Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: ZQjG9K4P2+LltkpbTL4rIKXuMbxgjnTNI1dLvnrXygE=
Subject key identifier: DD:8D:48:66:B8:FC:1B:73:87:36:8C:1E:BE:83:B7:AA:3A:C4:88:33
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 01A0DF18B2A58B6C93611DE9C43F964FDDA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 1551
Signing time: Sat 26 Sep 2026 19:02:12 +0000
Manifest this update: Sat 26 Sep 2026 19:02:12 +0000
Manifest next update: Sun 27 Sep 2026 19:02:12 +0000
Files and hashes: 1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: rpidK1NBr5o3wgBqQe3Clc2Rq4oY5MJnh+icJdYgkhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:18:b2:a5:8b:6c:93:61:1d:e9:c4:3f:96:4f:dd:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Sep 26 19:02:12 2026 GMT
Not After : Sep 27 19:02:12 2026 GMT
Subject: CN=dd8d4866b8fc1b7387368c1ebe83b7aa3ac48833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2c:e1:ea:2e:39:d3:cc:65:0a:5c:fc:61:08:
dc:ac:4c:2c:16:72:64:ac:79:61:d0:ae:b0:eb:46:
e8:4d:75:41:58:a8:24:be:83:d4:97:1b:b9:4e:4f:
be:4c:4f:fc:9f:e5:21:71:9a:19:c4:83:0b:e5:6d:
60:ec:75:51:6b:b2:59:96:b5:75:0d:07:bd:fa:56:
ae:36:ff:ae:cb:88:ed:47:99:43:38:59:64:42:81:
5c:c6:61:cb:64:69:9b:9d:1f:fe:a0:5a:40:82:5b:
22:ea:ce:87:53:e8:39:45:e1:b8:92:60:b7:dd:8f:
7a:cd:03:96:cb:aa:0d:05:05:46:89:25:67:63:5b:
1b:ac:75:21:7d:32:be:90:48:3f:be:db:04:f7:f3:
e2:45:53:4d:00:93:d7:da:42:a3:a2:d3:6c:9e:5d:
75:7e:1d:6a:da:bc:e1:7a:07:bf:6f:56:76:58:08:
74:44:24:bc:57:ca:4e:cd:a9:9c:69:0c:21:f2:a8:
d9:fd:09:1d:9b:2c:76:a0:94:e1:a7:76:a9:d5:bf:
5d:94:34:9d:f6:be:f5:fa:06:99:57:e4:7c:72:2f:
66:df:15:a4:36:12:53:74:9c:9a:c3:71:db:a0:51:
ba:8f:f4:97:d0:64:d7:88:a7:53:de:55:19:14:9d:
87:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8D:48:66:B8:FC:1B:73:87:36:8C:1E:BE:83:B7:AA:3A:C4:88:33
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:31:60:de:41:6c:18:92:b9:c9:b3:a7:ab:ab:94:b4:42:d6:
ff:e1:87:bb:2f:10:2d:d8:9f:1a:25:e0:cd:da:7e:a2:ec:87:
9d:83:79:e4:e8:cd:88:72:bd:2c:1a:14:b4:f3:fa:1c:42:0f:
e1:1d:6f:e6:cc:68:72:c5:d1:47:96:aa:ed:8c:c4:06:a0:3a:
bd:eb:ef:74:f4:6f:66:72:c6:7a:59:fb:2a:82:02:e6:bb:a6:
13:dd:17:bd:64:5a:2a:84:4b:fc:ac:60:f8:41:c3:05:d1:b1:
3a:c7:4e:26:64:8a:82:7f:ed:c0:1e:5d:85:db:0d:6f:87:68:
c6:97:8f:bf:11:87:e3:b6:bc:1a:3a:61:de:20:cf:4c:b9:e1:
61:9b:eb:34:5c:6e:23:35:ac:72:de:d5:ab:b7:e5:5d:4b:66:
8e:44:94:89:9b:9d:a8:27:da:3c:a2:de:99:e0:19:4c:09:e6:
bc:c0:ce:f3:63:3d:84:8a:28:97:81:8f:fe:3f:75:a7:5d:c0:
e8:5e:90:95:05:01:36:2f:8e:69:93:a4:59:6a:cc:22:84:76:
41:88:45:c6:53:f3:62:3e:77:c5:8e:24:90:9f:0b:0b:80:4e:
d6:9c:fa:55:7b:95:ad:48:11:68:8b:5e:a1:95:fa:31:cc:cf:
85:da:c5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:34:27 2026 by rpki-client