Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
File: q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft (raw, json)
Hash identifier: KMYKnBMDJzleZJC6BJq8SKgmgPiYKy308llKT3NCyA0=
Subject key identifier: 48:03:08:F4:B8:38:F3:8F:06:7B:83:AE:F0:96:6D:F5:B9:A9:E4:E6
Authority key identifier: AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
Certificate issuer: /CN=abbad3de831da94222c1add104caf4c3247689ac
Certificate serial: 01A0D7CBFF30B8A041361EDAA238038EC447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
Manifest number: 1AB4
Signing time: Fri 25 Sep 2026 09:01:05 +0000
Manifest this update: Fri 25 Sep 2026 09:01:05 +0000
Manifest next update: Sat 26 Sep 2026 09:01:05 +0000
Files and hashes: 1: 7QXSQMVR5e3PA33Tbe1jUFBiBtU.roa (hash: Fu/x5ydAHbzxjRuQ9kPsYtD1frLQkvc1el/MBrSoppE=)
2: D_nN_vPhKORNTjWjIas_aeL_fw4.roa (hash: 2kCeAo6j8PDX4i6BTYf7QZybuVQ19wHuoI+CXgfbp/g=)
3: NIWJ9b544URGWTLtmkZjvf2kxIA.roa (hash: DSfziWB0uqzODbT1D3jvb0WNAfepSpfXbax16O29J9U=)
4: e7dlLb1mQuulDFLIJIubZnzn92Y.roa (hash: pjhxvegNUc0jD9hr5mE16h6OsbQxuTM2Z8MfFLGcvIk=)
5: q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl (hash: Dit6t1w8CvjLT4DgIAsb2cV/6aWvBCn80ntZrGbX9EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cb:ff:30:b8:a0:41:36:1e:da:a2:38:03:8e:c4:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbad3de831da94222c1add104caf4c3247689ac
Validity
Not Before: Sep 25 09:01:05 2026 GMT
Not After : Sep 26 09:01:05 2026 GMT
Subject: CN=480308f4b838f38f067b83aef0966df5b9a9e4e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:c9:5b:c8:a1:46:f1:9e:e0:1b:74:8f:ca:
a2:ad:23:bf:fb:da:11:0e:fd:07:5d:33:94:3e:3c:
a1:69:60:ce:28:21:2f:b2:7d:10:95:7c:40:e7:a7:
a2:5e:22:3e:47:d8:f4:c3:90:0d:df:5c:05:e1:8d:
07:08:7b:75:10:11:8c:3f:92:7c:2f:c4:6a:36:94:
14:94:31:39:e4:5f:58:f6:8d:f8:4a:22:9e:6b:f6:
4c:57:8c:88:53:a2:95:45:9f:cb:bd:21:c2:e3:07:
63:c0:f5:01:6f:41:30:71:dd:3a:25:e7:2a:b1:1c:
ab:ff:45:13:e6:34:8c:c7:28:8e:c8:dd:4d:57:fb:
fd:3d:3f:38:67:a2:7c:0b:a4:02:b1:40:c9:8e:85:
71:9b:02:cc:78:cd:e9:4a:6e:95:b1:ce:5b:91:00:
77:99:6e:67:ee:fe:e6:94:8c:ff:e7:fe:ab:f1:e6:
7b:8a:0a:9d:3e:af:e0:5f:0c:b0:3e:3d:13:33:5c:
2e:03:f2:69:12:a2:4c:52:7d:f3:38:b7:7e:7d:4b:
97:09:88:e1:4a:d0:ea:a1:58:8a:7d:ab:15:44:e7:
84:28:80:1b:8e:31:f7:fe:f9:7e:2d:be:0d:f2:a9:
9c:30:b8:80:48:e9:b5:3c:bd:f6:1b:62:8e:34:aa:
a7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:03:08:F4:B8:38:F3:8F:06:7B:83:AE:F0:96:6D:F5:B9:A9:E4:E6
X509v3 Authority Key Identifier:
keyid:AB:BA:D3:DE:83:1D:A9:42:22:C1:AD:D1:04:CA:F4:C3:24:76:89:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7rT3oMdqUIiwa3RBMr0wyR2iaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8e8149-d53c-4992-bd07-55c434eec96c/1/q7rT3oMdqUIiwa3RBMr0wyR2iaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:40:e6:02:24:72:da:d9:34:00:59:a4:91:4a:ed:89:6a:b7:
c3:9f:a0:83:a4:aa:ed:25:5e:87:5d:09:0a:a9:5c:95:ba:24:
3f:e9:c2:e2:5a:0b:89:9a:99:10:89:76:88:6f:f4:24:37:00:
fb:62:dd:a3:f7:54:54:fe:8f:b6:56:13:15:31:8e:7d:8a:f1:
2e:cc:4c:a5:7d:a9:7e:cf:ad:00:6a:63:03:92:c7:aa:be:32:
22:ce:61:37:b5:b2:81:40:6d:92:ec:b0:d4:50:8f:bf:50:dd:
80:30:15:f2:08:24:d9:63:21:26:00:19:8c:7c:ee:92:d0:00:
4b:b9:dc:95:73:2e:1c:a3:11:6f:58:5e:95:3c:7b:3e:24:a2:
1f:9c:01:f9:df:a3:44:f2:0b:c9:b8:bf:af:19:bd:96:eb:e7:
26:a1:b8:6d:08:ec:75:c6:18:3a:84:d2:7d:7e:7a:07:8f:00:
90:93:af:e7:7c:41:33:44:6d:3c:19:ed:04:fc:5c:91:21:0a:
b7:50:db:e7:76:f4:a0:3f:9e:da:56:cb:b3:d0:2a:4d:a1:89:
03:0b:6b:bc:94:82:24:51:d0:c8:9b:ad:e3:1e:33:8f:01:2d:
03:37:f0:5b:fa:5e:6d:c8:18:22:94:c1:4e:89:61:a2:1c:8e:
86:5b:cb:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:32:25 2026 by rpki-client