Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
File: qERYOVOgK8amaZ3pJ89FcAfwVSg.mft (raw, json)
Hash identifier: +WH55/ErjErC6CG4w5cpcrv+JmGgcTwTo6ef6z7fuN8=
Subject key identifier: D9:4C:C7:4A:30:5C:4E:A4:F7:C9:DF:14:DF:C2:32:8B:CA:0C:70:E6
Authority key identifier: A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
Certificate issuer: /CN=a844583953a02bc6a6699de927cf457007f05528
Certificate serial: 01A0D6F0EC3923A18C85ECEBADDD2F0944DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
Manifest number: 0306
Signing time: Fri 25 Sep 2026 05:01:48 +0000
Manifest this update: Fri 25 Sep 2026 05:01:48 +0000
Manifest next update: Sat 26 Sep 2026 05:01:48 +0000
Files and hashes: 1: bzuHav72txau2Blj1JcbQR-3zHA.roa (hash: TCvNISq9G9+8+m7g0vleezt4nSYPh9D8kXCKj2MC7tQ=)
2: qERYOVOgK8amaZ3pJ89FcAfwVSg.crl (hash: +bS696ww8YDB3rSi+zVlIC4/F6RO8k2WQ7ObbV0mwhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:ec:39:23:a1:8c:85:ec:eb:ad:dd:2f:09:44:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a844583953a02bc6a6699de927cf457007f05528
Validity
Not Before: Sep 25 05:01:48 2026 GMT
Not After : Sep 26 05:01:48 2026 GMT
Subject: CN=d94cc74a305c4ea4f7c9df14dfc2328bca0c70e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:83:bf:06:46:41:8e:80:73:ec:18:45:76:
17:c8:f2:38:c5:46:c9:7a:20:fd:1c:89:6a:ee:d9:
c3:97:59:7d:81:17:59:0b:bd:43:46:58:ae:90:f7:
23:00:20:8e:48:7b:99:ad:8c:1d:dd:08:53:a3:ee:
61:e6:53:4c:a0:29:56:85:09:63:2e:2f:60:05:8d:
ff:e8:5a:5b:e8:a3:b2:c6:af:d4:ce:1a:a6:e3:36:
9d:09:7b:c3:4f:89:ab:28:d2:94:aa:08:e6:28:58:
d8:17:51:45:9f:c3:7a:da:d9:07:a5:13:98:e9:f3:
54:81:e7:9d:09:b2:32:cd:b0:cc:10:ee:05:1a:7d:
b0:4f:43:0f:40:15:d5:e3:b8:6e:83:08:98:70:aa:
b9:6a:9b:97:d7:64:8c:de:ae:9a:4b:01:5b:eb:8f:
04:37:c0:17:9a:58:83:38:4e:d0:d3:68:2f:06:68:
1c:dd:ba:a5:6f:a2:4c:c6:85:96:71:06:b3:96:ca:
fd:6f:de:3e:b4:e3:92:17:d0:b9:ea:b2:02:31:4b:
fe:5a:c3:4b:dc:17:78:aa:fc:76:71:78:07:16:6a:
3e:35:2f:26:ce:ed:6a:bc:e4:9f:61:da:24:34:68:
92:9c:09:93:c3:1f:76:25:c1:98:e7:6b:48:c2:75:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:4C:C7:4A:30:5C:4E:A4:F7:C9:DF:14:DF:C2:32:8B:CA:0C:70:E6
X509v3 Authority Key Identifier:
keyid:A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bf:3c:70:6f:92:16:de:d4:60:ed:7d:2c:4a:ba:5c:13:e2:
55:f8:c4:64:4d:58:c5:17:be:bd:cc:0f:21:19:6d:1e:da:97:
a0:5d:ba:7f:1f:75:4d:fd:e4:ab:85:81:f6:66:12:5d:bd:83:
c3:47:b6:45:61:73:05:a9:e3:11:91:70:e8:39:79:39:6f:a9:
b7:6a:ed:a8:ac:f2:70:d2:c0:8d:d6:69:19:2f:df:11:19:b3:
ec:12:ca:c5:1d:6a:d9:99:f4:9a:8e:6f:2e:f5:01:cd:dd:88:
d0:e6:2e:fa:94:9f:46:8d:ea:0f:c8:a9:7d:a7:bf:5b:00:39:
5c:2f:ed:4e:99:9c:c5:e7:c9:a4:6a:70:ed:16:38:03:23:2d:
86:54:45:2c:6b:8d:fb:75:1c:6f:c8:66:f1:a8:be:7a:f6:7b:
5c:63:4e:cb:13:20:01:68:11:e9:7c:2f:1b:ce:e7:83:ec:ae:
1c:4e:01:52:19:b6:31:4b:30:3c:56:6e:3f:79:d0:e8:79:4a:
c2:c0:17:c1:ef:24:7a:3b:31:81:46:f9:5d:a4:a5:03:0f:c0:
8f:ac:85:aa:c8:f6:33:73:1f:fc:0b:0c:e4:06:09:29:4e:d3:
8b:a2:bd:d8:1f:cf:dc:31:a3:62:ab:05:6a:cb:4a:59:5e:e0:
0a:aa:de:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:50:37 2026 by rpki-client