Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
File: qHvIMvQSt59zAWbsV-s2waNbBok.mft (raw, json)
Hash identifier: wlvzd4gDjmc6UO+EjyEOZ+j0FPzv08JC1t3IUYSCovI=
Subject key identifier: FA:74:9A:04:21:4C:02:4A:43:0D:77:9A:2C:5D:B9:97:BB:C0:9A:44
Authority key identifier: A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89
Certificate issuer: /CN=a87bc832f412b79f730166ec57eb36c1a35b0689
Certificate serial: 01A0D5DD9BBA4690EBAD10AD123356FA2C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
Manifest number: 0123
Signing time: Fri 25 Sep 2026 00:01:05 +0000
Manifest this update: Fri 25 Sep 2026 00:01:05 +0000
Manifest next update: Sat 26 Sep 2026 00:01:05 +0000
Files and hashes: 1: 3TZvjEfkPGnfb-tMF5tui2UzMj0.roa (hash: QOEhgl7wja/sJ10iRCnuW/2g1XbkedQKiYSWjxKqvZE=)
2: qHvIMvQSt59zAWbsV-s2waNbBok.crl (hash: hCMlDTboYrSxfESbUdDcos5qfC19etFeaJUSJ2/0xvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:9b:ba:46:90:eb:ad:10:ad:12:33:56:fa:2c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87bc832f412b79f730166ec57eb36c1a35b0689
Validity
Not Before: Sep 25 00:01:05 2026 GMT
Not After : Sep 26 00:01:05 2026 GMT
Subject: CN=fa749a04214c024a430d779a2c5db997bbc09a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a6:3d:10:83:b2:60:42:c2:8b:18:02:47:14:
84:b3:6e:57:89:c6:72:ee:47:86:50:1d:df:31:6e:
4e:41:4b:1a:77:ad:9e:80:0d:c5:6e:cf:09:e6:97:
9d:a1:67:c0:1d:30:38:41:3a:43:9f:ad:ec:8b:4d:
44:cb:83:cd:db:67:e7:20:35:55:1c:90:56:3e:15:
c6:1a:91:fd:a0:6e:5e:da:2a:2a:5b:18:d1:a4:62:
77:a5:a5:f4:76:ef:0b:99:31:6c:42:0d:fb:06:b5:
35:05:0a:2d:b1:60:a5:1e:df:52:63:04:2e:8b:3a:
57:2b:42:16:ae:54:df:64:0f:c6:db:e4:17:10:91:
17:c1:1f:8b:b7:06:90:63:fa:6f:6b:13:60:f4:13:
e4:b0:48:bd:80:e4:c4:1e:df:7b:bf:19:d0:f2:d3:
56:97:e5:74:9c:cd:f3:62:62:5c:06:26:13:40:e9:
2d:59:3b:69:a9:44:89:29:51:33:33:7f:bc:b8:0d:
f8:56:04:02:db:e1:0f:48:cd:41:0b:a7:36:32:24:
7d:c6:5f:ec:51:00:3e:13:bc:76:bb:76:33:d6:96:
df:53:29:22:4b:0f:b0:67:e7:35:23:07:36:a6:73:
dc:43:7f:54:f0:e1:77:9e:d3:4a:62:74:a8:e7:10:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:74:9A:04:21:4C:02:4A:43:0D:77:9A:2C:5D:B9:97:BB:C0:9A:44
X509v3 Authority Key Identifier:
keyid:A8:7B:C8:32:F4:12:B7:9F:73:01:66:EC:57:EB:36:C1:A3:5B:06:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHvIMvQSt59zAWbsV-s2waNbBok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/039057-f1ca-46e4-8237-a764ada8b95e/1/qHvIMvQSt59zAWbsV-s2waNbBok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:c6:f7:1e:6a:f3:33:be:03:86:15:21:29:fb:89:ca:2c:31:
60:02:f9:75:f4:cf:06:29:37:d0:e0:70:28:17:e8:04:61:c8:
0f:be:2c:74:a7:c1:f9:d4:54:d2:88:e6:0f:b0:4f:8e:b1:b4:
21:eb:e3:94:cb:6e:77:ab:e7:14:b2:fe:de:40:31:9a:52:75:
6a:30:f7:5c:40:71:89:5d:66:df:95:57:0c:40:69:11:7f:68:
23:59:bc:a5:6a:d1:d9:9d:a4:a9:60:72:b1:16:bd:a5:81:e7:
7f:40:e0:56:59:bb:38:b0:b9:47:4b:f1:cb:c7:85:99:84:74:
c3:f1:28:eb:3c:5b:be:22:9b:8f:ff:d2:0a:71:3b:89:b6:89:
d3:39:ee:f9:da:45:4f:65:ec:aa:35:7b:09:0f:cb:5c:8a:97:
80:0d:c4:d8:00:f2:49:30:a8:90:9f:dc:a4:d6:34:fc:ba:a7:
be:22:f4:c7:17:1e:4c:ea:8b:49:8a:33:8d:fe:70:72:c4:29:
6b:fe:00:43:fe:9e:f1:48:bc:46:35:8b:2a:fa:88:48:2b:3c:
2c:cf:9f:b3:59:44:ae:12:c0:ad:88:36:e3:d3:9b:53:e2:da:
0d:0e:b3:61:b9:ba:90:cf:32:63:03:24:ce:46:68:d8:84:43:
b2:63:33:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:45 2026 by rpki-client