Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
File: qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft (raw, json)
Hash identifier: 8fSFfwsDAF1H1La95mUvMueMK8tchWNpRn4o3SIfLbA=
Subject key identifier: E4:EC:7F:0C:04:3D:D5:D3:DA:23:FA:B8:D5:37:69:85:5C:D8:E5:7C
Authority key identifier: AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
Certificate issuer: /CN=aafc3d2c929710306e847c607d38114aebb3cc08
Certificate serial: 01A0D83C0F5EA7DB0A69EFE9CA912BF95895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 11:03:29 +0000
Manifest this update: Fri 25 Sep 2026 11:03:29 +0000
Manifest next update: Sat 26 Sep 2026 11:03:29 +0000
Files and hashes: 1: 3qtjPVhy36B112_T9YD_k1D7PrQ.roa (hash: TnLbrW8cdvU0sgFs8JL8GKZ+s8BUvq1O8YCehip/3/4=)
2: b-_QLOAaiTLnrdshp-MjmUbpJAQ.asa (hash: zE9zRSorao8ZT6ov8SMASzQ+KxaurOF00HS44oG3cE8=)
3: qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl (hash: PHXvC99LKVaIYgQR3DT+EanwEsxNMWeo8bYq5JwAW7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 11:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3c:0f:5e:a7:db:0a:69:ef:e9:ca:91:2b:f9:58:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafc3d2c929710306e847c607d38114aebb3cc08
Validity
Not Before: Sep 25 11:03:29 2026 GMT
Not After : Sep 26 11:03:29 2026 GMT
Subject: CN=e4ec7f0c043dd5d3da23fab8d53769855cd8e57c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:2d:ef:ee:3f:93:a8:de:ae:73:58:d9:8e:
52:de:11:7e:52:8f:71:28:ba:24:64:c5:36:15:31:
ae:8d:54:99:ac:e7:74:11:3d:e1:f1:09:11:a7:d8:
2f:c9:6c:fd:8e:bc:92:ee:a9:78:11:8e:5c:90:1f:
4f:bd:74:da:2f:2b:62:2e:57:2c:7f:e1:e8:b0:07:
0b:e5:de:5f:39:ef:b9:e3:42:bd:73:d7:27:f7:f7:
1d:c2:d1:7b:1a:84:32:7d:1f:b4:89:a9:e7:6e:d9:
c0:6e:31:df:95:c6:0e:bf:95:ff:d0:de:e4:0f:f8:
3e:4f:38:fb:97:73:8e:4c:f8:eb:95:c5:c1:6c:f5:
0b:c6:d9:20:06:ff:71:29:7d:c7:be:a2:87:a9:ba:
42:ae:ce:bb:fe:32:c4:de:ca:1b:01:a2:31:31:4d:
03:cb:8e:02:a0:51:76:5a:fa:67:b4:db:6e:79:4d:
0f:c7:5e:85:49:1d:7f:28:26:e2:e7:86:a0:ff:d2:
e6:ce:5b:59:bf:c5:92:4f:d7:86:1d:c7:72:c0:e0:
36:69:39:83:9f:2e:41:48:7b:d5:36:5a:2f:30:1e:
af:76:07:b1:b8:3e:ae:ad:63:ac:9e:dd:58:e3:49:
12:5b:cd:1a:f7:30:4e:7d:2b:96:b3:0f:f0:66:69:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EC:7F:0C:04:3D:D5:D3:DA:23:FA:B8:D5:37:69:85:5C:D8:E5:7C
X509v3 Authority Key Identifier:
keyid:AA:FC:3D:2C:92:97:10:30:6E:84:7C:60:7D:38:11:4A:EB:B3:CC:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvw9LJKXEDBuhHxgfTgRSuuzzAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/637946-7bf2-49a3-b50c-137d86e303c5/1/qvw9LJKXEDBuhHxgfTgRSuuzzAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e4:9b:59:6c:6f:af:a8:77:ba:c7:24:d1:09:28:0f:2e:ee:
85:79:5a:fe:08:eb:d0:ee:ec:ee:46:9e:5a:cd:a0:cb:5c:9a:
76:f6:3e:08:7d:79:bd:72:74:fd:22:1f:28:ae:48:26:6d:63:
b1:9d:fb:1e:bd:04:f4:28:9b:7f:70:0f:cc:43:c3:0e:4c:57:
83:80:2f:2f:d3:a3:77:2e:86:78:ca:f3:e3:ce:64:34:11:96:
9b:40:01:82:cb:bd:3c:df:71:e7:3c:dd:3a:df:f7:9f:ee:1f:
da:cf:31:c4:ba:35:a7:5f:c5:43:f7:0b:85:f6:96:c7:45:c7:
a0:09:ac:a9:ef:f1:c6:59:11:93:14:73:3e:c3:37:82:f8:95:
6e:64:7b:fa:c6:a5:10:05:7a:0b:16:08:66:10:f2:c5:40:f6:
59:d2:99:e3:d1:9d:30:20:1b:5e:d1:cd:cc:00:14:83:02:e7:
6a:43:df:21:0a:b5:a3:f5:cb:85:79:7e:35:6d:0e:b5:ee:b2:
5d:bf:83:d0:db:ac:1f:1b:07:f0:97:63:1b:e7:83:9b:0c:2f:
17:30:9a:d4:a2:44:9e:39:07:16:70:7f:d5:8a:ac:33:e3:39:
c7:17:be:38:e6:25:9c:d7:9e:3f:73:1e:8a:1e:6d:1a:0b:40:
80:a4:84:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:03:43 2026 by rpki-client