Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
File: a-qEqFfnGtEjL5o2v0j40kqaA_s.mft (raw, json)
Hash identifier: QYclkX5JOWadUZmQEX8NBysWp8HjM8rmQ6soJoisf7c=
Subject key identifier: A7:AA:66:92:30:D0:5A:41:A4:C5:28:B7:9D:7B:9A:18:51:03:A1:09
Authority key identifier: 6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
Certificate issuer: /CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Certificate serial: 01A0D3EF1AE6F7F27E445F27FF0A2EA77B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:00:57 +0000
Manifest this update: Thu 24 Sep 2026 15:00:57 +0000
Manifest next update: Fri 25 Sep 2026 15:00:57 +0000
Files and hashes: 1: 3VtMLjenBkjVF4KJLk56mIMtUJI.roa (hash: JPKF0zVe4MNxHQFbONgwYXIrgpkaeNZgOLOSWhU/gyE=)
2: a-qEqFfnGtEjL5o2v0j40kqaA_s.crl (hash: oVVzEXiOoANSv8zcijlF6YARRQwdLAEnbNtiI0kR8CA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:1a:e6:f7:f2:7e:44:5f:27:ff:0a:2e:a7:7b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea84a857e71ad1232f9a36bf48f8d24a9a03fb
Validity
Not Before: Sep 24 15:00:57 2026 GMT
Not After : Sep 25 15:00:57 2026 GMT
Subject: CN=a7aa669230d05a41a4c528b79d7b9a185103a109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:57:cd:13:0a:2c:da:74:a3:be:df:e1:66:
ca:ac:99:cb:f1:e6:6f:f4:5f:88:b2:99:8e:77:db:
aa:e0:59:3f:68:0a:b1:cb:e6:03:04:76:e5:f4:50:
1f:f2:f6:d9:ad:44:e3:94:d4:c2:2d:8e:dd:29:d8:
09:ea:d0:f3:70:69:64:dc:92:1e:ee:4c:70:62:eb:
d0:2f:7c:2b:c2:eb:5d:48:68:1a:45:6e:82:2a:cc:
0f:23:d7:84:e5:2c:72:94:c1:84:a4:05:3a:c5:51:
95:15:d3:d1:a7:2a:a8:69:65:65:ba:46:b3:af:9c:
59:6f:a8:33:24:85:8b:94:20:70:91:e5:14:dd:01:
ca:91:25:88:08:55:5e:eb:cb:bc:6b:ea:ea:e3:f7:
a2:3e:f0:9b:04:5d:c0:07:b4:68:63:39:e1:43:18:
9f:6a:52:04:c2:d2:8d:e9:c0:04:82:cb:78:ec:c4:
bb:3b:48:60:0b:1e:a8:0a:27:5d:32:96:69:e1:50:
fe:64:14:83:5f:72:7f:a3:06:ac:c0:e9:35:9c:b1:
62:ea:ff:0a:f3:34:95:9d:20:62:39:ab:7c:2b:30:
85:98:f7:94:52:79:97:a3:cd:3e:8c:1f:6d:bf:22:
73:60:f1:b4:45:82:40:0d:e5:d8:16:7b:50:c1:f1:
99:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AA:66:92:30:D0:5A:41:A4:C5:28:B7:9D:7B:9A:18:51:03:A1:09
X509v3 Authority Key Identifier:
keyid:6B:EA:84:A8:57:E7:1A:D1:23:2F:9A:36:BF:48:F8:D2:4A:9A:03:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-qEqFfnGtEjL5o2v0j40kqaA_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c3289f-76e9-4893-9cd1-a65fbd830358/1/a-qEqFfnGtEjL5o2v0j40kqaA_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:f1:ab:9a:b7:e2:8c:b8:c2:0c:26:6c:8c:1c:b3:c7:cb:f8:
18:a2:df:91:30:7f:8e:f9:2e:0a:60:58:08:fe:6e:b4:61:91:
b8:4e:35:f9:e1:37:fd:59:b7:4e:60:d4:24:40:0d:40:64:ae:
9a:54:66:06:0e:23:1f:a0:c6:09:3e:c5:fa:c3:81:2e:0f:46:
d4:19:1b:4d:3f:5c:33:30:bf:56:7c:d1:8f:87:3b:00:43:5a:
f6:c1:62:4c:f4:f6:f1:f8:cc:4d:09:73:50:d7:37:12:1e:7a:
39:98:47:53:31:e5:fe:c0:9e:63:73:e3:d4:b9:d7:51:18:06:
38:e8:41:92:0a:aa:e3:88:8e:47:3a:05:89:86:1a:ca:05:f6:
dc:4b:b2:07:04:fd:37:c6:9a:8a:52:14:e4:82:e3:ab:58:78:
3d:b9:40:fe:86:88:e0:1c:31:a1:cb:60:be:44:be:f1:80:7b:
d9:e2:5f:6c:1c:0a:f0:93:a0:23:2e:79:8f:dd:40:a4:1b:7b:
87:b8:29:da:31:61:c0:94:8b:2c:4f:93:2c:4e:e9:a3:0e:39:
20:d3:7c:70:c7:c2:e7:44:c1:dc:cf:a9:47:13:63:9b:94:b9:
6e:12:be:bb:6e:b9:33:ae:01:51:b3:d6:e6:06:e2:c0:1f:73:
5b:d9:33:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:02:21 2026 by rpki-client