Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
File: QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft (raw, json)
Hash identifier: skhCuCzIea3Yyzm8YLbayvdEn9WCmqXCYb0ckrQwr8U=
Subject key identifier: 12:FB:99:AF:49:13:64:9A:CD:CB:57:DA:33:3F:AF:BC:51:3F:4F:22
Authority key identifier: 40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
Certificate issuer: /CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Certificate serial: 01A0D796F4B2FE0D667F3590D68BB112FCA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
Manifest number: 031E
Signing time: Fri 25 Sep 2026 08:03:09 +0000
Manifest this update: Fri 25 Sep 2026 08:03:09 +0000
Manifest next update: Sat 26 Sep 2026 08:03:09 +0000
Files and hashes: 1: LJsNdySzgVhzx0jmB1MhskD9sjw.roa (hash: vvBtgWk4yOZ39bGRHX8IHXL1uvrBI1sSum79JzJWzi4=)
2: QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl (hash: do4U7chKiGKKVDkY4hMBDyc9gNyc+Oo9MPzNOKZbYKo=)
3: gwoZZje1uQSgGQlJSX6ThKbi_v4.roa (hash: yNNrupm/CBG1AsTLbQhGB7upwtdrSdYjgUOcddBU48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:96:f4:b2:fe:0d:66:7f:35:90:d6:8b:b1:12:fc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4008c486ef56170c412f26615d0a4094bca1fb2c
Validity
Not Before: Sep 25 08:03:09 2026 GMT
Not After : Sep 26 08:03:09 2026 GMT
Subject: CN=12fb99af4913649acdcb57da333fafbc513f4f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2f:24:f0:4a:08:fd:ef:f0:b5:f3:26:98:ce:
28:b9:d0:08:cb:e3:26:f0:d2:b9:57:c5:27:07:96:
79:b7:78:07:d8:92:a9:94:37:3c:37:34:7c:10:49:
9b:5f:d3:62:ec:c9:bb:d4:38:51:40:b5:bb:42:2e:
0c:45:f7:b5:71:d4:d1:2b:4a:07:c4:63:2f:e4:7c:
13:2f:e9:df:35:11:bc:78:64:c1:ca:8c:dc:6b:36:
67:b8:eb:26:3a:28:3f:9c:97:c5:ef:74:16:0f:c9:
b9:e3:ac:58:f3:cc:7a:81:33:58:6d:69:c2:1f:69:
8f:43:84:25:5f:af:fb:35:fb:93:23:2e:84:3c:57:
db:87:4d:20:04:06:75:be:12:e7:88:2c:05:49:a5:
f5:e4:a5:ab:db:b1:b8:a8:d8:da:a2:c7:c9:14:1f:
dd:9d:bc:cf:2a:e1:0d:01:fc:65:df:08:f3:6e:42:
98:ff:0a:e7:e0:42:5e:8b:5e:87:e1:b9:6e:8e:5d:
1a:5d:45:4f:85:70:f4:b7:22:5b:47:0e:99:a3:32:
2e:fe:28:0a:3e:b6:f9:4d:74:d6:8f:fb:a1:a9:16:
b4:06:11:2b:27:dc:5e:04:ae:36:34:46:55:2f:a5:
75:51:19:19:00:67:9b:ed:08:29:5a:8e:74:78:60:
77:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FB:99:AF:49:13:64:9A:CD:CB:57:DA:33:3F:AF:BC:51:3F:4F:22
X509v3 Authority Key Identifier:
keyid:40:08:C4:86:EF:56:17:0C:41:2F:26:61:5D:0A:40:94:BC:A1:FB:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAjEhu9WFwxBLyZhXQpAlLyh-yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a97f9f-3df0-4546-9ce7-e92a25491ced/1/QAjEhu9WFwxBLyZhXQpAlLyh-yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:bf:ea:1f:99:d9:85:cf:39:79:c4:ff:9e:b5:bf:14:4a:21:
07:9d:78:f6:5a:cc:eb:67:d4:02:20:33:85:d4:24:cf:cb:4d:
5d:9e:11:eb:0b:eb:ee:98:5d:22:95:7c:27:6f:5d:25:4c:3a:
b7:73:02:5e:c0:b8:3d:cb:5e:ba:fe:1f:4e:04:72:72:cb:19:
2b:ac:2b:9d:14:d9:1f:ac:2b:cd:e6:33:ec:79:8a:58:47:80:
ae:0a:1a:0b:a9:e8:e6:29:c5:7b:f6:c8:a7:8b:6e:82:29:2d:
22:60:1c:78:fe:6a:e3:1a:d6:e8:01:df:da:45:57:b0:78:fb:
0d:d0:40:24:9a:c0:33:8f:cf:85:90:3f:4b:05:55:4e:5c:fb:
2e:69:22:c4:69:0e:25:1b:39:6b:b3:f3:2d:57:27:8c:3a:ad:
a0:97:7e:29:18:b2:d2:66:a2:10:68:02:16:40:c3:f5:41:36:
a0:f1:9e:0d:2d:3f:2e:8c:d0:ec:7b:ee:ce:1c:f6:ae:66:f9:
1b:f1:4c:2e:49:a7:80:e1:5e:fa:dd:42:e2:be:75:4d:71:1f:
cd:c6:50:49:48:6b:e3:1c:6e:64:80:9f:32:0e:af:75:a7:a4:
99:87:37:41:78:c2:35:86:40:a5:9a:8d:51:a0:5d:7f:09:e3:
15:61:79:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:28:58 2026 by rpki-client