Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
File: qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft (raw, json)
Hash identifier: mCFlU/YhE4Zz1EATQGtThqrqznHiiASsWMF0JYzbk2s=
Subject key identifier: 44:16:73:8C:CB:76:33:41:C3:5F:AB:A3:BE:55:7E:2A:01:EF:28:6A
Authority key identifier: AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
Certificate issuer: /CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Certificate serial: 01A0D494A34706653101B29E14DF2D7873EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
Manifest number: 0582
Signing time: Thu 24 Sep 2026 18:01:45 +0000
Manifest this update: Thu 24 Sep 2026 18:01:45 +0000
Manifest next update: Fri 25 Sep 2026 18:01:45 +0000
Files and hashes: 1: IQ5bkMn7w4mdfQTVCpKxTeAJY2A.roa (hash: BUMsO+3Md3GuCd0Sja0LiQrCDsbttYlIXUYoBXpu1Ks=)
2: JEsWD0_sPZeR3nDP6LBcihehfnQ.roa (hash: q6r9n8Jhyw8OGJcuwwPP+sOyeoKFsYrXF9zzzZNNxbI=)
3: qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl (hash: 0ovSRyZyIHnS2C0Aed/jgSe3f2H0axrdF3xhE4E3glk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:a3:47:06:65:31:01:b2:9e:14:df:2d:78:73:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa6d889041cb29aed1fe1ac380c794af7a42c7d1
Validity
Not Before: Sep 24 18:01:45 2026 GMT
Not After : Sep 25 18:01:45 2026 GMT
Subject: CN=4416738ccb763341c35faba3be557e2a01ef286a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:91:9d:0f:95:cb:9d:cd:f3:04:2e:54:c2:
12:b1:02:d9:2a:54:75:04:d1:ef:d1:e9:5c:6b:ea:
81:47:4c:bf:ba:e7:44:ef:4a:84:bd:55:48:cf:15:
86:c5:8e:4a:c3:c9:2b:74:4a:d4:0f:48:f3:22:71:
8a:93:e9:ce:06:87:9a:b1:7b:1a:73:23:e4:4f:28:
75:e5:0c:91:50:98:14:ab:96:dd:77:62:63:51:79:
d4:fc:01:c7:09:8d:27:41:c7:a0:27:22:d6:25:56:
72:77:bd:d5:21:81:d6:fa:28:67:e6:40:83:79:ba:
af:4f:a1:20:26:f7:09:ac:37:7b:d1:11:f4:cc:ed:
f2:fa:9e:8b:9e:f3:81:75:2c:4e:d9:e7:cf:9e:a3:
73:65:82:ae:14:7f:01:a6:cc:b6:00:f4:9f:2a:ea:
f1:b3:7c:f6:21:ff:80:8e:63:7d:c2:66:b8:27:64:
a9:9a:31:27:cc:8f:ca:19:52:98:a0:b4:9e:06:0b:
fd:ca:f5:36:7b:ed:e9:42:ae:e9:df:f0:13:90:44:
aa:64:35:8d:74:18:84:f9:40:f7:e4:5c:6a:07:0c:
69:19:5a:a2:c4:f1:9d:db:20:9d:07:20:f8:7b:6b:
3f:fe:b2:22:6b:24:29:58:95:92:22:2a:58:39:a3:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:73:8C:CB:76:33:41:C3:5F:AB:A3:BE:55:7E:2A:01:EF:28:6A
X509v3 Authority Key Identifier:
keyid:AA:6D:88:90:41:CB:29:AE:D1:FE:1A:C3:80:C7:94:AF:7A:42:C7:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qm2IkEHLKa7R_hrDgMeUr3pCx9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/905079-9d7f-48c8-a306-e13d69a0045e/1/qm2IkEHLKa7R_hrDgMeUr3pCx9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8a:ac:11:f3:93:24:a8:ef:df:79:c1:7d:29:eb:02:bb:67:
23:9c:bb:9f:1c:22:2b:b8:84:cb:57:ba:89:f3:1c:2e:11:d8:
8d:31:e8:3b:51:74:b0:b3:7c:42:d4:2b:33:eb:a3:8f:05:0d:
20:1a:54:04:f7:fb:6d:4f:b5:64:a7:01:76:7f:65:a1:ea:95:
3f:01:de:17:0e:8c:d5:64:e3:d7:54:f6:7e:05:1d:ae:38:f8:
bb:0d:8f:74:9e:87:b5:44:67:c3:ba:b2:bc:6f:b8:6e:65:1f:
cb:64:db:22:a4:2b:44:3b:68:58:a7:c2:82:e9:f2:a6:e0:8a:
bf:8c:c2:8a:09:28:09:27:66:66:31:d0:3f:f2:79:4e:71:22:
ad:19:d1:d5:ba:9b:ae:4f:4b:39:ac:49:6c:fc:42:3f:de:9a:
88:dd:34:0b:db:fe:8e:66:b7:92:f9:e0:63:1a:9f:f6:c4:f8:
ae:5f:e5:5b:3d:78:ca:0d:4e:0d:39:89:02:31:a1:08:61:c4:
4a:7a:e8:c6:1f:2c:f5:5c:82:c7:75:72:0e:64:c3:bc:c0:3c:
03:b2:14:e0:ac:2f:23:63:75:cc:8b:3d:78:ed:79:aa:6d:05:
30:1e:77:b8:98:a3:1e:b4:be:77:ed:ef:3d:38:62:08:ec:46:
ad:35:78:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:22:39 2026 by rpki-client