Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
File: qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json)
Hash identifier: YvXZUNYtuRawXq4zEbxZLQz0db/fzEab+yfA/bO7Yi0=
Subject key identifier: D1:A5:99:D4:47:B5:6C:D6:8F:09:AB:52:38:13:50:B3:2B:AC:2C:1D
Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
Certificate issuer: /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Certificate serial: 01A0D3156EE0A49005A0217D0BDEEEA5E3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
Manifest number: 031A
Signing time: Thu 24 Sep 2026 11:03:12 +0000
Manifest this update: Thu 24 Sep 2026 11:03:12 +0000
Manifest next update: Fri 25 Sep 2026 11:03:12 +0000
Files and hashes: 1: bN_JbzQj2A8IvSsLV68QsClGiQY.asa (hash: xolsuAJOBeuMvNRpodvDEbIRMgGi/Im1/gCqvItApmY=)
2: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: Ghd8fwLVts2bnW/d6xj6gJlgqthDfSN/8JAif9fQzqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:03:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:6e:e0:a4:90:05:a0:21:7d:0b:de:ee:a5:e3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Validity
Not Before: Sep 24 11:03:12 2026 GMT
Not After : Sep 25 11:03:12 2026 GMT
Subject: CN=d1a599d447b56cd68f09ab52381350b32bac2c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:49:33:88:1b:93:98:3c:27:46:f7:a7:29:ed:
03:48:74:9c:96:1b:de:59:19:1b:d7:82:ec:8c:1e:
00:79:54:ae:96:e8:3c:60:b4:15:fc:fa:c5:2b:60:
58:b2:c8:5d:46:f7:be:79:f8:3e:d6:31:7d:75:bb:
00:ec:c6:3d:24:66:c8:39:da:f1:ac:44:11:f4:b8:
39:5b:98:c3:8f:f8:e9:b1:c4:63:04:dc:b0:2e:7d:
59:c9:6e:df:cf:28:33:80:17:b1:04:52:2f:6e:23:
48:6d:3b:ff:0f:6d:5d:42:93:d4:c7:9f:57:59:01:
6d:8d:ce:fd:f5:b2:d8:9d:a9:b2:e5:6a:13:b3:c9:
41:5f:30:fc:c4:a0:67:77:b0:e1:ed:26:70:38:80:
0c:2e:01:ed:2c:ca:05:b2:65:d5:d3:1b:71:b1:67:
7e:09:be:99:5d:bc:ca:49:5d:c2:06:4f:fd:19:4e:
53:5f:a3:e7:8d:7c:f8:12:7d:37:4b:10:21:25:9a:
56:7b:32:0d:16:c6:48:4f:5e:70:e4:a1:b2:a1:52:
35:52:46:27:dd:ca:21:17:c8:1d:d1:82:8d:3b:f7:
b9:42:5e:d6:4b:75:e1:a3:3f:c7:3d:a9:9c:b9:2a:
4d:f8:71:e9:79:fa:13:88:4a:1f:e7:90:c6:73:b6:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A5:99:D4:47:B5:6C:D6:8F:09:AB:52:38:13:50:B3:2B:AC:2C:1D
X509v3 Authority Key Identifier:
keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7d:c8:c9:2e:81:37:8e:32:4d:7c:97:7d:9e:84:fe:70:0f:
3e:4b:00:e3:0a:0b:c6:56:3b:ee:9a:6d:9e:ba:d7:01:a9:9b:
8f:ae:2d:ee:c4:a0:9d:dd:d5:6a:f1:13:e6:27:19:b6:69:8e:
22:1c:73:9a:e6:21:e3:98:26:f1:81:0c:54:e5:91:a9:e0:82:
68:5b:2b:24:ba:7f:db:de:af:10:d3:9c:24:83:69:cb:68:00:
5d:62:a5:36:ca:36:44:21:c8:03:73:19:fc:ab:a5:d0:4c:a2:
f5:87:86:f3:c5:20:9b:2e:d2:e3:d0:46:a2:62:ac:b8:ef:0d:
9f:ee:4f:5d:12:5f:29:2a:0e:d6:fe:df:4f:eb:16:19:f8:34:
3f:9c:59:ee:af:3f:99:7c:2c:97:16:af:aa:f1:84:7b:b7:0f:
58:b0:38:a4:8a:4d:2b:af:58:2a:f2:a2:cf:1d:b5:c4:9c:79:
24:8c:26:d5:f9:40:17:e5:a0:99:8a:d0:8f:fb:81:de:9d:7c:
1a:fe:bf:5a:0f:ba:95:e6:f6:ea:45:cb:3b:13:c3:a0:41:f4:
04:bb:19:ba:ce:3f:46:e0:91:1f:f5:16:0f:55:68:cc:51:4d:
7f:28:b3:43:81:6c:81:92:7a:cf:c9:c4:f2:af:a7:b8:82:bc:
ce:0b:33:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDTFW7gpJAFoCF9C97upePjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNWI0NjNiMTdhMjVlYjY4ZGVhYjc5Y2IwZjk4OWVmZDdl
NDhhMTUwHhcNMjYwOTI0MTEwMzEyWhcNMjYwOTI1MTEwMzEyWjAzMTEwLwYDVQQD
EyhkMWE1OTlkNDQ3YjU2Y2Q2OGYwOWFiNTIzODEzNTBiMzJiYWMyYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8UkziBuTmDwnRvenKe0DSHSclhve
WRkb14LsjB4AeVSulug8YLQV/PrFK2BYsshdRve+efg+1jF9dbsA7MY9JGbIOdrx
rEQR9Lg5W5jDj/jpscRjBNywLn1ZyW7fzygzgBexBFIvbiNIbTv/D21dQpPUx59X
WQFtjc799bLYnamy5WoTs8lBXzD8xKBnd7Dh7SZwOIAMLgHtLMoFsmXV0xtxsWd+
Cb6ZXbzKSV3CBk/9GU5TX6PnjXz4En03SxAhJZpWezINFsZIT15w5KGyoVI1UkYn
3cohF8gd0YKNO/e5Ql7WS3Xhoz/HPamcuSpN+HHpefoTiEof55DGc7bRmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGlmdRHtWzWjwmrUjgTULMrrCwdMB8GA1UdIwQY
MBaAFKpbRjsXol62jeq3nLD5ie/X5IoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmIt
YzdlNzExNWY0YTJlLzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8xYmRhZWItMmYxYy00ZDhjLWI0YmItYzdlNzExNWY0YTJl
LzEvcWx0R094ZWlYcmFONnJlY3NQbUo3OWZraWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB33IyS6B
N44yTXyXfZ6E/nAPPksA4woLxlY77pptnrrXAambj64t7sSgnd3VavET5icZtmmO
IhxzmuYh45gm8YEMVOWRqeCCaFsrJLp/296vENOcJINpy2gAXWKlNso2RCHIA3MZ
/Kul0Eyi9YeG88Ugmy7S49BGomKsuO8Nn+5PXRJfKSoO1v7fT+sWGfg0P5xZ7q8/
mXwslxavqvGEe7cPWLA4pIpNK69YKvKizx21xJx5JIwm1flAF+WgmYrQj/uB3p18
Gv6/Wg+6leb26kXLOxPDoEH0BLsZus4/RuCRH/UWD1VozFFNfyizQ4FsgZJ6z8nE
8q+nuIK8zgszZg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:19:58 2026 by rpki-client