Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier: YtFemHyDpc7Zju0T1nR5ook2n8bN0QBtZtuhVeyVBhA=
Subject key identifier: F5:FB:7F:3C:D5:6A:6C:D0:08:8A:EB:DA:9D:9D:27:3E:A8:F8:AF:E3
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 01A10FCD94BF0CB3C301949640F06AF8BA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number: 0AA4
Signing time: Tue 06 Oct 2026 06:01:33 +0000
Manifest this update: Tue 06 Oct 2026 06:01:33 +0000
Manifest next update: Wed 07 Oct 2026 06:01:33 +0000
Files and hashes: 1: KUoewwdfRmOf_tbAsPp_9X-LAEQ.roa (hash: LGunqhuUXzXuULPWvo35kZbrmM/8QY9qb8IveKrkACU=)
2: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: DJVnX/T5l0o/ViWUZdFbDyGqL/DboX5LPF94lJ0V8OA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 06:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:cd:94:bf:0c:b3:c3:01:94:96:40:f0:6a:f8:ba:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: Oct 6 06:01:33 2026 GMT
Not After : Oct 7 06:01:33 2026 GMT
Subject: CN=f5fb7f3cd56a6cd0088aebda9d9d273ea8f8afe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:64:b0:83:3a:df:47:6b:f0:2e:6a:88:40:
3a:78:fa:46:ea:c0:d7:12:62:7b:e2:37:94:3d:41:
80:a9:e7:e1:e3:65:99:6e:20:3a:5f:e7:62:5b:c4:
40:36:29:a1:b6:c9:57:86:5d:59:61:19:a6:99:c4:
06:2b:d6:1b:c6:c3:ab:98:66:7d:cc:d9:84:37:0d:
9c:1b:43:c9:2a:b7:ab:8c:0f:04:c1:53:64:67:bd:
a8:71:dc:ed:3d:5c:14:36:2d:f6:e5:21:60:2f:db:
c1:39:2c:93:04:50:35:9a:a7:a9:0b:c1:74:d2:b1:
ac:59:84:45:05:c0:87:bf:25:9e:a8:4e:71:23:ee:
0f:e0:2d:d1:c7:a5:f0:b3:20:f2:50:dd:b0:ba:e1:
15:0f:b2:2e:45:84:42:bb:c0:77:c5:3c:84:c0:2e:
db:4b:2d:f8:a3:6b:28:15:1b:13:79:c6:04:6d:28:
b1:4f:6b:2e:f0:59:58:32:f6:07:81:fd:7a:45:77:
9f:59:0c:03:15:2b:9a:63:e6:a0:e6:6e:44:5f:ad:
d6:55:c4:98:93:43:fd:77:73:50:b0:e4:27:f6:3c:
64:69:f0:8b:21:8c:a4:2c:7e:87:68:a4:d9:5c:5e:
bf:e5:52:6d:33:ab:51:63:23:79:a4:46:2f:f7:4f:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FB:7F:3C:D5:6A:6C:D0:08:8A:EB:DA:9D:9D:27:3E:A8:F8:AF:E3
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:35:c0:53:ab:c2:26:b7:73:26:8e:03:7f:07:a7:9a:1a:12:
e2:84:78:3b:05:15:49:d7:05:46:f1:89:ca:44:ed:0e:c2:58:
71:40:74:2b:31:00:5f:ea:19:98:bb:98:63:1e:41:94:9e:41:
3d:b7:10:95:f3:70:46:9c:ae:a5:29:75:8c:7d:c8:e3:0e:f8:
0b:52:69:f0:a0:e2:ba:63:fb:38:88:d0:b5:62:ca:a5:15:8e:
39:d9:90:55:2b:21:5c:49:b5:94:5a:62:a0:c5:d5:c4:6a:c6:
53:32:75:c7:bd:d9:d3:06:01:0a:e8:3f:60:99:bf:2e:50:a5:
81:e9:3b:09:03:54:a5:df:fe:e1:86:a5:90:bf:2f:82:9c:45:
94:52:41:03:81:92:37:57:b2:ec:79:3b:95:3b:32:e3:e7:36:
90:21:9b:bb:00:98:ad:e0:58:65:54:f4:c8:74:e4:ca:3b:ac:
90:52:a0:b4:ad:6d:f2:00:11:94:e2:e7:91:bb:ad:a6:44:17:
1d:3e:4e:a2:79:9c:ff:9a:92:c5:03:ea:bf:47:df:74:fb:f3:
b6:dc:0f:40:d8:5d:8e:c2:ff:5f:11:f5:a2:98:93:8c:8c:67:
30:82:8e:42:a3:f8:8e:ed:14:87:d4:34:3f:98:38:0a:da:13:
3f:e3:f5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:43:01 2026 by rpki-client