
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File: qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier: EgNMUsE3aZ9lj6flXlCWBXIW8CNnm+JeuwAx0gOgiZE=
Subject key identifier: B0:26:57:D9:ED:97:0F:30:0F:D5:66:ED:5F:6A:03:ED:59:F0:96:97
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 01A0CF6D10288C6B80A03AA8041F443872EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number: 1654
Signing time: Wed 23 Sep 2026 18:00:26 +0000
Manifest this update: Wed 23 Sep 2026 18:00:26 +0000
Manifest next update: Thu 24 Sep 2026 18:00:26 +0000
Files and hashes: 1: FNkHYRMJRFCiIlaK4G8JgEPS518.roa (hash: g2wnBjvuJyEP0SF26uwzawUig5FkEl7CQILghR3/QXg=)
2: _eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa (hash: 4hxoG4bKraWNMIF1RfBWFI69iacKZ3rVBDrPXr2dCEQ=)
3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: cVHGwcczG13ahPasTy4DqWj1sFwzSDGAxJ1wyLFmEKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:10:28:8c:6b:80:a0:3a:a8:04:1f:44:38:72:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Sep 23 18:00:26 2026 GMT
Not After : Sep 24 18:00:26 2026 GMT
Subject: CN=b02657d9ed970f300fd566ed5f6a03ed59f09697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9d:c6:44:96:07:ef:ff:38:a2:fb:47:1b:f9:
7d:78:20:f9:f1:91:ef:0f:00:f4:2a:d9:ee:f2:95:
7d:41:77:24:77:67:f4:ab:79:cc:9e:12:8f:a2:e0:
ed:94:e7:43:f2:af:8f:02:e1:85:f1:36:5b:11:74:
20:1d:7e:94:82:bb:4f:25:c2:f6:d8:d7:95:a3:27:
58:a5:56:c1:7c:d2:25:9c:0e:ef:40:9b:94:e7:7a:
0c:c6:68:f6:aa:85:24:c4:ff:f6:bb:cd:ba:0a:dd:
f4:c8:36:25:c8:4a:cc:ef:81:0a:db:54:f2:fc:eb:
e5:63:9f:44:13:62:24:43:bd:51:b6:36:41:e6:79:
e2:e0:11:fd:db:6d:68:b8:4f:b9:6e:71:e7:ae:a0:
7b:4c:d3:29:eb:99:2f:01:58:4a:24:fb:a4:af:21:
c4:79:32:48:c5:82:5f:1b:74:cd:1e:99:18:c0:fe:
d6:9f:94:74:f0:23:95:0e:11:01:f0:38:4e:04:b5:
e3:7c:95:50:49:e6:19:dd:79:07:e6:04:b9:bb:f8:
34:ea:1f:be:1d:e6:b3:62:e0:af:cd:7c:fa:d4:e7:
83:f5:c5:27:2f:78:0d:cd:60:74:d0:3f:de:72:ba:
92:da:a2:54:e1:b7:8f:28:c8:1f:60:7c:11:6a:9b:
30:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:26:57:D9:ED:97:0F:30:0F:D5:66:ED:5F:6A:03:ED:59:F0:96:97
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c9:b9:bc:98:ff:c0:23:47:f2:db:5c:53:79:24:0b:86:be:
a1:06:86:88:3c:7d:d7:4e:64:f3:ca:a9:10:7d:62:c1:0a:6c:
0c:53:e3:b4:fb:be:13:e3:15:4d:1b:ea:14:de:0b:d3:9b:c7:
ef:77:7a:92:6a:c2:54:12:f0:61:34:cd:3d:0c:e8:6e:6b:15:
f2:72:80:1c:88:88:cb:5b:cd:f9:45:ce:e0:91:7c:4b:b4:35:
7d:66:56:3a:47:75:80:de:bd:ff:8b:20:94:91:4c:00:33:5f:
66:03:7b:b2:f8:12:3c:95:18:30:7d:dc:6f:22:7c:47:77:18:
c0:58:c1:f9:68:31:24:74:da:de:d9:1e:d9:3f:20:58:62:ad:
58:1c:69:a2:26:85:a1:0e:14:3f:08:56:74:3a:0c:d8:97:1b:
a3:51:ab:8b:6c:30:aa:88:f1:9e:72:89:f8:80:81:e7:6a:fe:
db:c8:f5:ff:65:15:35:e1:16:d9:1a:5a:90:d3:7e:cf:5b:24:
5b:89:42:85:18:68:81:f8:89:f8:99:45:80:f2:70:97:f9:39:
6e:b1:e5:46:40:41:44:18:f6:6a:a7:9b:80:39:f2:50:16:ea:
78:17:87:8d:60:07:2f:4a:29:03:81:03:e5:04:73:58:39:fa:
07:a3:cd:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:59:38 2026 by rpki-client