Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
File: quRIJx2Froeamr8Vs7ypg0cKE0g.mft (raw, json)
Hash identifier: ZI+mfNK2zuO5oKI9cQDNUOcWj/+cOP5gxazgaZfRCp0=
Subject key identifier: F4:CA:7B:3D:59:F6:1A:C7:AA:31:5B:60:25:B1:FD:40:1C:7E:1B:71
Authority key identifier: AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
Certificate issuer: /CN=aae448271d85ae879a9abf15b3bca983470a1348
Certificate serial: 01A101DAD272D8313443B20C7C74D1DA49CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
Manifest number: 0981
Signing time: Sat 03 Oct 2026 13:01:20 +0000
Manifest this update: Sat 03 Oct 2026 13:01:20 +0000
Manifest next update: Sun 04 Oct 2026 13:01:20 +0000
Files and hashes: 1: abh6_OV0w_23vHurZg2lf03FAWI.roa (hash: WaNrZ48mNKxaEjIRodmrrMT60e4DHtMtypg5HH38Fac=)
2: quRIJx2Froeamr8Vs7ypg0cKE0g.crl (hash: Es88yh49stHV6nRhp/3ADaIxuW4tSAdeBKklb56rZUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:da:d2:72:d8:31:34:43:b2:0c:7c:74:d1:da:49:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae448271d85ae879a9abf15b3bca983470a1348
Validity
Not Before: Oct 3 13:01:20 2026 GMT
Not After : Oct 4 13:01:20 2026 GMT
Subject: CN=f4ca7b3d59f61ac7aa315b6025b1fd401c7e1b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:ad:c4:4a:49:cb:96:22:a5:7c:b4:34:ab:
e2:d8:53:58:73:b3:ef:45:8e:ab:cf:24:ab:ce:50:
74:ef:6f:b0:3f:5d:19:39:46:23:09:1a:f9:86:f0:
fb:79:c5:38:5e:c7:3a:61:8f:9e:63:cb:94:e8:77:
f7:ad:e4:94:b3:45:5c:5a:36:a9:da:17:0d:12:8e:
6b:9b:ac:8a:ab:02:a2:df:61:a6:94:b9:ca:b1:49:
4d:bd:27:ec:ff:38:1e:20:c1:01:eb:fb:17:f6:86:
09:0c:65:34:84:ef:90:d3:5d:fd:74:a8:5c:42:c1:
c6:75:5b:4d:ce:f3:ec:91:63:4f:49:0e:02:bf:d4:
34:3d:e8:69:69:f6:47:ec:98:cd:91:e1:3d:22:c6:
14:27:ab:4a:f5:70:93:bd:b0:37:28:52:21:cb:c7:
8b:d8:34:ca:0e:18:c9:5f:ee:98:56:c4:31:ac:a3:
b2:84:bc:f1:c6:3c:5a:1b:80:d3:57:c2:f5:cb:65:
2c:8a:e9:66:e1:3c:82:16:cc:17:23:8a:03:c9:d7:
a5:cc:42:a2:4d:b0:76:d6:9b:47:3a:ad:35:f3:4d:
e0:b4:84:8c:01:20:a5:b4:7b:74:ef:cc:de:fe:f8:
4f:35:9d:01:8f:e1:9d:f2:c0:9b:68:33:8d:19:87:
de:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:CA:7B:3D:59:F6:1A:C7:AA:31:5B:60:25:B1:FD:40:1C:7E:1B:71
X509v3 Authority Key Identifier:
keyid:AA:E4:48:27:1D:85:AE:87:9A:9A:BF:15:B3:BC:A9:83:47:0A:13:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quRIJx2Froeamr8Vs7ypg0cKE0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/9f285b-a00b-4222-9e55-799a18c9ac5a/1/quRIJx2Froeamr8Vs7ypg0cKE0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:5f:e9:d3:69:bb:59:69:3a:3e:26:26:03:03:55:a1:99:90:
78:4a:32:bb:92:a2:67:7f:e6:5c:de:ae:21:14:3f:6e:32:68:
7a:5d:85:db:d7:ae:21:7d:54:0a:9a:01:ef:4e:b9:bb:70:f5:
0f:06:9b:b3:55:05:91:6b:54:12:33:e0:25:e4:e0:6f:3e:2a:
a9:84:15:15:32:ef:a5:b2:ac:f0:35:74:67:57:29:67:0e:41:
3d:29:a7:9f:f1:e9:db:e5:46:7d:5d:ca:2b:c6:41:54:80:1a:
8a:ae:dc:1c:8a:44:48:62:ce:e5:90:94:ac:68:e4:2a:27:98:
fc:58:ed:c1:8e:8e:69:5b:c4:86:e9:c6:d9:b9:4a:62:d2:22:
70:41:6e:30:a1:4c:85:96:04:bd:a8:bf:09:c5:74:6f:67:1e:
9e:a4:91:23:68:18:ff:4b:0c:ac:8d:27:fb:8a:94:ee:94:00:
55:03:8b:9b:05:86:01:f6:f2:fc:1c:9d:1f:f1:97:11:a7:ea:
f2:41:b5:9d:85:4d:97:b7:c5:5c:c6:aa:32:4c:f0:36:d0:9e:
94:a0:63:43:43:96:63:69:ab:66:04:c5:0d:33:25:7e:5f:0f:
25:a9:d4:e1:b1:65:d1:1c:30:a8:a7:7d:88:de:ea:0f:d8:19:
c3:81:2a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 21:11:03 2026 by rpki-client