Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
File: qgvXjKLKpeuP87noI3dNwbdN6-s.mft (raw, json)
Hash identifier: 0jbrb1Z2YHn2Y0eKNG7fPPJ6mHfEQGw3O/9NE+BE0W8=
Subject key identifier: 33:21:F8:A7:3C:D4:CB:94:6A:9F:F0:2D:FB:3E:D9:26:ED:DB:2A:ED
Authority key identifier: AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
Certificate issuer: /CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Certificate serial: 01A0EC2EC31A0DA705F55BFA1BA0A43E566B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
Manifest number: 0943
Signing time: Tue 29 Sep 2026 08:01:22 +0000
Manifest this update: Tue 29 Sep 2026 08:01:22 +0000
Manifest next update: Wed 30 Sep 2026 08:01:22 +0000
Files and hashes: 1: UbyUEzCsDyKqUbO4mcMwyNy8cOY.roa (hash: oiMnmWGgvSnOjT8fp4+LrkyK7pAMt/y+JFMAU+BQTbc=)
2: qgvXjKLKpeuP87noI3dNwbdN6-s.crl (hash: nVfarlITvBicO5nGA4VRg62Eg6MCWkgZNwSPIhu+xWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:c3:1a:0d:a7:05:f5:5b:fa:1b:a0:a4:3e:56:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa0bd78ca2caa5eb8ff3b9e823774dc1b74debeb
Validity
Not Before: Sep 29 08:01:22 2026 GMT
Not After : Sep 30 08:01:22 2026 GMT
Subject: CN=3321f8a73cd4cb946a9ff02dfb3ed926eddb2aed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:d9:47:15:6f:d8:4b:d5:63:19:bd:01:6d:
86:20:cd:3c:3c:65:75:b7:27:0a:9b:f6:bc:dc:21:
db:af:0c:5e:3a:1c:ab:7a:b6:91:72:1c:75:18:65:
4e:89:ce:92:db:86:ae:2e:c8:7d:cc:30:2d:39:6a:
09:41:32:7f:ad:84:76:83:f6:e7:43:b9:30:32:30:
37:71:d4:3d:0a:70:1b:2c:db:60:dc:2b:6f:5b:ae:
78:2c:40:b7:f6:5c:f6:39:1e:95:92:ff:98:7d:79:
bd:19:8a:d9:9d:1b:a2:fe:2d:00:9a:5a:81:ac:24:
0e:b8:9c:d7:35:99:c4:9e:5a:de:78:3e:65:c5:f1:
25:5a:17:49:ad:1a:80:e9:4e:f2:92:6d:d0:8a:f4:
65:e8:b9:35:6e:b1:c2:21:7f:b3:57:db:a0:6c:83:
ca:02:96:ff:ce:82:c0:ac:a2:c8:04:fa:a0:a7:1f:
d5:6b:d8:69:01:16:5d:b6:82:22:e1:d7:db:08:a4:
30:80:5b:d8:42:62:74:a7:b3:7e:9f:cb:56:9b:c7:
43:8f:19:0a:b8:85:61:d2:45:2b:4a:fb:e1:66:c9:
de:9f:8b:d1:1a:74:18:49:83:d4:34:80:03:36:63:
a0:71:a6:97:c3:2c:97:20:5d:c1:a2:bf:09:8d:4c:
f2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:F8:A7:3C:D4:CB:94:6A:9F:F0:2D:FB:3E:D9:26:ED:DB:2A:ED
X509v3 Authority Key Identifier:
keyid:AA:0B:D7:8C:A2:CA:A5:EB:8F:F3:B9:E8:23:77:4D:C1:B7:4D:EB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgvXjKLKpeuP87noI3dNwbdN6-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/978837-1023-4b39-9b37-a108dbe0fd1f/1/qgvXjKLKpeuP87noI3dNwbdN6-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ca:27:56:bf:1b:d5:94:25:18:4b:c6:6e:55:fa:57:21:db:
25:d7:7f:de:d4:16:fb:e9:11:e2:05:cc:8a:ff:d1:ee:c3:ae:
88:aa:81:21:a1:87:52:c1:72:ba:ee:8a:4a:a5:96:bf:78:ed:
c9:4d:23:d8:17:25:9b:c9:7e:a5:e6:e5:5c:02:b9:26:aa:6d:
bf:e4:5e:9d:97:37:f1:dc:d5:9c:8b:0b:15:55:22:53:a1:47:
df:c9:e2:0b:a3:b8:12:d4:30:0d:b5:eb:50:8a:b8:6e:72:0c:
9f:8a:00:db:60:8d:0a:c7:ce:c2:f0:18:a5:83:d0:8f:48:bc:
dc:35:cd:fc:db:7d:e2:f3:70:ca:14:a5:c5:e8:b3:39:2c:7d:
42:37:9f:99:8e:9c:e0:63:d6:c1:9d:22:60:e3:94:26:f8:ff:
28:27:ad:95:d0:11:a2:fe:3f:15:68:a9:8c:cf:4a:cb:c5:91:
d0:f2:86:4a:29:f6:a8:ed:7c:3e:34:27:b5:8e:9f:34:33:c8:
2c:eb:ea:22:3d:6a:59:f0:96:5c:3a:c3:d4:32:ea:32:9b:2a:
e1:39:2d:ba:4b:11:21:3c:73:d6:f9:5a:a4:1e:f9:3f:9c:7e:
fa:61:f7:8b:c5:a4:c8:1f:c9:f5:a1:00:23:8a:af:a5:07:5a:
cf:e5:d3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:32:31 2026 by rpki-client