Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
File: qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft (raw, json)
Hash identifier: HeH1+NQ2IB4tTPGVa4h/JHykNrZq0SCr0L173jrUXso=
Subject key identifier: FF:5D:2C:AC:D9:73:CE:5A:38:A2:62:83:89:7C:CC:4A:D8:1D:E5:4F
Authority key identifier: AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
Certificate issuer: /CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Certificate serial: 01A0D314EF8E6E76AE77B8739468E43A7ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 11:02:39 +0000
Manifest this update: Thu 24 Sep 2026 11:02:39 +0000
Manifest next update: Fri 25 Sep 2026 11:02:39 +0000
Files and hashes: 1: fsorRjNLpV567Bfhzvrah76aFJM.roa (hash: j4qP9CY0ItXZav1pWfPGEd7YIBpId1LZ5wWL7A5xDlc=)
2: hMWRlyBu_98qhrvASUIfs50ilt4.roa (hash: IGWE5HJqvsWQ/JQ2ivM4pc0kcFg9yZY3dxE1FGpgh1g=)
3: qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl (hash: xB16anVr1NtRVdUwwFe3G1LOIjQV9JcUW0LHiw++n9I=)
4: yeLJIzyENF-xSwUvcw-83vXbHV0.roa (hash: /maHsTe7P80FB56mfWTMzRdcMrW1yJ3jN8SeCvnlqtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:ef:8e:6e:76:ae:77:b8:73:94:68:e4:3a:7e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9e86a76bddc1203a029d31475d3ebc57d90a41
Validity
Not Before: Sep 24 11:02:39 2026 GMT
Not After : Sep 25 11:02:39 2026 GMT
Subject: CN=ff5d2cacd973ce5a38a26283897ccc4ad81de54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:96:1f:20:08:e6:bc:fb:35:c3:b9:0d:c8:fa:
84:16:43:d1:25:41:d3:09:cb:f6:f0:c5:1d:75:7a:
64:03:e5:b0:a1:de:d6:df:be:27:2d:48:95:fe:d0:
e2:03:06:7a:7e:4a:e6:60:8d:8e:57:ce:04:33:af:
6f:92:be:63:0f:6a:8c:2e:a4:24:62:3a:93:62:77:
fa:c0:5e:2c:f1:c2:f1:8e:76:7f:75:ee:c2:e4:f3:
3c:c6:1f:c6:65:37:c4:c6:4e:65:25:d0:d2:db:02:
e5:79:54:a8:9d:87:15:e4:5c:8d:a3:24:8f:c4:a4:
df:ba:5e:3f:86:35:69:2c:f5:33:46:e1:98:04:96:
5f:36:00:aa:e6:2e:70:b8:f2:ed:5c:bb:c4:df:43:
cc:1d:a3:58:18:1e:8c:2f:18:fe:81:14:ad:0b:a4:
52:6b:e7:47:92:b1:53:ea:6d:02:50:6d:f9:86:89:
56:79:4b:83:4d:0c:ee:ed:6d:72:32:33:ec:57:57:
4e:47:5d:34:5e:68:9c:4d:7a:02:f6:72:e2:f2:5b:
3b:fb:00:e9:4b:f9:2c:cd:24:4f:02:b6:e7:00:66:
5d:d3:71:72:a6:8f:61:5d:40:98:bb:34:5a:a2:ed:
0a:11:98:5c:61:5c:0a:55:e8:9b:4c:23:a3:b0:d3:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5D:2C:AC:D9:73:CE:5A:38:A2:62:83:89:7C:CC:4A:D8:1D:E5:4F
X509v3 Authority Key Identifier:
keyid:AA:9E:86:A7:6B:DD:C1:20:3A:02:9D:31:47:5D:3E:BC:57:D9:0A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/b94831-65bb-406b-84c4-03b0eec7ff29/1/qp6Gp2vdwSA6Ap0xR10-vFfZCkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:dc:a0:20:2a:91:f8:3f:10:a0:e9:d8:df:44:b5:e1:41:83:
41:47:38:6d:97:17:5b:b7:2e:5d:7d:d7:71:a9:e0:8a:a7:60:
9e:2e:4a:06:e9:e1:69:c6:51:e2:0b:ee:90:95:64:4e:2d:20:
be:2e:c1:2a:20:ae:06:6a:3d:84:e8:e3:f2:48:fa:4a:2f:da:
b1:a8:af:4b:63:ed:0d:47:b8:8d:7a:be:f3:52:db:b7:b3:23:
50:5e:f6:fb:2a:ff:18:b8:3d:81:18:62:bc:79:40:8a:f9:d3:
02:08:35:f0:7f:17:bf:88:93:2e:de:d3:a3:e1:16:1c:76:04:
1e:e9:d2:40:da:84:e4:ba:e8:bc:a0:71:60:0d:a9:d1:8d:e7:
a8:dc:5b:3b:ba:af:2c:7d:2f:85:f5:67:d8:af:83:1c:29:c8:
7c:38:96:ab:ee:de:32:d4:33:30:b3:21:9d:69:b6:a1:d7:97:
f0:65:e8:ff:5e:24:ca:fb:ce:65:37:57:a5:6a:8f:5f:26:33:
ba:97:e1:97:1d:41:ed:86:bb:42:03:d7:ce:d1:c9:f0:0b:7c:
3a:a4:67:d1:51:ad:0d:f8:37:9e:f0:f3:68:88:a9:23:4c:df:
8d:76:ca:5d:8d:ab:9d:8d:77:77:5a:22:57:b0:bd:78:8c:f1:
78:86:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:16:05 2026 by rpki-client