Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: rJTqXQC1W8m0Ly5A1DilwRuHEzTFWpAj8vgj5PxPwW4=
Subject key identifier: 46:F0:4B:44:9D:96:6F:7E:98:ED:8E:AC:C7:6D:D3:22:80:0B:30:0A
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 01A112CE3DEB44F06DE57C74F7FC21B2FB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 1A20
Signing time: Tue 06 Oct 2026 20:01:08 +0000
Manifest this update: Tue 06 Oct 2026 20:01:08 +0000
Manifest next update: Wed 07 Oct 2026 20:01:08 +0000
Files and hashes: 1: 9iFl9E0VgWNO_Nn27bQay-c817U.roa (hash: La1IKKEmOqIsMgjt9EJI2o3J371vdfvoBpTTdCWHcKQ=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: OxwCEldxgqF4hH8XuKlL2Ui8S+DupBPIQJE6M6Y7CtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:ce:3d:eb:44:f0:6d:e5:7c:74:f7:fc:21:b2:fb:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Oct 6 20:01:08 2026 GMT
Not After : Oct 7 20:01:08 2026 GMT
Subject: CN=46f04b449d966f7e98ed8eacc76dd322800b300a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:04:a0:76:62:bd:55:1e:cc:1f:66:7a:ac:70:
cb:02:df:63:c6:c3:14:20:35:ac:36:4a:7e:ae:4d:
23:e6:4b:a3:ec:14:61:83:d7:f3:92:66:0c:5d:ed:
38:29:68:96:30:de:3b:99:32:6e:89:3a:a8:25:55:
ec:ba:c5:15:15:b9:27:de:78:70:b0:c1:e9:83:69:
cd:d9:db:12:78:9e:4b:15:57:31:72:80:e3:99:5f:
be:80:ca:e6:fc:82:c2:2e:a0:ab:50:c5:6c:9c:d0:
e4:05:87:13:4b:22:95:b6:9a:4f:18:fe:91:69:d1:
1a:60:05:17:89:f5:57:e1:72:a6:ba:c3:5f:51:80:
cb:7c:30:4e:40:ee:83:0b:72:f5:81:9a:a0:df:91:
58:f3:41:4d:25:59:2d:cd:f2:54:63:c7:a0:44:9a:
96:19:71:ec:8a:dc:22:35:a1:1c:14:f1:79:d1:17:
16:b4:3f:40:8b:9f:08:b8:60:76:c3:2c:57:d5:9e:
1d:a3:64:08:41:22:18:7b:60:25:3e:e4:bb:c0:d4:
c5:db:2e:df:8a:d9:cf:93:38:17:dc:36:56:b8:82:
6f:d0:99:dc:f9:5a:4f:c6:9f:7f:ab:78:07:8e:4f:
18:2e:e9:f7:e0:91:fb:9c:34:d8:f7:1d:43:5a:26:
ae:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F0:4B:44:9D:96:6F:7E:98:ED:8E:AC:C7:6D:D3:22:80:0B:30:0A
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:b0:c9:25:28:fb:48:d2:de:e8:e7:b2:0d:66:03:84:ee:6a:
46:52:da:80:44:f8:67:4d:95:38:5a:2d:b0:c1:b8:34:68:f4:
72:8b:4c:ab:74:05:2a:d4:ae:11:59:01:15:db:c9:4e:eb:99:
5b:83:ad:6d:92:e7:a6:b4:bb:88:b9:0a:d9:8e:20:b8:09:db:
47:b2:21:b4:bb:99:15:69:a9:18:0b:90:98:70:61:62:2c:62:
01:cb:49:f4:60:9c:e9:36:34:c0:00:56:41:48:43:fe:e9:56:
d5:d9:04:7b:25:bc:a9:4e:5e:b2:f1:7f:bf:7d:9b:f0:5e:62:
64:f6:d0:b6:41:22:29:6e:c3:89:3d:6c:67:25:95:17:b0:79:
03:69:6d:a1:8c:3a:4a:52:ed:de:a3:49:21:e2:e1:79:9a:a2:
ce:70:e6:e5:da:10:94:54:25:4e:1a:44:30:a7:17:42:e8:6e:
5e:0c:06:e9:f0:1c:3f:cb:18:69:d3:0c:f9:97:a7:8c:b5:a2:
0a:57:e4:c3:d6:86:19:b0:f3:dc:bc:98:f2:cf:6f:b0:e9:c5:
95:6d:55:76:7a:fd:3d:85:5a:43:3a:ce:d7:e4:21:6e:8c:ab:
1c:e4:be:34:1d:4d:3d:2c:85:ed:07:a5:d8:6d:2e:04:03:d3:
bd:14:7c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:09:04 2026 by rpki-client