Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
File: qkHqzdOJUCmcnoEKOen_VCnL4lo.mft (raw, json)
Hash identifier: hO7GO4mrdWjIEO6yWXw9zaU/Z+FrLXWaFIV3jhv+Kpg=
Subject key identifier: 48:33:28:31:9A:52:3A:50:40:DE:62:51:19:25:51:38:F8:58:BD:5C
Authority key identifier: AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A
Certificate issuer: /CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
Certificate serial: 01A0D9BBA767C4F00D2C0FF8C0EF5F9ECB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:02:28 +0000
Manifest this update: Fri 25 Sep 2026 18:02:28 +0000
Manifest next update: Sat 26 Sep 2026 18:02:28 +0000
Files and hashes: 1: aMJy9IeANZbYVL8CAtiHgm0xoqQ.roa (hash: E4M6mEfejQMjX8Zwy4Poh/25Qtop8e+0EXBl1KbNADM=)
2: qkHqzdOJUCmcnoEKOen_VCnL4lo.crl (hash: iioc+iSQ+3feOhPo2jlgjHw/Vdo/4I2OrrxhFvrv2dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:a7:67:c4:f0:0d:2c:0f:f8:c0:ef:5f:9e:cb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
Validity
Not Before: Sep 25 18:02:28 2026 GMT
Not After : Sep 26 18:02:28 2026 GMT
Subject: CN=483328319a523a5040de625119255138f858bd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:02:e8:5c:01:ef:16:88:dc:a7:45:87:fd:5d:
d0:19:56:57:20:32:79:5e:56:8e:8b:32:92:b8:35:
f5:3d:0d:87:9e:d8:86:3e:f0:82:91:fc:03:45:b2:
5d:08:d1:8b:7d:c7:8b:43:fc:c7:5e:ff:d5:4a:0d:
68:ce:fe:3d:db:88:1a:f5:8d:8f:39:0a:9d:15:ac:
d4:f2:37:05:2b:2a:67:05:72:a6:86:c6:92:45:6a:
04:8e:d7:70:2f:aa:e6:37:6d:88:f3:77:d5:d8:57:
3a:c6:47:b5:70:b4:72:8d:2b:86:23:26:c5:31:27:
99:aa:09:88:9c:bb:fb:53:f9:3d:aa:63:e6:a4:42:
48:b6:5f:ce:6c:ee:01:26:53:1f:8b:bd:9d:ff:16:
43:2b:9f:57:c9:af:be:a3:4b:0e:fa:9f:a7:af:26:
e1:06:1a:40:1b:72:a4:00:74:f4:b5:76:67:bc:4a:
1a:48:67:47:ce:af:14:5f:8d:c8:b4:9c:bd:7b:b5:
fd:e4:70:8b:9f:0b:99:b4:29:f1:ba:49:60:5c:c5:
55:21:04:21:28:52:d4:f2:b0:f5:96:9b:1f:d6:54:
cb:d7:4f:90:cb:f6:ea:9c:b8:b6:f0:69:c9:3f:4d:
76:d7:d8:c7:c8:19:08:53:44:65:00:e8:6c:23:ca:
17:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:33:28:31:9A:52:3A:50:40:DE:62:51:19:25:51:38:F8:58:BD:5C
X509v3 Authority Key Identifier:
keyid:AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:5c:06:19:7d:16:e6:51:9c:92:bb:f1:8a:9a:fd:dc:14:87:
51:c1:23:99:d9:81:e2:47:27:02:cb:2b:47:24:46:ae:b7:d2:
96:4a:31:f7:95:9d:47:d6:76:dc:f1:b2:7f:8b:5c:89:c8:89:
3c:c1:14:0a:47:46:da:25:be:54:9d:2c:a8:58:e0:37:8f:b3:
06:3d:c3:0f:a8:1e:30:33:e4:c9:c0:0a:c0:9d:3e:8b:ad:77:
e2:33:6e:47:76:eb:fa:c9:90:86:5c:fe:49:09:0b:f0:c4:b5:
1b:c5:48:14:6d:48:68:f0:0a:13:43:a5:96:33:06:23:ad:1e:
e2:f7:35:28:fb:73:eb:fc:56:f7:a7:2b:b6:40:51:d1:e4:e8:
4f:da:42:84:56:6c:bf:25:2b:55:d1:40:09:35:ef:1b:ae:5a:
f2:91:d9:93:15:63:3b:e0:9b:b2:6f:74:8d:9f:8b:74:cd:62:
e3:c3:43:83:2d:60:ee:b0:1c:4d:32:fc:ee:f0:eb:6b:21:a4:
02:f4:25:a8:94:aa:88:16:ce:e6:ea:95:f8:ee:21:bb:fb:58:
39:de:91:9e:47:91:f6:1a:b2:7f:01:7a:70:ba:8e:65:80:42:
5e:00:09:54:e5:52:a0:b7:85:e7:f2:0c:7a:4c:fb:cb:2c:51:
1d:c1:71:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:43:46 2026 by rpki-client