Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: dA2UZu5UNBOQG8G+Gu6Ydv2DGQl/Wlr6HmnvTRFIwec=
Subject key identifier: 4D:8F:87:BD:9A:4C:1D:88:1B:09:25:CF:3B:DE:C1:DB:83:3A:90:5D
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 01A0C9D90D343D092EA1B51C3E1C9080E886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 1534
Signing time: Tue 22 Sep 2026 16:00:40 +0000
Manifest this update: Tue 22 Sep 2026 16:00:40 +0000
Manifest next update: Wed 23 Sep 2026 16:00:40 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: devhylHskXBq+2HrVhEV/py/3dSQGPslyL/NcYn60l8=)
2: CfjqQqpPDnBhH-p0lAIrBIhNgY8.roa (hash: /5wTY3Au8nodbJrzfE4opPFUcgrAfS3BmM1XuaMh8Fg=)
3: SosxbjlFtLu-lsuh4-rF3Rw-rK0.roa (hash: c0C1OZyGN1Qv/oPDh5sJipEydB/aVrMAT59EdQMDAY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:0d:34:3d:09:2e:a1:b5:1c:3e:1c:90:80:e8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Sep 22 16:00:40 2026 GMT
Not After : Sep 23 16:00:40 2026 GMT
Subject: CN=4d8f87bd9a4c1d881b0925cf3bdec1db833a905d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:35:ad:0a:20:56:82:5e:a1:ad:5f:df:62:
86:7d:1f:2c:cd:6a:8e:d1:da:02:ee:aa:15:19:83:
59:83:c4:08:72:6f:5a:82:26:a7:94:bf:6f:27:2a:
46:92:98:cd:c8:21:e3:17:10:4a:23:b4:89:cc:28:
dd:ca:62:8b:db:63:0c:ff:b0:f1:99:ea:0d:c2:d6:
ba:8c:a8:dd:2d:82:2a:47:b8:0d:d5:0c:04:06:e9:
92:0c:8c:51:d7:2b:29:68:21:e4:1f:17:5e:02:53:
eb:c5:0e:7a:90:e6:b1:e6:99:06:31:81:e7:41:1c:
c3:73:1b:48:84:74:f5:80:45:8d:a7:18:7b:7e:51:
80:3b:d4:ee:1a:f3:79:60:12:79:15:98:04:cf:b8:
06:96:cb:87:86:f3:40:90:b0:1e:ed:33:82:40:7b:
4d:a5:b9:70:97:be:46:b6:81:94:91:7f:1f:b0:a4:
62:a5:7a:26:ed:f6:2e:09:29:47:18:8a:19:51:e1:
a0:f0:65:45:fb:72:69:19:62:c9:f2:fb:b2:1d:82:
af:e8:ac:82:e5:a0:d2:8c:d4:fa:25:86:54:aa:71:
6c:a2:3d:51:b5:b9:37:93:7c:e0:57:2e:32:08:d2:
7f:b6:72:e0:f0:a8:74:c8:70:38:ee:8c:a6:74:1f:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:8F:87:BD:9A:4C:1D:88:1B:09:25:CF:3B:DE:C1:DB:83:3A:90:5D
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6e:e0:fa:7c:74:1e:aa:38:25:00:ca:50:59:b5:73:41:9c:
12:01:13:d5:e1:b4:9e:56:96:e6:48:29:62:f6:a9:d8:a9:48:
c2:d0:2d:a5:dd:47:85:bf:83:f1:90:dc:22:37:d3:09:32:93:
b6:4d:92:30:b5:d2:95:b3:6d:c3:d2:d0:0b:2f:3b:cc:72:80:
ea:5b:4e:9f:14:a9:5c:9c:d7:a1:74:97:46:1d:45:6a:d1:0f:
b4:98:ae:c1:77:b7:04:8c:8d:ca:05:b9:d7:7a:34:5e:a2:5c:
17:c2:c8:a9:ff:18:77:b0:21:79:c2:54:da:e7:0d:b6:d7:4a:
0f:ad:20:d5:43:ab:a1:84:bb:e9:30:3e:c5:1f:01:81:c0:81:
3c:6d:52:b2:ea:d1:9e:16:3e:25:c4:26:68:da:68:a6:24:fb:
3b:f5:d2:0f:7d:23:2a:43:3f:62:b6:6a:c7:81:cb:88:98:34:
90:7d:29:56:ba:65:82:0c:c1:a9:5a:45:82:74:7a:c0:77:bb:
36:83:07:37:2d:62:5a:84:a3:b0:7b:06:ef:af:80:ef:a3:87:
91:2c:af:8d:9b:5f:1c:0b:ff:f0:0d:54:ed:74:8c:19:55:4f:
15:77:c3:6f:eb:28:fb:f8:de:f0:38:4a:f4:65:ce:74:35:28:
b2:11:cb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:16:44 2026 by rpki-client