Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: yXCSLMoaRXT9RR23d0rj3NzjAi9mgLI4hyLVo2+TBYQ=
Subject key identifier: B1:A9:0C:2B:42:CE:47:1E:DE:DA:2E:18:43:59:92:A7:55:24:EC:FE
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 01A0DA9670FD92CD5BBC1D853F599F18BCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 10C3
Signing time: Fri 25 Sep 2026 22:01:27 +0000
Manifest this update: Fri 25 Sep 2026 22:01:27 +0000
Manifest next update: Sat 26 Sep 2026 22:01:27 +0000
Files and hashes: 1: RGHMhabHZkPW5wXprVh6WUeUNEU.roa (hash: aWxpktwD4HwK4DqUq/i3jSDZlGsjYGbb6rrk+6zxpz0=)
2: hW9pmZmoOAPv4EQxUHQXTXDJr6s.roa (hash: mjwhxdNEgH8aH/IfZWkqyz4fW356i+YVNu/YE2e6m8A=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: lQWY6MfCAXcHiZiMjTytNEXIo0De3w/T6KRYufueRD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:70:fd:92:cd:5b:bc:1d:85:3f:59:9f:18:bc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Sep 25 22:01:27 2026 GMT
Not After : Sep 26 22:01:27 2026 GMT
Subject: CN=b1a90c2b42ce471ededa2e18435992a75524ecfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:4d:db:d0:ef:18:fd:b6:be:81:21:28:4f:
5e:2c:aa:e1:3b:80:35:d0:d6:05:c6:59:16:da:07:
35:94:b7:b5:55:0b:c0:64:c8:f7:ac:dd:86:06:84:
f9:7b:24:24:82:9a:33:71:b8:9f:33:95:94:48:d2:
16:d2:56:3e:d0:26:d5:89:4c:dc:9f:fb:69:bf:70:
dd:6d:1e:27:3f:38:72:4e:fb:e8:23:93:26:60:dc:
96:3e:b8:a6:27:c3:c7:1d:a3:48:41:40:5d:ba:55:
b7:16:6e:08:57:ce:b6:70:55:7b:36:ca:f3:90:9c:
1e:f8:20:a4:5d:8c:4c:0e:06:0d:34:7b:9f:34:03:
c1:89:29:72:5b:bb:19:68:e1:6a:43:a1:ca:35:f1:
3e:a0:13:45:b5:88:a3:42:34:34:5c:43:28:85:b9:
c5:26:e1:68:c7:9e:09:d1:2d:9b:75:5d:69:6e:db:
48:8d:e2:3a:ed:f9:3d:87:84:ff:6c:c1:df:2d:0d:
36:cd:b5:39:8e:6c:4c:0f:bb:92:f6:86:4a:70:fa:
0e:44:7d:a3:23:5c:ef:48:19:7e:52:09:fb:16:c6:
89:3c:2b:7b:32:38:01:80:03:33:db:67:02:4a:c8:
24:94:d4:49:d7:b1:29:14:33:36:06:d6:91:8e:4e:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A9:0C:2B:42:CE:47:1E:DE:DA:2E:18:43:59:92:A7:55:24:EC:FE
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e4:e8:bb:5d:85:b3:17:b3:b9:e4:8f:9a:03:ca:b9:ce:12:
54:f9:39:e3:b2:af:a9:04:2f:a5:07:ea:fc:c4:13:54:83:43:
74:c6:2c:b5:70:c6:d3:6d:d2:62:9d:e8:32:2b:72:f3:21:a6:
e2:40:f0:06:08:b7:76:67:5a:26:03:c0:c0:59:1e:0b:d2:b6:
80:25:6b:77:3b:5e:1c:b9:34:97:ec:bf:3d:c8:d2:01:7f:33:
d4:c2:50:1b:39:4e:cc:71:38:12:1b:84:21:87:25:93:7b:e2:
fa:4a:d4:36:7e:59:3f:e2:9f:dc:8a:c5:1c:54:63:14:6e:2f:
64:b6:22:62:3b:e0:91:72:2e:b6:46:8e:bf:96:d2:32:c3:d0:
80:63:68:51:a7:35:3e:96:80:8e:de:dd:bb:ed:87:d2:2b:88:
36:6b:b8:d5:d7:61:cc:cb:42:5f:e8:3e:95:54:3a:77:96:da:
ac:ae:30:bc:2d:47:fe:86:b4:3d:5b:0b:46:be:e5:80:ad:a9:
1d:18:b0:d1:72:59:18:eb:18:18:82:3f:84:4e:bf:41:8d:01:
35:aa:1c:16:27:1d:35:ea:bc:cb:c6:1a:89:5a:62:ac:c7:5d:
d1:61:f7:7d:78:a7:38:74:6c:da:e8:f6:df:c7:12:3c:67:4a:
3e:fb:96:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:41:27 2026 by rpki-client