Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
File: Q16al_74NTuEg1I3YEaVLdoPq9g.mft (raw, json)
Hash identifier: z3fNYa6XxJSV1p+IXNmYwMR2mMPOL47w+OB9YVJI3Lw=
Subject key identifier: 5D:CC:F7:CC:5E:6C:FA:E1:7E:C5:FC:23:C5:47:69:C6:08:EA:E3:E6
Authority key identifier: 43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
Certificate issuer: /CN=435e9a97fef8353b848352376046952dda0fabd8
Certificate serial: 01A0D31528A78EBB0866671DD526AEF49813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
Manifest number: 021C
Signing time: Thu 24 Sep 2026 11:02:54 +0000
Manifest this update: Thu 24 Sep 2026 11:02:54 +0000
Manifest next update: Fri 25 Sep 2026 11:02:54 +0000
Files and hashes: 1: Q16al_74NTuEg1I3YEaVLdoPq9g.crl (hash: snalpLCOLAqhDJ1PpKoWBsw6U/kRY2fK2XPw0F70T/0=)
2: l3PqaLSxh6k9vrvUCKmbE6gQmkY.asa (hash: x39hNYyR5CBqNRDFZRAkQxFcTurTxnv+dKIdTKAhhhc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:15:28:a7:8e:bb:08:66:67:1d:d5:26:ae:f4:98:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e9a97fef8353b848352376046952dda0fabd8
Validity
Not Before: Sep 24 11:02:54 2026 GMT
Not After : Sep 25 11:02:54 2026 GMT
Subject: CN=5dccf7cc5e6cfae17ec5fc23c54769c608eae3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:b8:e3:5f:76:c5:52:34:54:d8:2c:08:d2:
0f:b8:85:42:c4:35:58:f5:98:18:f5:8a:86:1d:32:
d3:e0:b3:c9:a1:e6:33:c8:e0:cc:7f:75:de:aa:52:
f2:f8:d2:26:5c:5a:32:3d:ef:7a:24:c8:61:f1:95:
d8:04:ac:fd:41:09:0d:dc:41:13:d9:25:1a:10:93:
bf:f3:2e:f6:ec:f1:98:34:73:d4:1c:8c:18:34:20:
84:a8:f8:68:06:16:7a:d6:a3:6d:b5:6a:6a:c2:c5:
96:e3:cb:6c:b3:e2:5e:0d:0b:aa:d2:3b:24:8e:1a:
03:7f:04:f7:d8:fb:df:f1:36:05:0b:c6:a3:ba:7d:
1b:d9:af:68:3b:80:77:51:9f:ec:7a:f2:aa:61:1a:
48:83:15:93:77:50:67:96:52:84:5f:a1:15:df:45:
a3:fa:aa:61:54:5e:dd:0b:b2:83:44:00:48:87:4c:
0f:97:25:d9:c5:99:0c:5e:51:ba:92:ab:2a:4d:8d:
d5:5f:b8:28:06:43:a7:33:d6:dc:9a:2a:13:b9:0d:
13:93:f1:ef:fe:a5:62:2f:c4:ec:fb:8a:03:c3:a3:
13:78:b3:40:f1:f0:6e:06:9a:33:83:0d:14:9e:af:
c7:dd:fa:4c:9c:4f:bd:5f:3a:23:47:15:5d:2c:14:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CC:F7:CC:5E:6C:FA:E1:7E:C5:FC:23:C5:47:69:C6:08:EA:E3:E6
X509v3 Authority Key Identifier:
keyid:43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:84:09:1e:a0:68:f5:82:b6:6b:ae:2f:bf:96:fe:2a:d7:f2:
3a:4b:2f:ef:f7:11:87:51:41:f3:94:10:d6:db:d3:1d:22:91:
0f:21:62:d3:4b:f1:d7:c0:b7:a6:44:c6:20:ed:92:a3:ae:be:
4d:26:06:74:b1:84:1c:62:09:01:70:56:04:6f:be:bf:b9:68:
55:7d:57:6a:53:0f:97:ec:21:08:46:d6:b2:00:2b:33:57:74:
c6:97:36:ef:b8:11:b4:1a:c8:80:e2:68:d2:19:c3:78:aa:52:
80:2d:ed:e9:69:a5:4f:c4:ae:e7:c9:4a:13:41:7a:f6:f7:48:
bd:1f:28:ae:be:a5:59:7d:7b:62:e9:cc:60:10:f4:5d:35:f5:
ca:9a:7b:65:5d:86:28:a1:00:9b:0a:a6:7c:f0:43:98:25:1b:
a0:21:77:d2:ea:f6:4c:05:f9:40:88:71:c9:78:88:13:9f:a0:
0d:df:ed:36:6e:a4:85:5e:37:3e:10:9a:eb:13:c3:e8:0c:7b:
8c:90:c9:0f:f4:3f:7d:34:be:84:e9:77:c1:26:f0:39:6b:60:
56:e3:63:96:7e:db:53:a1:79:f5:83:82:a3:ee:28:c5:fe:c9:
5d:3b:b2:9e:47:0e:f4:39:da:c6:85:dd:40:6e:c2:df:58:26:
70:51:3a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:36:33 2026 by rpki-client