Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier: Lilzj0IDIcChjMIgqPOAP9ahebQiqH2QBpO62GeV+FA=
Subject key identifier: 57:1E:8D:A8:40:BF:6F:86:CE:BB:65:B1:BF:A5:57:25:3F:67:4D:CC
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 01A0DD9803D56FBF7E3BC851DA8B7C022D9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number: 1A77
Signing time: Sat 26 Sep 2026 12:02:02 +0000
Manifest this update: Sat 26 Sep 2026 12:02:02 +0000
Manifest next update: Sun 27 Sep 2026 12:02:02 +0000
Files and hashes: 1: 1Gy5y0l2Z3RJbwpIdwQeXu-S_os.roa (hash: A0SPA20n6txHOLSFN/vzsdzLr5oEp33Xca7U8bJmR+A=)
2: qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa (hash: OvZ+jG+TA2c8r8TRVg+Z8VbBKScMi5fnRQ6Z1I4vZyA=)
3: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: XIFf+ZSAM3SVfhHeW/z8FrjyegJJn2CFzla37x3yi0I=)
4: vPp50IKlFxgQgBOicGnqoqn1x7A.roa (hash: IdCf0l+lQqi5OboKhySYCzxcGPbYokM1HRRt3wwbKLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:03:d5:6f:bf:7e:3b:c8:51:da:8b:7c:02:2d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Sep 26 12:02:02 2026 GMT
Not After : Sep 27 12:02:02 2026 GMT
Subject: CN=571e8da840bf6f86cebb65b1bfa557253f674dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:80:c1:ba:49:49:9c:3e:d0:34:21:ad:97:0e:
5c:77:24:1c:64:6d:8b:b7:17:7b:77:ec:c4:d2:59:
db:09:5f:bb:39:97:b7:fb:5a:76:6c:ba:07:f7:c5:
f3:9e:dc:e6:c2:ff:64:66:c7:3d:25:27:98:ce:20:
c4:af:f0:b1:f8:d1:a9:b9:3c:97:6c:1f:aa:1f:97:
61:e8:ad:74:10:ea:fb:fd:71:98:2a:ef:3a:c7:f3:
b2:1b:63:f1:f3:8a:b4:b9:9d:df:80:96:81:1d:2b:
4e:97:c3:86:2e:14:2d:c8:33:0c:17:31:86:59:b9:
2b:b3:cb:ad:61:b6:f0:d5:1c:c2:07:24:f1:0a:0b:
c8:00:49:25:a2:d4:61:f9:66:cb:36:5f:60:7d:5a:
5d:14:5f:45:b7:d6:d5:00:10:28:58:35:72:88:db:
be:e1:67:1b:a8:1d:f4:04:9a:c1:5e:f3:5f:9d:c3:
ca:f4:d2:fe:2e:fd:8c:cc:28:02:62:e9:6d:47:85:
60:2b:0b:9d:ab:59:30:52:2b:32:9e:7d:69:11:87:
e1:ee:91:16:eb:e5:21:a4:d5:8a:ef:98:28:63:cf:
a0:a1:df:cb:21:53:e0:5e:a7:27:34:24:54:50:a7:
3a:1d:1b:dc:ae:75:18:03:12:6c:9d:14:7b:e2:d5:
86:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:1E:8D:A8:40:BF:6F:86:CE:BB:65:B1:BF:A5:57:25:3F:67:4D:CC
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2c:7d:bf:00:68:2f:32:e9:fc:8d:30:1f:5f:4a:c0:07:9d:
89:fc:e7:78:2d:b2:30:0b:91:d5:d4:f3:29:64:fb:71:49:05:
91:fa:2f:52:f4:2d:58:2c:8f:a8:01:20:d9:0a:dc:6f:3d:9b:
cb:f0:e8:39:c6:f8:dc:0b:e5:13:6c:cd:f6:c7:7d:fd:15:93:
a9:d9:c8:f8:e4:a6:77:f3:cc:1a:2b:31:f8:32:8d:10:25:8f:
ea:7a:56:6c:a0:8e:51:e7:dc:4b:af:7d:7d:79:c8:1c:89:0c:
ba:d8:15:7d:ec:95:f3:b6:f0:9b:bf:4e:41:4a:34:65:f2:ae:
3d:e9:d0:49:55:e0:24:87:09:f5:61:81:d7:6e:f3:b5:8b:9e:
3e:2e:a5:f0:b5:be:15:0c:c1:48:11:4d:25:8d:9b:ce:e6:b9:
8c:43:2e:be:10:0b:56:d5:fd:33:b1:55:de:a6:82:ca:ef:f7:
0c:2b:5c:c9:ed:f9:e3:e4:6f:9f:91:26:b8:c8:ed:0e:da:92:
f8:43:af:a6:1c:b0:f5:35:4d:1e:27:32:ef:43:e5:14:67:49:
ff:00:5b:79:db:1b:2f:fa:38:18:78:4f:db:0c:db:3f:8b:3b:
9e:0c:56:fb:97:d8:84:5b:49:a5:3c:dd:24:a1:30:52:2b:1f:
b4:59:b1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:56:07 2026 by rpki-client