Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: QCq+ox8LjYwSHTHE7QT2awHiMy5p2EY+PEzx0dtJzqM=
Subject key identifier: 5E:45:2D:34:67:5D:BF:1D:2F:C9:8B:AD:50:36:0C:6B:52:52:1B:6F
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 01A0D3F04E3EEDE2F363751D6FFB110159A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 0AAC
Signing time: Thu 24 Sep 2026 15:02:16 +0000
Manifest this update: Thu 24 Sep 2026 15:02:16 +0000
Manifest next update: Fri 25 Sep 2026 15:02:16 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: phHQFaj4W0oqg8Cv5DAzxMjtwRSw7MYIMeAIMDLmhdk=)
2: NBMICGxDjswxMBcIkL6TWpVgug4.roa (hash: SDiHoGR3hyxD5P9xq7VGB+HgvxZFXXwsXaz8vMU9je8=)
3: flkFMntj216ik-1RHE5z8QkiuF4.roa (hash: Gx/ViUGq+C6Lf+xKNlRvkXnmfpj7mqFvEpimMEsP3EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:4e:3e:ed:e2:f3:63:75:1d:6f:fb:11:01:59:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Sep 24 15:02:16 2026 GMT
Not After : Sep 25 15:02:16 2026 GMT
Subject: CN=5e452d34675dbf1d2fc98bad50360c6b52521b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:22:f8:26:09:8b:01:36:29:67:24:b3:ff:ac:
91:ca:ac:92:c1:26:fe:b4:e5:51:14:93:0c:19:08:
af:f1:7d:3f:9d:fe:8c:91:7f:3d:48:e1:58:00:b8:
47:b8:7f:4c:84:84:50:bd:e2:f5:40:3a:2a:8e:e2:
bf:85:b2:b9:f7:a0:53:c2:88:0f:bb:60:87:70:72:
55:0f:f0:99:73:6f:90:23:fb:a3:d8:97:ea:fb:ba:
3f:a8:99:04:71:59:46:b5:51:e9:87:ba:aa:03:95:
46:85:b7:3f:48:bb:7b:d9:f2:71:5c:37:1f:ea:d7:
be:3d:17:79:2b:68:b4:6f:e2:be:34:3d:06:d8:06:
aa:89:d8:30:69:52:f7:26:f8:a8:b6:f9:82:30:23:
8f:bd:57:4e:ff:33:2a:8e:bc:cc:1c:7b:49:08:53:
a3:b8:28:23:d2:97:26:db:24:c6:cd:de:87:c0:3b:
f8:33:fe:bf:00:50:3f:4e:bd:7f:06:4b:a7:a7:45:
59:bc:73:2f:3f:f5:7b:44:e8:f8:22:23:d3:d3:cb:
50:4a:23:8a:21:5f:69:d9:1c:a4:01:aa:74:e3:cc:
11:4a:af:3d:25:d4:6b:98:fa:e9:7e:56:8f:ff:7b:
ed:bf:59:be:87:7f:31:ad:f5:41:1b:f0:05:48:47:
5b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:45:2D:34:67:5D:BF:1D:2F:C9:8B:AD:50:36:0C:6B:52:52:1B:6F
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:ef:60:7e:fe:97:ab:18:a0:8c:1d:76:d9:82:fa:39:5d:69:
1b:9d:4e:28:43:17:e6:47:55:58:b5:e0:3b:3e:b7:bf:53:3f:
09:d9:9a:40:38:0c:c8:ef:ed:15:6e:3b:58:78:d8:86:d7:ea:
fc:88:53:46:5e:07:d0:8a:81:78:5f:84:e1:fe:da:22:2c:00:
d9:3d:ea:2b:da:12:5f:cf:e3:fc:6b:e3:c1:be:77:23:5a:b1:
92:d1:fc:88:b6:92:13:dc:5f:bc:dd:28:a8:2c:14:7a:7f:f2:
78:2f:05:36:1b:2b:81:52:48:69:c6:c9:da:ef:88:fd:80:ab:
e3:9d:f7:5d:ba:ca:07:cc:2c:c4:92:e8:e5:0c:18:9f:15:29:
4b:f7:ed:f2:44:70:a6:f8:a8:03:00:13:76:8e:b6:c2:d1:48:
46:78:58:ec:9d:34:71:f0:43:fb:c6:6e:32:8a:fe:60:28:73:
1e:54:f8:9e:5a:09:52:5c:87:a8:2f:cf:3d:71:8b:e1:91:74:
95:c4:8c:e5:9d:c1:a3:5b:2b:a9:ca:30:26:95:65:5d:2e:78:
a0:84:d5:15:83:1b:1b:b8:2d:6d:1b:b0:a1:37:a6:9b:3f:00:
39:dc:41:85:87:12:50:39:16:a5:0a:7e:1c:d2:b7:e7:b2:13:
03:45:1a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:22:30 2026 by rpki-client