Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
File: qaHWsnXkY50IGRt8RqsjlCgod0Y.mft (raw, json)
Hash identifier: J7u5utZoVYoUAPYxNgeBseQchVpopfrEzjuxvZVHH+g=
Subject key identifier: D8:45:4E:E9:79:19:A8:2B:88:A8:03:52:A6:1E:78:43:60:DB:25:EC
Authority key identifier: A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
Certificate issuer: /CN=a9a1d6b275e4639d08191b7c46ab239428287746
Certificate serial: 01A0F0E70C310AFDECBC7A85D1B7EF99DF70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
Manifest number: F6
Signing time: Wed 30 Sep 2026 06:01:08 +0000
Manifest this update: Wed 30 Sep 2026 06:01:08 +0000
Manifest next update: Thu 01 Oct 2026 06:01:08 +0000
Files and hashes: 1: ab6rMUVn3A5Dtq5dYI7GOWhDpls.roa (hash: hYA//IrWljegAbclM/Dg53bUXQQ8j8qJOOVapxZlnWw=)
2: e95uvzijUfA8PskqB29MCQITY0c.roa (hash: 5t2e4qTsbvRPuZzQuH0LgBYqoRjK8h1rvy0dZQHvLOQ=)
3: h4HTnmNQ40S0AlgZb0tILyqRtAs.roa (hash: x8PyCmmrpbL3asDF+bPUyXhIWSTsgb0lr6OUsDywpqw=)
4: qaHWsnXkY50IGRt8RqsjlCgod0Y.crl (hash: N/smZCR8tkvtIZdfpzXGZ3eP6BXakYhWjgH9OmY7+MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:0c:31:0a:fd:ec:bc:7a:85:d1:b7:ef:99:df:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a1d6b275e4639d08191b7c46ab239428287746
Validity
Not Before: Sep 30 06:01:08 2026 GMT
Not After : Oct 1 06:01:08 2026 GMT
Subject: CN=d8454ee97919a82b88a80352a61e784360db25ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e2:13:30:9e:f5:a7:49:97:69:81:b2:13:ef:
68:05:cf:ba:82:8d:ba:7e:56:c4:b3:b7:44:44:ce:
09:86:8a:56:7c:f7:3c:9e:29:0a:58:60:d4:92:73:
d0:43:2a:dd:57:a6:19:32:77:18:1e:5c:82:ea:2b:
26:f2:cb:80:78:05:a8:c8:c2:9d:09:ca:dc:d0:a9:
39:69:df:c1:b5:5c:f7:79:d4:0a:ed:3b:32:e9:25:
4d:c2:dd:78:10:ee:8c:3f:08:16:f6:7b:4f:55:11:
a3:3c:11:a8:12:1d:bc:d0:79:dd:11:d8:06:35:38:
3e:f0:07:e1:d5:71:23:2e:39:5c:09:19:bd:fa:8c:
49:ba:51:87:60:d4:ca:97:d5:22:1c:d5:bc:67:a3:
92:63:0d:0a:c3:e3:0a:7a:88:68:44:1b:57:88:11:
62:b6:fd:5f:90:ef:af:53:36:b9:36:15:2c:98:cc:
43:fa:5c:b4:ac:51:36:ca:3f:1b:0e:fb:0a:89:c3:
53:cc:ae:7f:4a:68:6d:a8:d6:1d:51:50:43:f0:52:
97:77:8a:e2:8f:f4:1c:69:d2:cd:38:00:cd:58:57:
25:23:eb:de:26:58:8f:1f:67:bf:1c:d4:ad:5e:23:
ee:a4:2f:be:46:84:a7:dc:6b:05:e9:51:33:10:8e:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:45:4E:E9:79:19:A8:2B:88:A8:03:52:A6:1E:78:43:60:DB:25:EC
X509v3 Authority Key Identifier:
keyid:A9:A1:D6:B2:75:E4:63:9D:08:19:1B:7C:46:AB:23:94:28:28:77:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaHWsnXkY50IGRt8RqsjlCgod0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/qaHWsnXkY50IGRt8RqsjlCgod0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:30:a1:e8:22:e8:48:bf:6e:48:da:79:dd:9f:77:4d:3e:75:
d6:22:73:2d:65:ae:ff:be:04:7c:45:14:ff:30:a8:5a:b8:44:
b8:b5:45:c2:a0:46:c9:dc:21:1c:fb:73:02:16:9c:c2:2c:5f:
ee:ce:12:27:80:95:93:e9:51:08:ae:ba:02:84:63:aa:d0:d7:
8d:24:29:b6:95:1a:15:f0:47:72:43:3f:57:b9:62:9a:9f:a2:
92:dd:0d:79:2b:44:71:fa:63:f4:94:85:14:2c:3b:e0:f3:91:
4b:81:bb:e4:e3:48:bf:d6:2e:5a:63:e9:9f:1a:46:b0:73:b9:
e4:d7:93:5e:29:cd:7f:c7:57:3d:0c:1a:08:d1:4e:2f:f5:1b:
fc:12:b7:dd:33:ed:95:36:b7:b2:bd:e2:2b:b5:0f:d5:94:43:
ed:1e:73:26:10:91:56:b2:8b:13:67:9b:58:4a:7a:b3:89:43:
35:ac:39:77:ee:e0:0c:58:f2:97:35:be:6a:17:a0:f6:b9:19:
21:7a:c4:20:47:aa:55:07:0b:be:d6:ac:b3:9d:e0:21:4a:5e:
39:f8:52:7c:a4:e0:7b:3a:27:bd:78:a4:7d:4e:76:af:80:20:
f4:df:fa:2d:2a:45:98:9a:fd:ad:46:a3:c6:a3:75:a7:bb:3a:
ba:a3:ad:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:23:38 2026 by rpki-client