
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
File: qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft (raw, json)
Hash identifier: iulGsiCiA9xXuC3EKMMJ0Q9fjqSUF47Je+txLQ0dB4U=
Subject key identifier: 74:FF:E6:1E:2E:E9:6F:E9:6A:04:DE:5C:43:47:6F:D7:8F:CB:8C:FF
Authority key identifier: AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
Certificate issuer: /CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Certificate serial: 01A0D917597E32072152084F85A0DA072873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
Manifest number: 1A70
Signing time: Fri 25 Sep 2026 15:03:01 +0000
Manifest this update: Fri 25 Sep 2026 15:03:01 +0000
Manifest next update: Sat 26 Sep 2026 15:03:01 +0000
Files and hashes: 1: agl7At-sGTLsDTh6fIsNcYqjRVI.roa (hash: kdWoOhR4/BvlVOKr5PU254MlzFegaJ4FGVoYgfo0kq0=)
2: qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl (hash: ibYqXjZglIzrkjN1TnGalH8dorU1Mr39N2Pvk2OMhSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:59:7e:32:07:21:52:08:4f:85:a0:da:07:28:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa53464a810aa38c936d9d98b6a2d132fcbff58
Validity
Not Before: Sep 25 15:03:01 2026 GMT
Not After : Sep 26 15:03:01 2026 GMT
Subject: CN=74ffe61e2ee96fe96a04de5c43476fd78fcb8cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:97:e8:3d:72:20:8c:bb:14:79:c1:fe:46:
84:27:27:90:ba:74:94:a2:36:37:79:9c:fe:d3:8d:
94:ba:4a:0e:86:f0:0e:dc:b9:11:70:35:e0:95:f7:
f6:26:7d:52:ba:32:89:4d:18:dd:90:d7:c7:c6:9d:
76:e5:50:ec:34:ce:51:4f:33:23:f0:ed:b7:e0:83:
ec:49:38:d0:71:3d:be:c3:30:c2:b6:2c:54:49:41:
ff:8d:34:5d:42:2b:c1:92:fa:02:23:52:4c:31:4e:
d6:c7:6d:3d:e1:4b:84:02:6d:52:79:d4:3d:91:98:
ab:af:f4:0b:b6:bb:2b:26:bf:ac:d7:41:65:c1:10:
7f:f3:b2:5d:34:9d:2b:9d:07:dc:0c:f7:cb:6c:86:
52:36:e0:40:97:eb:35:e4:ea:f9:91:8c:b3:4f:13:
55:52:fa:64:5d:cb:7d:75:4c:49:1f:8c:50:83:2f:
78:32:bc:10:10:cc:72:8d:64:66:f2:68:54:bd:c6:
30:f0:49:38:2c:86:d3:50:2a:5c:e2:95:cd:f6:22:
34:03:ed:02:47:16:f7:45:54:a2:4f:af:0b:74:02:
77:f6:b2:4a:f4:76:06:17:80:86:86:01:9a:01:2a:
45:c1:ce:ad:f1:de:bb:7a:02:17:45:d7:4a:4a:aa:
ad:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:FF:E6:1E:2E:E9:6F:E9:6A:04:DE:5C:43:47:6F:D7:8F:CB:8C:FF
X509v3 Authority Key Identifier:
keyid:AA:A5:34:64:A8:10:AA:38:C9:36:D9:D9:8B:6A:2D:13:2F:CB:FF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqU0ZKgQqjjJNtnZi2otEy_L_1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/64de2f-5f35-4f77-a844-43d74c0007e6/1/qqU0ZKgQqjjJNtnZi2otEy_L_1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f7:98:95:ff:66:a7:83:ee:1e:ed:b2:ef:4c:b8:d9:d7:59:
86:d4:ad:aa:49:aa:c2:65:db:b5:dc:a4:69:8d:4f:86:af:73:
58:79:4e:f1:54:c2:64:92:65:5e:d1:de:3c:3d:0c:0e:96:85:
df:79:39:3f:2e:61:52:b6:00:62:78:b0:83:2b:30:a9:1c:c8:
9a:25:88:7e:ab:a4:fd:90:f3:4c:5f:c3:9a:e7:76:74:f9:e4:
e9:cd:15:be:8c:10:5f:19:b7:0f:7c:f0:49:f3:07:fd:0f:ef:
6a:11:b8:40:94:bf:35:c8:96:50:5b:b5:61:7d:09:50:2f:f7:
c6:0c:78:23:d8:33:13:95:36:89:7f:82:79:51:73:89:b3:32:
cb:0d:13:66:e2:83:2c:b0:14:f1:b1:63:16:53:e1:c6:ed:1d:
89:76:0f:a8:a7:c7:15:3e:35:ea:a3:26:9f:0e:e6:b9:ee:7d:
2d:47:cb:49:77:28:12:d4:89:e6:38:9d:e2:08:89:0b:23:1d:
08:20:6e:ca:fb:d9:b6:e5:95:36:ff:37:52:f1:23:1f:47:2d:
69:5d:61:58:ce:5c:27:f1:b1:51:2c:89:f1:65:90:d4:01:39:
c7:e9:06:eb:49:2b:4c:89:9e:6c:df:1d:0b:33:18:a6:46:f4:
87:7b:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:58:57 2026 by rpki-client