Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
File: qycpZC0uNTfZq3xFxR_ibepGi4I.mft (raw, json)
Hash identifier: 8VrlhQhiVWDQkF+lde6JkCuQF/BGKzJBFdROzBBe7QE=
Subject key identifier: A7:27:64:F8:E9:1E:80:06:19:8C:EF:A2:FC:E5:C2:8A:5E:4C:9D:F9
Authority key identifier: AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
Certificate issuer: /CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Certificate serial: 01A0E061BB7EE09517A42D8F7234C4F70C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
Manifest number: 1A72
Signing time: Sun 27 Sep 2026 01:01:36 +0000
Manifest this update: Sun 27 Sep 2026 01:01:36 +0000
Manifest next update: Mon 28 Sep 2026 01:01:36 +0000
Files and hashes: 1: IDJxz5Lf-bhA1wZBvX00WPWc418.roa (hash: jtojvMTm31S/WThDl0+VIPwens+k95gEp5w6ddEUhik=)
2: qycpZC0uNTfZq3xFxR_ibepGi4I.crl (hash: sUd6WcRGJkTVC/PkkwDI/oqpvboaG6XaiuMnOLFWoP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:bb:7e:e0:95:17:a4:2d:8f:72:34:c4:f7:0c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2729642d2e3537d9ab7c45c51fe26dea468b82
Validity
Not Before: Sep 27 01:01:36 2026 GMT
Not After : Sep 28 01:01:36 2026 GMT
Subject: CN=a72764f8e91e8006198cefa2fce5c28a5e4c9df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:01:fa:01:44:0f:c7:5f:75:9e:4d:81:aa:
9c:82:10:ee:dd:9e:43:b2:8f:44:70:92:46:a6:0c:
69:1b:87:b7:2c:1a:81:67:e1:a2:9c:15:e0:27:a3:
85:62:ff:7f:c4:83:5e:d5:2e:d6:19:8c:47:e9:98:
4e:59:27:d0:c5:17:9d:0a:dd:f2:a3:bb:42:da:78:
bb:eb:b8:dd:cd:cc:fb:e4:11:34:4a:b9:dc:2f:39:
56:b7:56:fa:61:11:dd:09:cb:d1:ca:3f:72:30:ca:
c6:d0:7f:fc:ae:38:46:05:07:93:26:91:40:cb:bc:
c3:c8:5f:0b:7e:9b:c8:b4:4e:f9:75:c1:97:14:2f:
6c:c5:80:60:61:04:6e:af:61:d6:7a:be:1c:73:cf:
87:fb:7f:c8:19:d4:72:f2:b8:eb:00:84:e7:4f:eb:
73:8d:b1:07:36:98:9f:24:e1:9b:2a:49:64:ab:9e:
1a:7e:79:ca:bb:8f:77:6c:d2:50:a0:38:b1:ba:cc:
3e:58:16:c3:be:67:76:8c:9a:2e:af:a5:29:59:bd:
43:e8:b9:7a:66:77:15:75:26:1a:71:3e:4f:8a:a3:
be:64:c6:a2:9f:04:4a:bd:cd:ba:e3:df:4b:94:30:
93:4b:29:63:f5:8a:f7:ce:8a:57:ad:21:34:b2:22:
ef:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:27:64:F8:E9:1E:80:06:19:8C:EF:A2:FC:E5:C2:8A:5E:4C:9D:F9
X509v3 Authority Key Identifier:
keyid:AB:27:29:64:2D:2E:35:37:D9:AB:7C:45:C5:1F:E2:6D:EA:46:8B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qycpZC0uNTfZq3xFxR_ibepGi4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ed80de-1361-423f-91af-5d0e620f525d/1/qycpZC0uNTfZq3xFxR_ibepGi4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:fc:c7:12:7b:f3:94:5b:b2:f9:ea:27:bf:d0:44:88:f7:2f:
f1:30:b2:43:d5:29:3f:03:74:95:56:37:53:f3:2c:e7:07:b7:
d4:a6:f2:09:8b:d5:94:5f:9c:23:24:f9:6c:d9:c3:ba:cd:92:
68:7d:d7:83:0f:b5:1c:7d:62:9a:4f:c0:2c:f9:cc:e2:4a:d9:
62:d8:9e:e9:15:4c:73:4b:5c:28:bd:e0:19:79:af:89:40:25:
f3:c7:18:7f:f2:65:e6:40:88:16:51:40:b8:a9:7a:dd:3d:a5:
42:d2:91:4e:13:c3:91:60:17:8d:bb:6a:da:03:45:e7:c4:31:
36:52:55:15:5f:34:ec:96:de:54:b9:d2:40:e4:dd:15:c4:72:
7f:e9:6f:f6:9b:0d:fe:24:9f:05:13:d5:cb:56:cf:62:39:9e:
5b:83:e3:7a:a0:bf:4e:46:21:0f:cc:f2:42:a3:9d:a4:05:a0:
78:76:de:e7:dd:29:2d:da:83:cb:32:5c:09:4e:f7:35:60:9c:
d4:3a:11:57:49:04:83:4a:67:26:81:9e:cb:d6:b4:03:36:76:
50:5a:1a:4d:d9:86:1b:cf:f2:fb:2d:c6:4e:bd:e2:bc:e6:1b:
27:76:96:15:ea:9b:d7:e6:8b:a2:1b:bc:79:ec:91:70:1e:25:
76:ce:33:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:00:21 2026 by rpki-client