Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: LBtmxk3Yr6p7Cz13Nnge4HNxxQNPetuQQ+H8yKz6TNo=
Subject key identifier: 1D:61:C9:7A:5C:35:0F:9E:B1:85:72:A4:D1:E6:88:36:9F:F2:74:57
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 01A0F37A2F62FCCC2857550059CD760ED2C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 1A85
Signing time: Wed 30 Sep 2026 18:01:05 +0000
Manifest this update: Wed 30 Sep 2026 18:01:05 +0000
Manifest next update: Thu 01 Oct 2026 18:01:05 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: 0KUZZhs2Na/5Skap7DFz6oJf4Uz4AJi3dIIk2u7YReI=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 18:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:7a:2f:62:fc:cc:28:57:55:00:59:cd:76:0e:d2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Sep 30 18:01:05 2026 GMT
Not After : Oct 1 18:01:05 2026 GMT
Subject: CN=1d61c97a5c350f9eb18572a4d1e688369ff27457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:b0:0f:fb:e0:76:cb:b8:a1:01:da:bc:11:
5f:46:1c:70:88:7e:90:c2:6e:18:24:df:9b:65:0b:
94:02:4b:df:81:17:4e:15:83:f6:99:c6:0a:73:a2:
84:3d:18:7a:7a:fc:9d:94:1f:4e:7c:65:38:34:c3:
89:97:3b:64:04:9c:54:18:39:e0:f7:73:fe:d1:36:
6e:62:3f:32:32:25:b6:a2:72:3a:08:a7:60:6a:e4:
58:b7:83:4f:6b:32:19:e8:bd:d8:68:61:a7:9e:b4:
72:11:09:64:6e:8c:44:8c:8d:73:5f:12:d4:1b:df:
6c:5a:e0:f4:3c:0d:93:29:56:52:a8:82:80:64:6b:
b1:1c:31:61:e8:a8:73:77:80:49:54:09:98:d0:a5:
91:fc:72:f1:a7:ad:10:75:bc:ce:99:0e:9a:11:98:
98:57:07:d5:1b:0e:e1:18:b8:01:2d:a2:d4:f0:83:
16:b9:ba:02:0e:26:b2:a0:2e:6c:26:fd:42:ae:06:
99:3c:a0:e6:b9:5a:91:2f:08:22:55:6f:21:51:55:
24:d6:bc:65:28:b5:3a:d5:d2:63:e2:9f:4f:54:d7:
71:8f:ec:0c:d5:de:f0:60:eb:36:f5:bd:15:8f:b7:
42:20:91:0f:1e:5d:fa:bd:b3:52:d9:c8:a9:07:9f:
32:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:61:C9:7A:5C:35:0F:9E:B1:85:72:A4:D1:E6:88:36:9F:F2:74:57
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:17:68:89:2e:e1:df:d9:c3:d0:39:7d:eb:09:97:b5:92:5a:
2f:f6:cd:e9:56:3f:aa:49:b9:cd:c3:48:24:fd:66:71:a9:d0:
f6:34:33:bf:58:47:41:85:32:f1:05:9b:61:e1:d7:b5:3d:b1:
7b:24:7e:93:1b:aa:f2:d0:97:1a:5f:e9:e2:6f:f5:73:2a:d5:
e0:3c:b1:40:f0:a8:0b:f2:eb:2b:d4:19:c5:ac:f2:a3:f1:67:
0c:be:ad:b1:76:e5:3e:c9:a0:66:e4:d0:82:a6:fc:e8:85:b9:
bb:78:04:0a:18:7b:2a:d4:2f:e5:bf:6f:f2:d3:a3:f8:0f:ff:
57:fb:1c:d4:b0:bd:14:07:95:c4:29:f0:00:79:f4:1f:3b:5b:
c0:56:ba:41:1d:b3:13:68:77:19:1b:26:52:7e:0b:3b:0d:11:
80:3b:0f:25:35:2c:18:6c:d5:32:e3:f5:97:0c:bf:4f:a2:84:
8a:3d:a2:f6:70:f7:85:d7:b0:c5:68:e3:d5:aa:a2:0b:1a:19:
ba:0b:dc:9b:6b:91:d6:e6:64:5e:00:1f:2f:54:f8:03:1b:dc:
3e:67:c9:01:27:55:c7:15:bc:47:e3:6b:9c:00:85:6c:cd:63:
ea:f4:b0:20:70:48:cc:00:04:b0:1c:70:b6:8e:e5:d1:2d:ec:
ad:7b:78:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 08:06:41 2026 by rpki-client