Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.mft (raw, json)
Hash identifier: VBSbomsOC8h/oVM6xg+rsn5hI1hLSeKHOqa59khzWUI=
Subject key identifier: EA:C3:29:EB:2D:D2:44:DC:30:87:21:D0:55:29:E4:E1:29:E2:78:09
Authority key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Certificate issuer: /CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Certificate serial: 01A0DB3BF62E1FAAAE8F3C40B751BC2CE103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 01:02:14 +0000
Manifest this update: Sat 26 Sep 2026 01:02:14 +0000
Manifest next update: Sun 27 Sep 2026 01:02:14 +0000
Files and hashes: 1: 0ECEewsHbpx9zU1JX2DIun14wc4.roa (hash: 3xUQ5J+uKoXf2K0tx/gaMVdbcJCYxizBzW4f58o5Lj4=)
2: nwtdhhsA3tvO15UW5ngy7VolYDA.roa (hash: jJBsatbPceBiOY7mvKtU7D/vsxD74iAJJTBCJFC0Hqs=)
3: qIAb4jY_IRvS9XgYrer5wNvhS9s.crl (hash: x/paV8ZIeHp3oFjvWPiFojP3KR9kCz05A6BdSZYsVuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3b:f6:2e:1f:aa:ae:8f:3c:40:b7:51:bc:2c:e1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Validity
Not Before: Sep 26 01:02:14 2026 GMT
Not After : Sep 27 01:02:14 2026 GMT
Subject: CN=eac329eb2dd244dc308721d05529e4e129e27809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:2e:2a:03:49:17:4e:10:e3:f0:80:74:55:
16:44:72:f4:c7:29:b2:ef:b9:c2:53:3f:1c:93:4f:
c8:50:22:5b:69:de:95:05:74:f0:81:0b:80:d0:b8:
31:0e:e6:80:97:17:4c:37:df:1a:7c:2d:f0:f6:34:
75:b3:8f:40:56:8e:eb:50:92:7d:9b:eb:f4:8e:82:
07:0f:40:d7:ca:90:e1:bb:21:ce:72:18:77:05:f9:
e0:d0:ca:80:be:2a:21:39:15:c6:48:30:2c:2a:7c:
62:e1:77:b6:11:02:e9:98:14:71:6f:76:c7:64:81:
21:5e:c5:16:df:50:82:4e:26:48:37:4d:d9:f0:56:
34:5e:bd:c0:d9:fd:48:9a:5b:a9:e4:1e:f4:f1:b9:
9a:a9:8d:d8:5a:16:10:bf:de:65:68:c2:64:62:b5:
f7:63:32:99:81:51:57:4c:62:0e:42:b4:76:8d:2a:
32:9c:30:eb:4f:5e:83:61:22:c2:2c:8a:c6:76:7e:
84:90:54:d1:18:c5:33:0e:80:e2:68:01:7f:0b:15:
16:74:2a:fd:00:24:17:64:ca:c0:27:68:dc:81:53:
d6:ca:de:ba:60:86:5a:e0:4f:0d:03:ae:8a:9f:59:
18:ac:e3:8b:c3:fb:92:32:a2:e5:06:a3:9d:7c:93:
02:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C3:29:EB:2D:D2:44:DC:30:87:21:D0:55:29:E4:E1:29:E2:78:09
X509v3 Authority Key Identifier:
keyid:A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2d:db:b9:e1:6e:1d:2e:f9:54:2e:d6:eb:78:16:71:06:96:
4d:01:03:bd:2b:ca:37:71:39:6e:2c:be:7d:3d:51:fb:9a:26:
7f:19:d1:d8:ec:be:5f:08:41:9e:ba:46:a5:59:84:a2:e1:2b:
be:42:d0:9d:6e:2a:b0:da:58:1d:68:b2:c8:f0:2f:28:4a:a5:
4d:97:2d:15:d7:1d:3d:1d:15:6b:a0:8f:13:4c:f0:86:50:3d:
38:fb:b7:82:e2:f6:01:f6:7d:ad:1c:3f:98:35:84:a7:cf:53:
b8:79:fc:06:38:34:9f:de:9d:9a:a2:7c:d5:7d:a6:98:36:07:
05:e5:68:bf:fe:55:02:63:46:c4:ee:27:ad:3d:01:6e:7c:70:
96:2a:32:b9:cb:b1:35:80:92:a3:53:81:ff:59:71:bf:b3:48:
9e:58:26:fd:9a:de:95:6d:d5:6a:7a:7e:18:02:69:6e:2a:0d:
04:34:9b:03:a0:dd:89:6e:e3:0d:cf:2d:9d:4d:67:8c:68:40:
07:b0:21:d7:f0:5b:d1:68:df:25:52:87:31:d1:c2:9e:c7:52:
02:0d:fd:49:28:6f:c0:d7:51:89:f4:e7:dc:9d:b2:b6:6a:46:
03:c9:6c:da:15:75:6e:f7:47:a3:03:8e:36:f2:e2:9b:41:95:
07:6b:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:08:16 2026 by rpki-client