Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: Xb2NCfQaxIFFFL90ONWRtQQQFNlZHpA9QrvWivtdtNg=
Subject key identifier: 70:E1:91:FB:53:75:CB:51:19:17:F5:72:89:04:AF:CC:93:56:DD:7D
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 01A103C9DE63A8E3728DEFFA728035183540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 0B1F
Signing time: Sat 03 Oct 2026 22:02:03 +0000
Manifest this update: Sat 03 Oct 2026 22:02:03 +0000
Manifest next update: Sun 04 Oct 2026 22:02:03 +0000
Files and hashes: 1: XdHfu4aNbbqY05djIHZSat5N9NA.asa (hash: AUEcvgTMi0kC5OD2yO9q7Au5IXQUp3/LdfUmGStQlvw=)
2: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: d1LPoh7iFmX14CgZ7QUyiLyrDg87Z2z6rOnp6vHYyik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:c9:de:63:a8:e3:72:8d:ef:fa:72:80:35:18:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Oct 3 22:02:03 2026 GMT
Not After : Oct 4 22:02:03 2026 GMT
Subject: CN=70e191fb5375cb511917f5728904afcc9356dd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:90:36:aa:1d:3f:19:83:a4:b6:63:8a:ae:
51:72:e6:bd:d9:76:8e:c1:9b:e6:25:a6:ad:8d:41:
51:65:d2:6d:30:eb:1e:fc:ec:6b:01:46:aa:c0:c2:
1e:22:c8:fd:f9:ae:8f:44:fd:12:ba:f6:2d:09:10:
c3:66:cc:95:b4:94:aa:10:72:8c:d0:e3:e4:c5:bb:
9c:c2:0d:b3:53:10:66:13:74:78:2d:90:c7:b9:d7:
2a:e1:3b:fc:35:ec:f5:ae:d1:ba:09:53:01:31:c7:
9a:fb:13:60:c9:47:11:02:83:63:3f:06:17:31:27:
1c:95:81:79:8a:e8:ed:1b:d6:3d:ac:b8:4b:c1:01:
9d:48:15:b5:16:57:71:f6:e9:32:5f:1e:1a:f9:67:
be:d3:3f:71:8a:40:95:9d:51:67:69:4b:c7:42:34:
90:6e:82:b5:3f:29:06:1a:22:61:9e:e0:ad:e8:00:
52:10:c4:aa:e5:7c:c7:73:58:de:62:ef:6b:27:08:
43:d3:e1:17:6f:05:c6:80:76:23:39:41:f9:fa:bc:
7d:f6:c3:e2:19:cc:65:b3:1d:9e:40:de:b8:25:6b:
6d:6b:0c:f5:94:b5:26:e4:c9:a4:ec:c1:5b:f8:cb:
9f:5e:37:e8:1a:93:84:b8:fb:62:64:96:29:4c:d2:
05:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E1:91:FB:53:75:CB:51:19:17:F5:72:89:04:AF:CC:93:56:DD:7D
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c9:0a:23:86:da:bb:12:25:9e:44:dd:33:8a:f6:83:a1:22:
c6:8e:83:4b:aa:04:ca:4f:f0:5a:f0:34:5a:7b:6c:53:d7:7e:
eb:93:1a:33:c7:2d:14:6b:c2:4f:8a:f5:fc:c5:93:d2:3e:2d:
25:06:d8:0b:2a:5e:d4:5d:79:a6:7a:cf:ac:0a:4b:18:e3:c3:
b3:b1:a6:ac:ea:29:09:5b:52:6c:d4:e8:7a:af:43:90:2c:a4:
52:e0:6e:49:5c:02:55:94:a7:37:00:3b:ef:5f:ee:b4:93:11:
0f:66:be:1b:1b:31:2c:0a:0d:3d:a1:e9:16:1e:28:95:9d:e6:
12:24:8b:d2:fb:d6:a4:37:dc:18:f3:27:c4:19:17:5b:7d:96:
d2:09:0d:74:38:4b:19:e6:a5:1d:35:7d:55:b6:d6:a0:c1:16:
e2:72:f3:32:79:66:50:d7:b7:24:4d:38:5d:8b:f7:b5:0b:9d:
ba:36:b5:52:ba:9e:c0:b1:fa:7c:6e:62:f9:39:99:b8:48:71:
23:20:7a:cf:d9:c3:97:0c:b3:17:4c:cd:8e:cb:65:ae:a1:0e:
0a:bc:98:86:e8:ac:f8:c7:60:17:a1:31:3e:5b:28:a7:b6:ac:
e1:5c:d4:9f:ce:72:25:39:85:e9:4d:8a:a7:fe:bd:f7:7e:19:
35:7d:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:35:11 2026 by rpki-client