Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
File: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft (raw, json)
Hash identifier: 6CRRE0o/bjfbWhsqFHQaiJmIaLVLViyRVrKivp3JsNg=
Subject key identifier: 49:AA:73:51:C1:A6:C1:24:42:3A:9E:C1:5A:AD:41:34:AC:D2:20:F8
Authority key identifier: A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
Certificate issuer: /CN=a84570854fe886b94ae625363c625dda60bb3efc
Certificate serial: 01A0D64B5984922FF9DCA4A2A2B5FB7DFD8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
Manifest number: 1A01
Signing time: Fri 25 Sep 2026 02:00:57 +0000
Manifest this update: Fri 25 Sep 2026 02:00:57 +0000
Manifest next update: Sat 26 Sep 2026 02:00:57 +0000
Files and hashes: 1: PI8Cnztdcg0Orhj3hNj0SOev2FA.roa (hash: F0vD9Ue05tdjzmjFbmnRff+jKy6sKGlrmWL0EX8ad5o=)
2: qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl (hash: ZFTGBFpkmHWBW2tp9bEe4ZdKauFjgbQmnkjYnoh2aZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:59:84:92:2f:f9:dc:a4:a2:a2:b5:fb:7d:fd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a84570854fe886b94ae625363c625dda60bb3efc
Validity
Not Before: Sep 25 02:00:57 2026 GMT
Not After : Sep 26 02:00:57 2026 GMT
Subject: CN=49aa7351c1a6c124423a9ec15aad4134acd220f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:56:24:56:90:cf:b1:12:ee:7a:04:db:8f:
c5:59:4d:58:1b:2e:4b:4f:e0:f3:81:f5:9e:a4:f6:
ee:cc:29:34:5d:cd:95:af:ce:b2:6b:fb:ef:c6:dd:
b8:4a:8b:3e:08:a7:f3:51:7f:93:5e:81:58:1a:b9:
3c:af:14:e3:9c:df:bb:be:5d:94:f5:28:14:df:51:
83:40:fe:15:b2:44:58:0f:be:27:ba:f5:46:de:44:
24:52:46:9a:1b:d7:0c:84:08:1d:46:a2:dc:35:b9:
0e:23:f2:19:96:7e:c6:95:18:30:82:d9:09:94:22:
28:56:72:4d:ca:b6:5b:0c:69:fc:e1:d5:15:f2:b6:
f3:b6:25:2e:f3:e1:60:10:ec:0e:83:40:84:81:72:
de:03:8d:70:66:1b:8f:4e:f9:0a:39:e2:a8:25:56:
67:3d:bf:03:ef:55:74:83:20:19:56:2c:58:78:8e:
d5:a4:2e:8f:b5:2e:12:eb:a6:85:7b:55:97:45:4b:
47:76:f7:e6:7e:b4:7c:1a:6a:66:a4:79:3e:3e:09:
5f:7c:a6:b7:d6:a5:4a:8a:1c:01:e9:b9:c3:b7:4e:
bb:a3:77:67:0b:26:80:62:96:9e:ab:72:a7:e5:6e:
7b:16:59:ec:f4:19:59:7e:cb:13:1a:d1:1b:f7:52:
7f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AA:73:51:C1:A6:C1:24:42:3A:9E:C1:5A:AD:41:34:AC:D2:20:F8
X509v3 Authority Key Identifier:
keyid:A8:45:70:85:4F:E8:86:B9:4A:E6:25:36:3C:62:5D:DA:60:BB:3E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fac2a2-5f69-4043-8d65-5bc8795c2cba/1/qEVwhU_ohrlK5iU2PGJd2mC7Pvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:0c:ad:92:ea:9b:b5:d9:83:62:cd:31:e2:02:c9:25:4a:3a:
35:2c:d5:f9:76:e6:c6:e9:4f:1c:e9:01:ef:b9:2b:95:8d:e0:
35:95:6b:13:25:20:f2:32:d5:bc:bd:eb:9b:a0:bb:55:e1:0c:
84:09:eb:76:c2:29:35:7f:be:c9:34:47:67:10:35:49:67:c0:
d2:40:f1:1c:cc:39:53:78:38:d7:ab:83:8c:45:b2:53:e7:35:
af:6c:0f:b2:c0:6c:20:fe:51:ae:f3:54:2f:67:fb:38:b2:a3:
a0:fe:ad:fb:91:2d:dc:10:91:c9:81:cd:96:be:69:25:59:6f:
82:59:39:00:66:d6:10:71:63:76:69:15:bb:5f:6c:9a:ab:d6:
92:f5:83:d3:18:2e:8c:5e:59:21:1c:6e:93:67:7f:62:6b:20:
1a:b2:34:9e:6e:3c:af:cc:32:8f:45:99:15:1c:72:a4:65:d1:
e1:5b:ba:de:4b:a3:fd:ab:d6:84:b0:8e:8d:d4:5e:49:a1:2e:
e1:da:12:d7:17:33:94:60:8f:fd:39:a7:57:ad:1f:92:35:64:
7e:36:25:95:39:35:c8:08:7b:a0:5a:bf:82:b9:52:8e:da:b5:
c1:97:27:b8:ab:5a:9b:f2:2a:27:b7:08:c8:4f:42:f6:59:af:
33:8e:24:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:47:50 2026 by rpki-client