Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
File: qnNO9a4hwOiX-hhkRxhOya1K4p0.mft (raw, json)
Hash identifier: SakPt7fhJkfn5ITx2zGG0MddM/0iVvi8jnE3mnIhe6w=
Subject key identifier: 11:A7:D0:68:6C:26:33:CB:E2:B2:F6:4C:D9:88:F8:5D:73:BA:ED:F0
Authority key identifier: AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
Certificate issuer: /CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Certificate serial: 01A0CE919B7789D76296DF44AB7669B742FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
Manifest number: 0C1D
Signing time: Wed 23 Sep 2026 14:00:44 +0000
Manifest this update: Wed 23 Sep 2026 14:00:44 +0000
Manifest next update: Thu 24 Sep 2026 14:00:44 +0000
Files and hashes: 1: Nd2VWji2-npmv2b1apqFNWYSkaY.roa (hash: BWQO3/ctGckcd4Dl6OgXbOo4/UEjPFHnSYCpr3sCzaU=)
2: dKP6zKEOjA35eNWIADhSGj3djko.roa (hash: 2Lz2j2XDdHTzfHzI32dG004beOMGbTVI9KUsaPstIRU=)
3: qnNO9a4hwOiX-hhkRxhOya1K4p0.crl (hash: I7eXES6TdIaFQuwJJ8w10gjmlI2wl2/N2bskxaueZdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:9b:77:89:d7:62:96:df:44:ab:76:69:b7:42:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa734ef5ae21c0e897fa186447184ec9ad4ae29d
Validity
Not Before: Sep 23 14:00:44 2026 GMT
Not After : Sep 24 14:00:44 2026 GMT
Subject: CN=11a7d0686c2633cbe2b2f64cd988f85d73baedf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e3:38:6c:ab:56:1a:25:35:c2:69:93:d4:a8:
69:53:ea:1f:40:6d:89:19:0c:fe:7d:22:f1:8b:fa:
ca:a4:4a:ba:33:cf:91:20:1d:2e:b0:e3:d6:ff:60:
27:40:be:b1:b7:07:dd:14:11:60:0b:4c:e3:2e:6d:
67:b0:04:fb:d1:06:35:fc:da:6a:06:37:ab:6e:11:
28:d8:24:5d:98:00:89:fd:05:04:72:c6:5a:05:21:
ae:e1:d0:1a:77:25:06:4b:a2:35:48:5f:41:3a:15:
37:89:e7:d7:c9:97:d3:54:ed:b0:d7:83:23:0a:39:
78:7d:b2:d5:36:54:0a:64:ba:27:d2:5c:3c:f7:50:
75:c5:0e:f0:f7:54:80:a5:2a:c7:6c:86:c2:70:2a:
ed:52:3c:d7:0d:11:b0:05:bc:78:fc:5d:67:c9:34:
48:46:4f:00:1b:56:9d:4b:bf:b9:62:67:58:e0:95:
a1:ab:4a:d1:43:b8:6d:48:1c:6f:33:60:d5:82:47:
bd:b3:1b:07:e7:23:36:bf:f5:e4:75:65:8f:f7:fb:
13:df:46:e4:7a:cf:be:59:59:62:25:0e:c5:aa:e1:
c5:6d:e2:9b:86:71:4d:77:61:bf:67:5a:5f:fb:4b:
b6:f9:f6:4d:87:76:70:49:98:bd:06:bd:da:9c:3e:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:D0:68:6C:26:33:CB:E2:B2:F6:4C:D9:88:F8:5D:73:BA:ED:F0
X509v3 Authority Key Identifier:
keyid:AA:73:4E:F5:AE:21:C0:E8:97:FA:18:64:47:18:4E:C9:AD:4A:E2:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnNO9a4hwOiX-hhkRxhOya1K4p0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/748111-0e10-4792-9b1b-da780cfb99a4/1/qnNO9a4hwOiX-hhkRxhOya1K4p0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:88:f5:51:82:a9:40:28:2c:57:7b:53:3f:7d:3d:8a:37:22:
62:78:7d:42:82:9d:f0:86:12:e9:a6:c0:b7:27:f7:6a:5a:c0:
eb:ea:35:8c:fa:d3:04:6b:49:08:fd:a0:6b:97:be:69:b1:f5:
dc:4b:11:ae:3f:43:63:9f:fb:85:9d:76:86:4b:1d:c2:58:2e:
46:ad:46:e7:82:6d:f5:06:ac:4e:43:f5:51:0f:c3:09:ce:e9:
7d:11:e7:9b:a4:a2:44:d0:54:ce:c5:53:eb:70:39:34:50:f9:
72:6c:2e:eb:c9:ae:6a:91:f1:eb:1a:f5:04:79:ab:7b:b5:b9:
16:e6:7b:e9:2c:2b:84:9e:38:37:c6:6b:98:34:aa:e7:a7:fc:
63:ee:d1:27:3b:24:08:8a:27:26:2d:ce:0a:a5:f6:99:b1:31:
d5:f1:19:7e:57:df:61:cd:b6:3c:fd:76:90:10:b5:1a:b6:b7:
b8:ec:99:66:b2:7b:c2:82:8e:01:83:ff:05:a2:1e:17:08:7e:
2c:f8:ee:83:74:8f:60:e2:2c:9f:ed:00:9d:a8:62:aa:e5:cc:
82:5f:25:b5:b6:02:35:81:93:19:42:ad:dd:3c:2e:68:18:b2:
2e:44:c2:44:4b:ba:90:8c:51:20:6f:9a:60:f8:ea:69:fe:5b:
45:23:22:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:27:37 2026 by rpki-client