:00:24 +0000
Manifest next update: Fri 25 Sep 2026 07:00:24 +0000
Files and hashes: 1: NC0rK-C03thsac9C4QAkEJ-rEbs.roa (hash: 3yb9aiIunxdu0hRGJg2ZQAjKyUgacXFW5LOpn3cYaFs=)
2: UBF65ckkUeTb5TbQD9-moIuJwLc.roa (hash: RrSAA6sqxIszGdOffmEq9g8ZmL1cSXwchcGnATyPrPg=)
3: qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl (hash: Q0JLmH8kPCSCdH1X+tNPj2hvQb1qpWIfX2LoHQVglw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:24:ce:da:eb:f4:2a:99:f4:48:5d:e3:80:82:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab19000781c183366cba55416fd75b57dba0e4bb
Validity
Not Before: Sep 24 07:00:24 2026 GMT
Not After : Sep 25 07:00:24 2026 GMT
Subject: CN=b0014e473c82938fee6a4ff9f5cb4123a208ad77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a0:b8:e6:f4:4f:02:20:8d:71:0b:ae:7e:19:
b6:44:21:65:57:1e:4f:8a:44:80:fc:37:fe:eb:21:
d8:69:d2:7f:7c:f0:61:26:02:ea:2a:33:08:ad:0e:
26:5d:3a:95:01:69:a0:82:e1:6a:0b:a4:d1:6d:6b:
f1:91:5a:57:40:7a:9b:8f:d8:d1:d8:c4:7a:bb:64:
58:df:0b:96:51:07:7e:18:a7:a0:15:96:54:94:ce:
7b:ec:b7:e3:cc:fe:53:e5:0f:ff:86:55:24:53:5c:
01:f4:eb:a1:b4:14:72:5e:18:af:6f:a6:c2:72:40:
68:65:df:1e:31:9f:b4:04:19:7b:49:6c:34:c2:a6:
f7:69:14:d9:66:10:7b:71:f1:70:48:a7:44:32:bc:
82:da:71:98:60:54:e3:1a:1b:f9:9e:4f:41:f0:7b:
fd:91:bc:fa:0b:ae:eb:00:d3:e6:eb:13:33:08:36:
91:9e:24:f7:64:21:72:de:4b:6a:0e:18:eb:7b:9e:
e0:5d:ec:4b:c8:61:af:34:a2:18:85:01:eb:a6:93:
17:ca:d4:c1:fe:c0:fe:36:47:b0:a4:78:98:e2:1e:
a3:e7:d5:ee:6d:32:33:3f:ae:55:0e:f7:4c:dd:21:
e9:6b:81:d3:ae:2e:2c:30:83:c2:22:ff:2b:05:4f:
b0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:01:4E:47:3C:82:93:8F:EE:6A:4F:F9:F5:CB:41:23:A2:08:AD:77
X509v3 Authority Key Identifier:
keyid:AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b6:54:26:0f:24:24:ae:5b:86:8a:40:9b:fb:52:32:3a:8f:
4f:75:3d:19:ee:35:a7:d7:c8:0a:20:c8:c8:ff:fe:ca:66:c7:
9e:71:ee:14:08:ff:3c:32:36:12:1a:57:55:1b:8a:78:92:59:
76:e0:fa:b7:b8:9b:da:9c:77:92:aa:98:d1:59:8d:15:06:bd:
2e:59:bb:24:1e:8e:c2:99:24:d9:61:14:d7:c6:29:03:4d:5b:
ba:d2:54:e4:4f:ec:ac:c2:c8:35:33:eb:13:20:f5:d5:0c:53:
ee:90:b2:44:ec:0e:59:bf:30:8d:d6:fa:ae:9a:28:7e:48:60:
98:d8:e6:4b:0d:47:af:4f:53:96:9a:eb:77:a3:92:1e:0e:c5:
04:1b:65:b3:10:41:aa:95:18:58:62:9e:43:5f:0f:f9:aa:ca:
ce:fe:37:05:2b:ee:2a:9e:44:c0:26:dc:a4:a8:7a:93:2a:ca:
3c:9a:cb:e2:b1:23:a3:3e:d0:98:e1:4c:95:0e:bc:0e:9e:81:
ca:b4:9e:3c:98:b4:cd:59:01:d9:c8:12:fa:13:7e:a7:53:4f:
11:76:aa:a9:26:8e:df:f8:b9:58:70:80:18:a4:ae:30:dd:27:
e4:23:f5:cf:43:de:f3:47:b9:0d:c0:1d:79:e4:66:4a:0d:34:
25:30:9c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:27:09 2026 by rpki-client