Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json)
Hash identifier: BGyohjv1UZDsmdLR2KP58encsjvMGgNc0iNnTb/xTAQ=
Subject key identifier: 16:EE:AD:98:65:1B:AD:FE:6B:91:DA:04:DE:4F:CD:87:17:F9:B8:39
Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Certificate serial: 01A0D15BE7548A2C3F3A6708D88240159702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
Manifest number: 19FD
Signing time: Thu 24 Sep 2026 03:00:56 +0000
Manifest this update: Thu 24 Sep 2026 03:00:56 +0000
Manifest next update: Fri 25 Sep 2026 03:00:56 +0000
Files and hashes: 1: QLP9XbN1Hyhc_VCQ2UTyJ8tpQ5Y.roa (hash: r5tx9K1aBs3v2hW6tXffD1T2FV5NS8G8Jy/QzPb7oak=)
2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: jzsYyRkpq0I1+dYPesoFMrrW4SeoT0E3MtGNg3eYSSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:e7:54:8a:2c:3f:3a:67:08:d8:82:40:15:97:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b
Validity
Not Before: Sep 24 03:00:56 2026 GMT
Not After : Sep 25 03:00:56 2026 GMT
Subject: CN=16eead98651badfe6b91da04de4fcd8717f9b839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:97:19:88:42:fc:fb:e6:7d:34:eb:15:e2:
aa:26:25:0a:7e:7f:c4:95:09:27:aa:35:59:40:e5:
07:0a:fc:c2:c4:33:dc:ec:b1:ec:0f:f1:e3:2d:4c:
83:79:69:90:06:1f:9a:b6:a0:3b:bb:3e:a5:e1:24:
e3:d0:9e:ca:05:0f:18:5f:03:bd:14:b3:bc:44:66:
5b:73:2a:72:7a:bf:2d:f6:58:55:a1:03:3b:ef:07:
fe:a2:92:d6:90:ef:76:c6:04:78:17:f5:eb:fd:6d:
b5:cb:00:17:c8:36:b0:48:97:37:4a:3d:6a:5c:21:
96:62:e5:d7:8f:f4:cf:b5:13:f5:88:00:25:65:fd:
85:81:4c:a2:94:b0:c6:f0:95:ce:1f:64:ec:d3:3a:
99:b5:59:a0:88:71:86:12:0b:98:87:d2:52:75:36:
9d:7f:69:e8:2e:16:43:18:c9:75:de:ae:11:0a:72:
6e:2f:4b:ef:4b:5a:ba:5b:1f:5c:93:c0:40:3c:4c:
ba:b8:b2:b2:04:bb:80:22:1c:8e:51:8a:b1:6a:08:
5d:6f:fd:f6:bc:35:1f:d2:98:a7:a5:0c:42:4a:37:
4c:4a:4d:a7:c5:f2:1a:0e:17:df:d2:f7:dc:f8:82:
97:dd:db:d4:20:91:62:ba:fd:a3:fb:6d:29:c2:4e:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EE:AD:98:65:1B:AD:FE:6B:91:DA:04:DE:4F:CD:87:17:F9:B8:39
X509v3 Authority Key Identifier:
keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:23:dc:20:e6:37:27:b1:09:78:f7:5b:ad:92:44:2e:ec:a0:
99:50:a7:dc:bc:4e:a5:2c:11:3e:f3:b7:d1:87:62:10:d2:93:
9e:81:17:db:7d:cd:3b:8e:ed:2e:7c:b9:f6:de:6e:7f:7e:ef:
e1:af:a7:f9:b4:2f:97:c2:97:50:a4:36:53:34:d7:e6:a3:d5:
b5:a4:6e:d7:ee:2a:79:5f:44:98:9b:60:bf:2c:d3:e7:30:af:
cb:4a:dc:83:8f:b7:d4:c5:cf:88:8d:79:6c:31:f6:15:9d:6b:
65:dc:3f:36:bd:b7:b2:ae:80:30:cf:ea:22:e6:9c:58:4b:bc:
fa:64:56:72:93:c1:ea:1d:31:7b:58:f5:75:ee:46:8c:14:92:
cd:85:c9:48:86:44:21:02:c8:d4:4a:b2:0e:2f:f6:c7:65:28:
ec:6a:47:e6:10:93:ad:49:09:11:1e:c7:fa:aa:37:f5:37:b3:
3d:e3:85:78:7f:d1:c4:60:c3:7d:01:4b:92:f7:a0:9b:e7:b3:
55:6f:4e:3e:35:a0:0d:83:67:f2:3e:aa:4c:55:d5:73:83:d5:
43:09:b2:33:71:dd:a6:17:5a:a6:6a:57:21:44:63:41:f7:de:
4e:d8:e5:98:6d:ca:db:ff:48:28:77:37:09:e7:91:99:18:bc:
c0:11:14:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:55:19 2026 by rpki-client