Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
File: q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft (raw, json)
Hash identifier: Zg8oztsRGBV8bJt8SMff+BCtiaP7Mk4mVIdVBNwKfVU=
Subject key identifier: 98:8A:99:B0:11:88:21:8A:BC:26:8E:3A:E8:B0:4E:45:B4:FC:8C:21
Authority key identifier: AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
Certificate issuer: /CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Certificate serial: 01A0D3F0104F158057059888FF32E7D74741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
Manifest number: 1261
Signing time: Thu 24 Sep 2026 15:02:00 +0000
Manifest this update: Thu 24 Sep 2026 15:02:00 +0000
Manifest next update: Fri 25 Sep 2026 15:02:00 +0000
Files and hashes: 1: eutBwstQCFRzhm35XTnNphMWByQ.roa (hash: RdOW4ekiWsJoF7BZmUsggiXem+HWt5D8Hbfh8/B+px8=)
2: q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl (hash: xV5KCKC3PmlO21nDP9XVjDiGQy5brqAaE8IlmYr+tb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:10:4f:15:80:57:05:98:88:ff:32:e7:d7:47:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab684e50e33f3a0015c8f899c88bcb137bcfb5f9
Validity
Not Before: Sep 24 15:02:00 2026 GMT
Not After : Sep 25 15:02:00 2026 GMT
Subject: CN=988a99b01188218abc268e3ae8b04e45b4fc8c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3a:e6:ec:b5:2c:f0:b5:3d:4d:23:ad:9a:79:
81:6a:9f:eb:04:3b:a7:dc:36:b3:1d:0e:1c:6b:48:
4b:8b:8f:35:82:b2:a4:00:72:a9:74:f0:9e:62:2b:
96:b0:14:8e:b3:8e:f4:e8:f6:28:26:c2:57:f7:39:
3a:d7:18:24:f6:a0:60:a8:9c:28:db:1d:c7:9b:aa:
07:1d:dd:4e:c7:74:e0:17:77:1b:d2:90:89:c3:5a:
ff:34:be:0f:a2:57:48:d3:5f:dc:35:7c:6a:0c:a3:
64:07:d4:de:42:4f:75:c9:1f:36:5c:07:78:53:ff:
4f:34:29:9c:b0:76:b8:0c:ef:46:80:96:23:51:b3:
fc:ff:3a:d7:71:c5:ef:bc:5a:7a:94:41:09:2d:8e:
ad:bc:10:d4:b9:1f:f8:fa:5a:65:61:45:4a:c0:6c:
36:35:e5:88:45:f3:ba:2e:f4:71:bd:9d:b1:fc:87:
99:ed:b7:17:d8:72:0a:7a:d2:9c:5d:02:6c:37:d2:
d1:b1:6f:82:e2:17:eb:8d:31:25:0d:4f:cb:04:e9:
8f:2e:32:7f:e0:af:d5:a6:0b:dd:b3:7c:0b:bb:f0:
7d:1d:61:c8:43:e1:01:fc:18:39:30:86:6e:23:ce:
cc:96:53:51:9e:09:3c:9f:5a:1b:3b:96:27:26:79:
7a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8A:99:B0:11:88:21:8A:BC:26:8E:3A:E8:B0:4E:45:B4:FC:8C:21
X509v3 Authority Key Identifier:
keyid:AB:68:4E:50:E3:3F:3A:00:15:C8:F8:99:C8:8B:CB:13:7B:CF:B5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2hOUOM_OgAVyPiZyIvLE3vPtfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/9472a6-d022-43ce-b362-80e5d53edb41/1/q2hOUOM_OgAVyPiZyIvLE3vPtfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:59:33:68:de:53:64:6e:d7:1a:d4:fa:b2:2f:6f:54:40:9b:
ad:9b:0a:9c:6c:14:2b:53:ca:02:f6:6e:c9:ed:9c:6a:dd:48:
40:93:e8:78:35:f2:97:5e:9a:89:32:e6:f3:bf:48:54:5c:1c:
cf:71:3b:a5:d5:e3:6e:20:4b:d0:b0:fd:0b:00:71:87:2f:3c:
7b:4c:92:10:18:82:70:0e:58:4e:23:ee:53:42:99:cd:17:91:
97:40:79:3e:49:90:d9:50:8b:0c:10:57:b2:e3:a2:86:cc:ee:
d6:dd:ed:30:26:b2:57:e9:24:35:10:eb:f0:5a:1d:d7:5e:27:
ea:65:a2:1d:68:71:03:43:0f:23:ca:f5:04:4b:eb:85:43:ee:
e1:1f:ee:99:bf:cf:b0:fc:9a:57:6b:56:20:ec:34:dc:78:2a:
b4:47:68:31:c2:0d:dd:99:b8:7a:7f:f6:ee:07:2e:28:99:07:
f3:55:84:db:f7:69:b9:9f:8e:4b:06:52:8c:cb:53:5f:f0:9d:
37:c2:1a:1a:b3:27:79:9b:b6:98:d1:7d:81:02:2b:c2:d3:47:
22:e7:25:9f:3b:1e:a8:8a:cf:af:0b:ca:49:ad:7a:10:b2:d2:
9b:c8:76:5e:d5:56:e8:16:ef:e4:82:91:1c:ea:ff:34:7c:38:
1f:9c:e7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:31:50 2026 by rpki-client