Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
File: Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft (raw, json)
Hash identifier: Y/2R4qGlF0RDsg+UWsTT3RDYEaMhE7FZ6Ch8PzZ+33o=
Subject key identifier: 24:5C:8C:03:C2:73:44:1F:A1:38:A3:38:0B:F9:CD:9D:89:8F:4A:59
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Certificate issuer: /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial: 01A115CF27C64778B8693D33CF6658BEA53A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
Manifest number: 0E04
Signing time: Wed 07 Oct 2026 10:00:59 +0000
Manifest this update: Wed 07 Oct 2026 10:00:59 +0000
Manifest next update: Thu 08 Oct 2026 10:00:59 +0000
Files and hashes: 1: JXLkT6VnIp-SB5I9EMRZOw0DYZI.roa (hash: l3rRARSXe/Kv5HUcutLJRW5ribdNSHw4ggpcG9Mw0ro=)
2: Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl (hash: ptkmZ3A5HevVuxfqiHbbwgqJl5dal1uKYzixeWJkkHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:cf:27:c6:47:78:b8:69:3d:33:cf:66:58:be:a5:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Validity
Not Before: Oct 7 10:00:59 2026 GMT
Not After : Oct 8 10:00:59 2026 GMT
Subject: CN=245c8c03c273441fa138a3380bf9cd9d898f4a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1f:66:07:15:f0:b4:f7:19:21:eb:ac:80:29:
c5:5a:7e:e2:0a:c4:df:1e:8e:88:eb:ff:ea:eb:61:
d0:6e:aa:d0:b6:a8:bd:1c:d9:09:64:2d:4b:bf:c6:
d1:15:61:f8:b5:48:f6:f8:93:d7:6e:d0:54:0e:aa:
41:b5:60:2e:c5:46:05:65:43:fa:98:a8:2b:51:39:
72:de:5e:9d:8f:37:77:0c:be:09:0a:bb:a3:14:f9:
98:91:14:f4:f8:d4:91:cd:f7:e9:ba:c1:cd:b4:3f:
c6:6e:0a:41:91:21:42:20:10:35:18:b5:94:13:f0:
64:a3:98:79:fa:43:1c:2c:1f:dc:6f:13:6c:42:54:
30:05:4c:73:23:24:7a:08:6b:ca:79:ce:06:88:c8:
3e:57:6c:16:57:27:a8:19:f6:33:7c:1c:24:ea:e2:
3f:49:d9:8a:ca:1c:fc:f9:97:83:0f:2f:77:47:03:
4b:2b:24:1d:87:f8:17:e6:0f:2f:95:4e:fc:29:8a:
38:aa:3b:9b:2d:ed:3f:a7:52:5b:b3:fb:8c:a5:0e:
43:41:29:f8:68:08:80:fd:1b:d1:d5:1d:f1:c3:69:
94:52:df:77:0e:eb:ec:c6:a6:df:78:1f:b2:9f:fb:
b0:50:bc:28:09:a2:1d:99:ac:ea:2d:4f:f2:94:0b:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5C:8C:03:C2:73:44:1F:A1:38:A3:38:0B:F9:CD:9D:89:8F:4A:59
X509v3 Authority Key Identifier:
keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ec:09:95:a9:83:db:fa:38:ce:ec:78:3f:d2:44:44:7e:15:
45:9f:ec:f7:16:0d:c8:66:40:87:60:b0:41:8e:af:c1:b0:ac:
f9:fe:1d:fb:51:7e:e0:9a:4a:c3:71:a1:cf:b5:49:2e:81:fe:
a2:dd:4c:b6:65:74:80:e2:d5:66:29:44:83:6c:ed:95:7d:d8:
47:3b:29:68:05:cd:b1:a5:0e:58:68:33:b8:f8:ea:4d:2f:54:
1c:63:a5:23:59:40:1e:3b:2a:f5:d0:8d:95:2d:4e:36:f3:12:
a9:12:93:51:4c:7e:6d:b2:06:74:11:6a:50:45:c1:a1:0e:b9:
55:f2:e1:5f:b5:fd:ae:f2:30:a3:fa:28:ce:ea:da:51:c1:ab:
71:f9:5c:b2:77:d1:86:67:4d:33:fc:af:34:cb:9e:55:c7:fb:
e5:57:53:bf:8d:e7:e4:17:8e:0a:d7:9c:b7:04:8d:c2:ab:de:
b6:92:73:1c:42:a4:7f:7a:49:c7:0c:48:ca:a5:dc:91:f7:ab:
3c:a1:66:e6:b8:e4:0c:43:19:9c:02:04:54:e5:ca:a1:6e:a6:
74:59:fa:5b:05:6d:b2:b8:e6:da:50:fd:95:4d:ad:77:72:1f:
c9:06:32:6a:87:a0:69:35:f7:8e:df:74:8b:d7:c5:c0:48:8b:
96:67:07:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:17:53 2026 by rpki-client