Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
File: qCRriLgptKOq3CgNoUW2PpnpKg4.mft (raw, json)
Hash identifier: I24CrBV45dqHSTlbzLQSXZW9Afdbp3B0zOEJCJ7vYTw=
Subject key identifier: 29:C7:F3:CA:75:1D:49:92:C8:89:03:A1:4B:81:73:76:BC:B1:62:25
Authority key identifier: A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
Certificate issuer: /CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Certificate serial: 01A0CE24805E9F6D1EDD7FE857FD257A826F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
Manifest number: 0438
Signing time: Wed 23 Sep 2026 12:01:33 +0000
Manifest this update: Wed 23 Sep 2026 12:01:33 +0000
Manifest next update: Thu 24 Sep 2026 12:01:33 +0000
Files and hashes: 1: nU4rPVtRfbItM-xzvt2LL0ELW38.roa (hash: T9mi4Gm/F4mY5KfCNJRr4hhRiSByxlKrMxz90hm0cLM=)
2: qCRriLgptKOq3CgNoUW2PpnpKg4.crl (hash: I+tx4ZvMctlv5Evow9tEvsuLuQ2BEQ9eyi180E6cLf4=)
3: vnmU6Cd9_S29IUfATpx4bENZIJQ.roa (hash: t0IEkx6uhF4HYE5SrByETF5eoW3uaTBFYKJ9CVbdgRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:24:80:5e:9f:6d:1e:dd:7f:e8:57:fd:25:7a:82:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8246b88b829b4a3aadc280da145b63e99e92a0e
Validity
Not Before: Sep 23 12:01:33 2026 GMT
Not After : Sep 24 12:01:33 2026 GMT
Subject: CN=29c7f3ca751d4992c88903a14b817376bcb16225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:58:d9:0d:ee:c2:9b:3e:92:7c:69:27:85:a9:
95:ec:d3:c1:66:cf:b5:00:70:0e:91:83:7b:be:c5:
03:a3:ad:32:4c:a1:80:8c:75:58:e7:6b:c2:bc:e5:
28:c4:41:e9:77:6f:91:82:42:20:b0:c4:90:41:d5:
4f:03:58:d7:2e:10:37:89:4a:f2:9c:b3:71:c0:12:
26:eb:54:55:b6:2f:0e:7c:2f:4d:44:dd:e6:87:12:
e9:02:2d:c5:c4:73:43:d2:a0:27:1d:95:66:6e:3d:
8d:49:7c:44:05:7a:79:2b:35:cf:7a:41:65:59:3c:
c9:2f:8b:ef:5b:4d:ee:4e:d2:c1:66:eb:fe:5f:56:
82:1e:d2:d7:14:01:cc:27:4b:23:37:f4:01:73:b2:
cc:b1:71:89:cc:5f:54:60:68:8e:bc:2c:bf:91:8d:
a5:11:2f:4a:4c:88:d8:19:09:df:0c:94:5f:d3:c0:
83:06:80:91:72:5b:eb:ce:28:e0:bb:ac:88:1b:b9:
98:83:0e:e0:4b:05:24:95:21:6f:8b:61:19:38:91:
a9:2e:a6:b9:ef:fd:9d:43:8f:17:50:58:3c:9b:bb:
ff:d1:4f:d5:e4:91:a9:7a:14:12:25:2d:6f:8b:a3:
b1:b3:8d:c1:79:fa:13:5d:63:0b:26:0b:8f:63:8c:
5e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C7:F3:CA:75:1D:49:92:C8:89:03:A1:4B:81:73:76:BC:B1:62:25
X509v3 Authority Key Identifier:
keyid:A8:24:6B:88:B8:29:B4:A3:AA:DC:28:0D:A1:45:B6:3E:99:E9:2A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCRriLgptKOq3CgNoUW2PpnpKg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a36fb2-e60d-4f8b-9c8a-490c88301fce/1/qCRriLgptKOq3CgNoUW2PpnpKg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:be:c5:71:12:04:51:ad:94:82:66:3d:ac:2d:2d:0e:4a:8b:
d4:5d:24:51:6c:6e:e1:66:10:15:37:09:e4:0f:a4:15:cc:01:
90:56:5a:e6:4a:13:b7:df:0c:21:8a:3f:18:c2:1e:65:8b:5d:
4f:71:7d:ec:8b:db:93:d9:10:bf:f0:87:d0:2f:7f:b4:00:ff:
15:a3:02:2e:24:8d:73:5d:53:bb:b9:8f:64:0d:55:0a:ff:48:
5d:60:7b:7f:3b:43:d2:6f:af:08:0d:8b:d8:c3:6e:62:2d:27:
d6:21:5b:cb:65:77:2e:7b:4d:3b:74:3a:47:a0:2c:cf:dc:ec:
85:c6:3f:2f:2b:c7:0f:11:3a:49:0d:86:8a:56:a4:43:6b:88:
64:02:70:85:92:ab:d6:1d:0e:18:ee:78:93:31:75:1f:34:a0:
c6:67:3f:6c:29:a6:72:38:58:27:8a:bb:c8:f3:2c:e1:3a:16:
71:4e:a1:28:7d:b2:68:92:65:ff:33:bd:f2:8f:fd:8b:8f:1e:
96:6a:d1:2f:38:91:cb:51:f8:ba:74:6c:b7:26:61:42:21:d0:
ed:37:a7:1d:45:2f:a0:8f:8e:98:d1:7b:f6:5b:e8:ec:fe:18:
f7:af:2e:be:7e:81:02:2f:c7:2a:6f:d6:7a:f9:41:b2:51:65:
fc:24:d4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:32:20 2026 by rpki-client