Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
File: QyB1WWVFCTwGpvz4-rV7GS53kKo.mft (raw, json)
Hash identifier: y4QlGSocofgSb/HKGj5hdMoDxTEnA/OrohnF+zbWkrQ=
Subject key identifier: 72:E8:40:31:9E:43:5F:3A:BA:9A:FF:EA:BE:41:A9:49:DF:ED:AC:18
Authority key identifier: 43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
Certificate issuer: /CN=432075596545093c06a6fcf8fab57b192e7790aa
Certificate serial: 01A0E02AF3073A50D5D422E37844B0FD52A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 00:01:45 +0000
Manifest this update: Sun 27 Sep 2026 00:01:45 +0000
Manifest next update: Mon 28 Sep 2026 00:01:45 +0000
Files and hashes: 1: 7Ajy7T_IXat5EHnX5jOdCl3BXSs.roa (hash: Rn+5opWUGoRW49OpMrdlbpM9u9h2SBCx0mFY1z5Li4g=)
2: QyB1WWVFCTwGpvz4-rV7GS53kKo.crl (hash: 38ELCwwVdqOoo/KGmZBKm42TANahm1SGgJWXWY0ffdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:f3:07:3a:50:d5:d4:22:e3:78:44:b0:fd:52:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=432075596545093c06a6fcf8fab57b192e7790aa
Validity
Not Before: Sep 27 00:01:45 2026 GMT
Not After : Sep 28 00:01:45 2026 GMT
Subject: CN=72e840319e435f3aba9affeabe41a949dfedac18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:94:2f:56:e9:90:98:ea:f0:fc:28:ef:96:6c:
86:02:cb:fd:81:55:06:f2:97:77:54:63:c6:f1:0f:
0b:cd:6c:03:4c:b2:90:38:61:b9:77:55:85:56:00:
99:88:dc:fc:2a:d7:6e:7c:c3:0f:d2:52:a0:3a:bc:
3a:06:73:22:d9:06:43:65:5e:7b:fb:f5:ac:6a:59:
00:c9:fc:4a:59:8e:2c:f5:52:88:6e:45:4b:51:96:
3a:c7:d5:05:f0:94:62:76:eb:2c:59:21:a9:d1:da:
bf:37:ab:81:04:50:60:48:c1:e7:a7:94:35:61:2c:
c1:41:b3:57:f4:96:3e:ca:ce:24:9e:b3:80:02:8d:
e3:f0:f7:3b:01:5e:07:43:4e:93:c6:7b:1f:1f:19:
d4:8e:6b:24:72:94:0d:07:28:77:25:cc:e8:55:f5:
09:e1:9c:9e:9b:74:ae:57:73:d2:0f:ac:e6:4b:5e:
dd:13:b3:73:50:6a:37:1e:ee:51:6d:26:06:63:31:
02:f3:4b:db:29:d5:25:97:16:9a:7f:5f:f7:87:09:
6d:c7:8d:b7:b2:c8:ed:86:49:ae:e5:c6:c9:b0:cb:
55:b2:f9:d1:ac:96:72:c4:62:4e:de:f8:14:a7:30:
cc:f4:ce:d8:a5:19:69:a8:3d:a3:72:76:90:94:f7:
55:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E8:40:31:9E:43:5F:3A:BA:9A:FF:EA:BE:41:A9:49:DF:ED:AC:18
X509v3 Authority Key Identifier:
keyid:43:20:75:59:65:45:09:3C:06:A6:FC:F8:FA:B5:7B:19:2E:77:90:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QyB1WWVFCTwGpvz4-rV7GS53kKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/bda245-576b-4940-a9f5-92798dacaf75/1/QyB1WWVFCTwGpvz4-rV7GS53kKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a6:32:fe:bf:71:06:7f:52:69:64:c3:d4:f5:d7:91:41:c4:
a3:27:23:b6:26:1c:34:02:d1:84:ff:86:68:01:b6:9f:58:6e:
50:b4:7f:cc:62:c6:0a:e1:9b:66:15:83:ff:e3:12:dd:22:23:
c6:19:12:71:fa:a9:9e:0c:b5:c5:9c:27:d0:3e:af:e4:62:d6:
ab:8f:0e:08:d3:fa:d5:5c:55:88:a0:4c:5e:75:bf:f8:db:10:
04:8f:7a:ea:74:cb:e7:bf:89:6a:ad:55:fa:7d:b4:c0:16:03:
63:f8:91:c5:27:cd:94:3e:73:a6:50:b3:82:08:17:dd:0d:60:
a4:f4:0b:55:67:b9:2c:14:23:2b:0b:c5:f9:71:95:b9:f8:03:
82:43:38:c4:b9:d3:6c:ff:22:c1:12:68:d4:80:59:b4:0a:5e:
bc:d8:66:fe:1d:e4:77:47:ff:18:9b:1c:6a:e6:0e:ff:91:44:
ed:af:b7:85:b2:0a:91:50:ad:11:5c:ce:34:6f:16:1c:f4:34:
1c:e0:95:cd:5e:41:64:6c:33:6d:af:42:0d:56:fd:c3:94:5b:
cf:c4:e4:47:1d:e1:4f:25:fd:ef:42:81:5e:a8:d6:9d:c6:55:
52:90:5d:c4:96:e9:2f:cd:af:a1:cc:02:99:9b:30:c9:87:8e:
4e:dc:06:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:13:14 2026 by rpki-client