Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
File: QIVi4riWGyLinHYtbJkDMbo2Zm8.mft (raw, json)
Hash identifier: qfy1QQ7iINXMzMiOl2LX5h43Ssvr8NdQwzVrCyMtIN0=
Subject key identifier: 0A:1A:F5:46:1F:9A:C1:4D:1D:F4:19:FC:5B:68:02:2F:48:AB:8F:3F
Authority key identifier: 40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
Certificate issuer: /CN=408562e2b8961b22e29c762d6c990331ba36666f
Certificate serial: 01A0D6F02995E097DEA181F5C63CFBD1A4B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
Manifest number: 1728
Signing time: Fri 25 Sep 2026 05:00:58 +0000
Manifest this update: Fri 25 Sep 2026 05:00:58 +0000
Manifest next update: Sat 26 Sep 2026 05:00:58 +0000
Files and hashes: 1: QIVi4riWGyLinHYtbJkDMbo2Zm8.crl (hash: SgKU896297ZBgeoK3ClWxKRVoLlIq+VU3/BGzXcFhFI=)
2: fJkHv2XKmgf3wdAAPhmkHMSymi8.roa (hash: moVcLbH6Jw6NJ/DI/9GEobHmBwmywaAnRhkWYEC9LnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:29:95:e0:97:de:a1:81:f5:c6:3c:fb:d1:a4:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408562e2b8961b22e29c762d6c990331ba36666f
Validity
Not Before: Sep 25 05:00:58 2026 GMT
Not After : Sep 26 05:00:58 2026 GMT
Subject: CN=0a1af5461f9ac14d1df419fc5b68022f48ab8f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5c:30:74:64:90:45:2c:f6:50:ba:34:d6:f7:
8b:c7:60:66:37:b4:84:81:aa:4d:44:06:3e:a6:0d:
b0:37:5d:b9:d8:d1:6c:d6:79:38:b6:20:a8:d3:f8:
ba:64:bd:ff:53:d2:38:28:58:49:1a:e5:4a:92:f3:
18:a4:fa:d6:31:30:8c:c4:a3:b7:04:dd:ce:f6:3d:
74:0f:69:89:8f:00:99:3b:19:01:5d:f8:9e:eb:99:
20:57:10:77:92:33:c6:d8:07:5d:ab:12:b6:c5:29:
08:82:8f:be:fb:7f:68:b5:14:f0:6f:f3:f3:0b:a5:
21:57:3e:e2:fe:2c:a6:63:7e:35:57:3a:5c:5e:15:
15:4a:f6:a7:3d:26:2e:63:3b:e8:af:10:9c:8a:e3:
6a:8b:9a:c3:ab:40:cb:1b:b1:8f:34:19:4c:18:7e:
32:d4:0d:07:d8:42:2e:88:90:07:a0:56:02:1c:ac:
c8:93:64:0a:bd:e8:bf:c9:8a:98:d8:66:f8:e0:cf:
e8:a3:fa:37:0f:95:5c:02:cc:c6:0c:13:ab:73:fd:
de:ea:ee:aa:17:b4:fe:30:d2:87:8b:56:2b:9c:fd:
c5:db:51:d6:ad:b2:dc:80:e0:9a:40:01:4f:15:5e:
58:bf:c0:ad:6b:90:45:52:b4:28:0b:53:cb:b7:64:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1A:F5:46:1F:9A:C1:4D:1D:F4:19:FC:5B:68:02:2F:48:AB:8F:3F
X509v3 Authority Key Identifier:
keyid:40:85:62:E2:B8:96:1B:22:E2:9C:76:2D:6C:99:03:31:BA:36:66:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIVi4riWGyLinHYtbJkDMbo2Zm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/52a6de-7232-49b1-91c7-cfdfcd4ee0f2/1/QIVi4riWGyLinHYtbJkDMbo2Zm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:25:42:d5:58:10:8e:96:9f:c2:9e:3f:a9:f8:d9:8a:78:53:
cc:e5:f2:c9:5f:86:26:6d:52:c7:00:09:44:a7:30:12:b2:fb:
6d:86:32:dd:47:c7:bc:95:1c:05:26:31:60:5b:f8:ec:44:32:
21:b9:8c:27:94:c0:89:46:19:34:94:64:7c:ad:7e:2a:59:f9:
39:79:43:7d:1c:40:6a:95:f8:64:54:78:50:d8:d3:2e:0b:97:
c4:01:7d:69:a1:31:5b:30:22:07:25:05:af:73:16:85:9e:53:
44:46:20:a2:d2:fc:40:ae:b4:88:68:00:5d:9b:29:60:7a:37:
80:6e:61:05:6a:c6:a4:53:ca:cc:5a:ba:19:28:93:3b:ff:02:
4d:7f:60:bc:d2:8a:90:d0:67:a4:f8:d6:f0:f7:dc:54:84:6e:
7a:a1:63:2a:c2:58:61:2d:55:3c:25:66:62:a3:2e:ed:af:25:
ad:a5:a2:d8:90:35:94:b5:14:6a:61:0e:a7:99:d7:8f:80:1b:
f6:d7:a4:97:a3:ba:05:4a:77:50:32:30:3e:15:1f:51:a4:74:
1c:99:37:f3:a8:93:d6:6b:8a:03:0a:8f:09:3c:7f:84:02:04:
20:1e:7e:36:4a:e9:61:b3:e6:3d:60:68:6b:b2:2a:e3:60:2f:
e4:6d:0d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:04:29 2026 by rpki-client