Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
File: _QxrK9KdMWhIfJ7F_eTD_ELZz74.mft (raw, json)
Hash identifier: tcoqPEWGhNZHXbs6MRsHiQwjWolW583+fJ3gbV1e53M=
Subject key identifier: 8F:33:A6:75:5A:08:F9:0E:11:6B:C3:76:B4:63:42:44:19:FE:E9:88
Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Certificate serial: 01A0F78E5BF15C1AB93B0E69D42DA89A843A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
Manifest number: 15AF
Signing time: Thu 01 Oct 2026 13:01:37 +0000
Manifest this update: Thu 01 Oct 2026 13:01:37 +0000
Manifest next update: Fri 02 Oct 2026 13:01:37 +0000
Files and hashes: 1: _QxrK9KdMWhIfJ7F_eTD_ELZz74.crl (hash: 0geY1Lz8+HdK3EX5Gz/gI4r1mA5VR1drzzWzbtqJFLY=)
2: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (hash: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI=)
3: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (hash: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:8e:5b:f1:5c:1a:b9:3b:0e:69:d4:2d:a8:9a:84:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe
Validity
Not Before: Oct 1 13:01:37 2026 GMT
Not After : Oct 2 13:01:37 2026 GMT
Subject: CN=8f33a6755a08f90e116bc376b463424419fee988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:25:3d:d8:d3:91:04:7a:27:f0:bd:d7:56:03:
0d:cd:43:17:20:88:e9:f4:9c:27:0a:3b:eb:5e:48:
87:ad:75:44:b1:d5:f3:31:1d:81:16:57:c5:86:26:
6a:a0:a2:9d:3b:4c:cb:96:d4:8b:01:79:49:7c:06:
9e:e2:3b:b7:1b:f2:1a:29:f6:b3:24:7d:23:c9:5b:
2b:62:5b:6c:44:dd:3c:b3:15:31:8f:f5:9d:b2:df:
6b:79:40:c1:49:62:14:55:f8:3b:73:8e:d1:03:31:
32:5c:29:2b:ae:12:19:26:92:95:61:25:cb:11:71:
45:8a:56:e0:00:52:04:12:51:51:68:82:a0:ae:c2:
96:21:7c:a9:6b:d9:63:8f:63:0b:d2:b6:c8:07:c1:
6f:3b:a9:ed:51:aa:28:cb:2c:0d:a5:5e:84:f3:e7:
80:0a:19:b5:c2:85:7c:ca:86:53:73:6f:a3:67:4f:
31:ab:0a:25:22:36:b2:25:70:dd:72:cb:ed:41:d2:
8b:5a:e9:1b:ab:10:7a:c7:5d:2f:2d:95:9b:b2:e5:
39:f6:89:fa:ed:b9:13:34:21:a1:ca:17:e0:e7:7a:
cd:82:9a:a3:fd:b7:0b:43:da:0d:87:17:c0:70:1f:
b9:c7:db:e6:bf:55:ac:d2:35:21:ef:b7:62:ff:0e:
29:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:33:A6:75:5A:08:F9:0E:11:6B:C3:76:B4:63:42:44:19:FE:E9:88
X509v3 Authority Key Identifier:
keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4a:d8:dd:52:65:3f:4e:9d:88:6d:47:52:b2:db:25:32:0e:
7f:bc:7a:72:d9:21:f5:a5:64:78:b7:3f:0c:cc:43:42:e7:7b:
fe:8b:47:50:fc:d3:ea:59:de:f4:18:1d:43:ca:da:15:5e:34:
59:e6:4d:1c:41:ac:4c:61:28:17:3a:29:1f:42:b7:87:9f:ca:
ce:d8:1c:40:fd:7e:82:82:7d:fa:66:0b:08:b8:f7:10:f7:e3:
f9:04:e2:bc:0f:87:84:e6:8c:85:1c:0f:ff:1c:52:dc:d0:bb:
07:5f:b2:20:27:87:e9:9a:2b:32:49:64:82:2f:f9:de:df:c1:
f6:11:4d:6e:ea:97:86:d2:9d:da:9f:1c:a0:61:be:e3:09:29:
64:99:52:09:a0:77:b4:75:47:9d:1d:ee:b1:a0:fe:fe:74:e1:
18:3a:e4:6d:40:67:78:42:4f:07:c6:b2:82:f0:e7:33:f2:40:
6f:ef:fe:05:89:6d:6a:42:5f:22:24:93:94:3d:b8:2e:e3:84:
d1:d0:7e:dd:0e:a0:0e:69:a3:1e:6e:71:2f:d6:1b:1a:20:31:
ea:81:8c:54:45:ff:9d:c9:32:1d:81:67:89:06:26:e3:55:d1:
ea:5a:00:15:8c:37:b7:0b:44:83:ae:b8:5a:29:84:93:d9:7c:
a9:22:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 16:59:05 2026 by rpki-client