Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
File: qI2nDOKKiJJzJtuLYipmwp-sUjw.mft (raw, json)
Hash identifier: ly/bWzgeOdhJ2HtoRWYP7elAeE1JR2y3XvdZbSnx/BM=
Subject key identifier: A3:A1:BA:70:32:BA:6B:5A:A2:EE:9E:A7:65:D8:93:D8:8D:BB:31:97
Authority key identifier: A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
Certificate issuer: /CN=a88da70ce28a88927326db8b622a66c29fac523c
Certificate serial: 01A0F643FAC2902D490D6BE4315DE617B678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
Manifest number: 017A
Signing time: Thu 01 Oct 2026 07:00:45 +0000
Manifest this update: Thu 01 Oct 2026 07:00:45 +0000
Manifest next update: Fri 02 Oct 2026 07:00:45 +0000
Files and hashes: 1: Agdkr7pow-AzSTl7UhxIjtbuif8.roa (hash: XwEU2q/BPbK/EoWe/rSsRkIbMCNqHp48BI3sTIZFcTs=)
2: qI2nDOKKiJJzJtuLYipmwp-sUjw.crl (hash: gTO+8Br53wTXHWWrHKRFSnT+76jCfsSyZCPsXsvniXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:43:fa:c2:90:2d:49:0d:6b:e4:31:5d:e6:17:b6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a88da70ce28a88927326db8b622a66c29fac523c
Validity
Not Before: Oct 1 07:00:45 2026 GMT
Not After : Oct 2 07:00:45 2026 GMT
Subject: CN=a3a1ba7032ba6b5aa2ee9ea765d893d88dbb3197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:0f:0e:65:14:fa:dc:f8:e2:d4:a2:7c:71:
34:7c:2f:38:e5:0c:00:ec:c6:83:10:36:49:c4:aa:
62:b2:59:8c:15:6a:ec:f9:72:0d:e3:0f:86:6e:0b:
dc:b1:99:61:bd:a3:db:a6:6f:5b:f6:13:d4:c4:50:
c0:eb:fe:45:ec:28:f9:a4:ec:4a:c4:65:6f:1c:ed:
b8:d1:22:1a:6e:9b:ca:31:22:a3:ba:a9:98:5d:6c:
f8:f4:3a:54:9a:fe:fd:dd:3a:fe:b4:f4:f7:71:fe:
25:32:f3:b8:5a:b5:40:f7:0e:92:d8:b8:42:47:88:
3b:08:67:97:f3:84:d2:a9:1f:b2:e3:7e:60:8b:f5:
e4:6f:ce:d1:e1:c5:1b:ce:a7:03:9a:b0:89:9d:78:
ac:2e:b1:0f:59:cf:5a:af:03:62:d4:f4:2b:df:2b:
85:6d:95:b1:6a:e6:55:9e:f1:b3:bd:2d:89:78:5b:
38:d4:40:3a:01:99:a6:70:7a:e9:cd:a7:36:26:c4:
72:f0:86:3d:f4:a1:00:fb:39:6d:99:77:52:5e:c8:
e7:0e:60:90:11:59:9e:29:f3:ec:e1:60:b7:4a:82:
46:ee:c0:1c:32:56:67:10:d1:32:70:78:38:40:10:
6e:76:79:eb:10:8f:bc:e5:c2:9b:fb:9a:c0:22:fc:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A1:BA:70:32:BA:6B:5A:A2:EE:9E:A7:65:D8:93:D8:8D:BB:31:97
X509v3 Authority Key Identifier:
keyid:A8:8D:A7:0C:E2:8A:88:92:73:26:DB:8B:62:2A:66:C2:9F:AC:52:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qI2nDOKKiJJzJtuLYipmwp-sUjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/baf879-67c0-4785-b870-ae3b9e34d27f/1/qI2nDOKKiJJzJtuLYipmwp-sUjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:82:6e:71:10:a3:79:06:87:b6:99:5c:d2:cf:2a:1b:6e:5d:
75:f0:c3:2d:d7:08:32:5c:9e:86:c7:e2:01:39:6c:6d:46:23:
f8:09:1a:56:6e:9d:0b:20:54:8a:45:bc:ce:05:89:73:ac:d1:
52:37:3b:e4:27:28:17:23:74:1d:57:38:55:31:9f:a5:5e:2e:
9a:06:f6:47:f3:47:70:fc:0c:2c:56:b5:87:60:81:53:0c:09:
9a:33:1d:3e:b7:cd:21:9e:32:f9:ba:2e:ae:ce:0b:04:f4:5e:
22:e1:0c:07:9f:a4:f5:71:aa:df:0c:fc:9b:ee:14:7c:a2:47:
ac:d6:5d:d3:13:3c:34:3c:f9:eb:a8:da:26:d2:fd:48:87:fb:
e7:ec:e8:72:de:3d:ca:4d:40:8a:14:bc:87:1c:3c:03:24:67:
74:36:e8:f0:df:0e:8f:23:d7:f1:da:42:f3:7a:06:3e:5c:e2:
cb:4c:ed:da:bf:c5:29:d3:82:fc:72:f4:db:7a:2d:39:85:fc:
0b:ad:5d:6b:f6:12:73:88:b7:63:ad:ae:46:34:31:fd:9b:92:
2d:aa:6d:39:01:e6:47:3c:5d:bf:a2:1f:6d:a3:9e:4d:06:10:
19:1a:d5:5f:7a:af:59:31:a2:ce:ab:ef:32:24:b3:6f:a1:b2:
de:36:6d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:25:36 2026 by rpki-client