Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: Yrp2rlAqrHYVtNXSZ5b44bhu4a7Uv6n38eQfrzrQxrw=
Subject key identifier: 23:B9:95:C2:D7:AC:81:7F:3E:2F:01:89:1D:0E:4F:C9:87:84:93:77
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 01A106CA6C56316AB4EEAEDA198EFE296911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 12:01:31 +0000
Manifest this update: Sun 04 Oct 2026 12:01:31 +0000
Manifest next update: Mon 05 Oct 2026 12:01:31 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: R928pnzFghdYavB5eLsmgmkIbVFuMrHrFrdwl+lXIOc=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:6c:56:31:6a:b4:ee:ae:da:19:8e:fe:29:69:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Oct 4 12:01:31 2026 GMT
Not After : Oct 5 12:01:31 2026 GMT
Subject: CN=23b995c2d7ac817f3e2f01891d0e4fc987849377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3c:f4:a8:b6:3b:55:c5:f4:ce:fa:b5:c0:33:
42:dd:e5:fb:89:86:21:a3:8c:82:21:30:e1:a4:9f:
64:9d:15:36:99:2c:ac:77:8e:d9:35:4a:bb:e7:37:
84:8f:80:82:04:c7:bf:71:54:58:eb:1c:69:ef:03:
1d:90:7e:44:dc:78:aa:97:d8:e9:5a:7e:84:87:15:
87:42:7e:d7:dd:82:67:e0:ca:0f:35:96:b2:9e:81:
5e:54:e6:21:b5:0e:7d:d5:d7:e1:71:20:83:ba:e3:
d9:00:1c:3b:e4:ac:a9:bf:c0:5e:23:af:f2:e7:1f:
49:f8:8b:c7:6c:01:52:fc:2f:77:c5:f1:c3:69:8a:
7f:b4:b9:c5:3e:50:71:eb:a2:bd:e8:1a:62:36:06:
a5:9e:e5:30:11:ad:5c:e6:b1:ed:ca:02:f5:fb:e6:
a5:1a:e3:01:d8:c5:e5:fb:67:f8:30:02:c7:d0:8a:
74:94:cc:cd:43:c0:e0:c0:47:42:9f:e8:d6:f5:32:
1c:ee:ad:f3:56:04:76:ba:26:11:22:f2:b4:7b:ee:
ca:62:15:bb:15:1b:d9:f1:d0:a6:70:03:90:44:50:
8d:d2:5b:91:32:f9:e7:b8:2a:0d:63:b0:4a:73:5d:
f2:19:2e:57:2a:49:26:d2:3e:a7:d7:97:bc:3e:4d:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B9:95:C2:D7:AC:81:7F:3E:2F:01:89:1D:0E:4F:C9:87:84:93:77
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:67:bb:f0:d8:99:10:c8:97:36:a7:be:33:13:10:0d:f9:0d:
51:aa:2c:21:0a:e3:e9:76:a7:ce:59:90:b1:cf:a7:6d:c5:2a:
21:1a:1e:07:cd:0c:6a:0d:83:7f:fa:2b:fe:8b:70:7b:00:af:
78:61:ae:d7:1a:94:b9:c5:bf:66:cf:1a:4c:db:e4:33:37:ce:
04:65:65:b3:cd:fb:5a:15:d1:d9:37:cb:dd:65:33:0c:04:da:
81:25:d8:89:91:cd:6e:58:fd:62:57:1a:90:be:96:2c:ad:0f:
aa:42:b3:06:db:fd:e5:0b:85:42:aa:99:b0:3a:ae:67:97:01:
80:90:fd:6a:e4:e2:e6:58:40:f5:ff:58:27:80:0e:02:36:c0:
02:a8:be:60:15:7e:69:46:11:9f:ee:be:0b:98:ae:20:9c:1f:
13:5a:77:23:83:b1:9f:9e:0c:a6:a2:55:dc:17:76:1d:08:7a:
77:8a:53:3f:b6:a7:3f:3c:da:54:38:be:dc:1e:fa:4a:b4:92:
d0:99:f6:b1:66:f2:11:87:cb:4f:1d:15:85:98:96:13:d5:7b:
d5:4f:45:66:4d:c6:80:4f:67:56:b4:7b:59:9e:9d:31:44:32:
cd:bd:6d:0a:2b:d2:bf:92:0c:c9:d4:19:36:eb:8c:29:00:5e:
dc:15:8c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:21:52 2026 by rpki-client