Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
File: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft (raw, json)
Hash identifier: xabs3ynMnoyH2S3KAl6FCczC2QjZ6lepw5uDhMYzAhQ=
Subject key identifier: 9C:93:DB:8D:3C:26:F5:1D:48:49:A2:E3:E4:BA:38:95:A7:21:1A:18
Authority key identifier: A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
Certificate issuer: /CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Certificate serial: 01A0CBC7B573A5EE40363EE49E8081C5048B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
Manifest number: 15F5
Signing time: Wed 23 Sep 2026 01:00:58 +0000
Manifest this update: Wed 23 Sep 2026 01:00:58 +0000
Manifest next update: Thu 24 Sep 2026 01:00:58 +0000
Files and hashes: 1: _GMjCgOppj-cDNqGf9sL7bV12vk.roa (hash: TsdjcA8kBAsvuIEMhSHqHIIP+sdYNNN8QiJUeKvHVXo=)
2: gCXrBFLxOw6kqjD16CuMsL6zWgE.roa (hash: v9RU6FPgMI/ClMLp92GPHhi/v35/JkjC+Xjyrv6zdv8=)
3: qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl (hash: rtkhJv/NGs8ikNHNoCGcXSA1I5ZK1VeCTkNu6s4QBBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:b5:73:a5:ee:40:36:3e:e4:9e:80:81:c5:04:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a999cffa6e48fa2c4f8d09803396b457a630a33d
Validity
Not Before: Sep 23 01:00:58 2026 GMT
Not After : Sep 24 01:00:58 2026 GMT
Subject: CN=9c93db8d3c26f51d4849a2e3e4ba3895a7211a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:bd:d3:df:fa:9c:ad:54:16:75:60:46:77:
b0:75:1d:cc:6b:3a:b3:87:95:d4:43:e8:08:d3:5b:
5a:94:d1:35:7d:9d:5e:94:eb:35:b7:67:cd:7e:e2:
40:cb:af:89:d1:e9:27:40:c5:a0:66:0e:f7:d9:31:
01:db:99:7d:f9:51:83:da:d8:53:05:02:05:f0:b5:
4e:ce:e6:06:b6:74:e9:6e:fc:f9:6b:fe:d4:aa:51:
14:fd:50:66:36:4a:93:a6:7b:59:26:f4:f0:2f:ff:
33:90:06:83:73:18:46:9d:af:b6:e5:88:6b:0c:53:
e4:7c:9e:8a:11:8e:f8:0c:11:dc:8d:59:2a:f3:8a:
ad:22:19:a7:94:e9:d5:49:46:e9:56:85:45:87:e3:
11:b4:85:18:ae:ae:d2:5b:f8:17:c8:28:44:5e:e0:
c0:3a:a5:2a:d2:3b:17:21:24:b2:2c:ce:ec:70:9f:
da:e2:89:99:4e:c6:55:13:9c:6e:a1:d5:e7:13:33:
96:a5:4b:e3:54:d4:2c:bd:78:09:01:42:49:99:b0:
64:e5:df:4a:eb:22:b9:c4:af:37:aa:0e:d0:35:08:
43:cf:6a:10:3a:a5:aa:05:66:be:06:3f:c2:69:91:
7f:b0:dc:f1:ae:dc:50:64:df:47:3b:d6:d8:4e:b8:
cb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:93:DB:8D:3C:26:F5:1D:48:49:A2:E3:E4:BA:38:95:A7:21:1A:18
X509v3 Authority Key Identifier:
keyid:A9:99:CF:FA:6E:48:FA:2C:4F:8D:09:80:33:96:B4:57:A6:30:A3:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/f143d0-aeb8-4b52-9c35-b3a50910c2a8/1/qZnP-m5I-ixPjQmAM5a0V6Ywoz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:5e:48:a1:90:0d:91:84:ab:ca:4c:58:6e:c1:96:2c:81:91:
e7:c0:23:b2:b6:c3:70:2d:70:a7:22:fe:c9:5b:59:64:9b:ef:
25:35:8a:1f:88:88:af:ba:b4:78:9b:d6:31:48:f4:64:a5:87:
7e:8e:38:71:9b:ab:37:03:bf:6b:c5:d5:88:7f:c7:09:aa:03:
05:af:45:3d:31:83:05:ba:71:c2:4f:c0:41:52:bd:35:93:34:
d1:ec:68:22:84:e4:0e:33:49:15:72:0d:5f:eb:3d:46:9b:ab:
9b:07:f2:5e:c7:62:25:75:d6:eb:aa:77:fc:66:18:3e:cb:4e:
53:2d:24:ad:e5:f6:c6:fe:9d:c2:de:9d:ab:47:b0:24:4c:03:
fe:79:51:fe:ae:09:da:00:da:7e:96:72:68:0d:2e:b0:b9:ab:
b8:65:d3:42:04:f9:a2:99:7d:30:6c:de:76:18:63:70:4f:73:
b9:2b:9a:7e:f7:a1:2a:bc:45:69:8e:de:2b:7a:fa:e8:87:ee:
6b:b6:3c:e5:1d:5d:06:53:d1:86:9d:85:45:e5:ff:27:c8:86:
f7:92:c1:0b:1e:ec:ba:70:61:cc:87:4e:ca:dd:ee:78:3d:6c:
63:9d:4e:32:cb:ff:01:01:50:4c:4a:c8:3f:e4:bb:41:61:9c:
bb:1b:f9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:03:47 2026 by rpki-client