Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: x7WsIcV88iF9nRpXGne53iYd/UAeMJcYsBQKqq4H0iA=
Subject key identifier: 74:CF:2F:75:89:94:8C:B3:45:88:9D:C6:48:60:4F:78:5E:BB:E0:37
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 01A0F6B298B11BA19FFFB45D35AF89315FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 1A80
Signing time: Thu 01 Oct 2026 09:01:34 +0000
Manifest this update: Thu 01 Oct 2026 09:01:34 +0000
Manifest next update: Fri 02 Oct 2026 09:01:34 +0000
Files and hashes: 1: GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa (hash: D0faA0NAhOg5B8uJp2cs027yC0WcbwJy1xgJBQXojpc=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: ka4CkdXLRGEJThCv9EV2qahA2K0C47SakFJXDJqK4mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 09:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b2:98:b1:1b:a1:9f:ff:b4:5d:35:af:89:31:5f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Oct 1 09:01:34 2026 GMT
Not After : Oct 2 09:01:34 2026 GMT
Subject: CN=74cf2f7589948cb345889dc648604f785ebbe037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3f:fb:1e:81:0d:e9:11:71:89:45:db:40:1b:
65:b0:30:f2:67:4e:fa:da:5e:ab:88:0d:6e:62:ea:
f6:8b:c3:b1:1c:ef:9a:8b:98:a7:30:ea:3a:2e:6b:
f2:f9:1c:fe:91:5a:fa:cd:8a:40:ea:51:ce:ce:6a:
c4:30:20:7e:e8:8c:31:96:d7:82:56:75:3d:4b:e1:
61:4e:e4:1a:7c:76:b3:07:01:a4:ca:dd:c8:58:27:
33:06:42:77:19:69:6c:94:df:63:92:b0:b7:65:46:
44:7e:de:81:77:63:bb:50:3f:92:d3:d5:fe:0e:4b:
91:e1:92:f1:15:0d:77:fc:be:74:17:b8:a8:53:ac:
9c:e8:19:2b:fa:43:b6:e7:da:f6:a4:28:9a:e0:43:
c3:5a:74:3b:f5:43:92:49:99:6b:cc:97:76:c8:e4:
83:14:70:8e:74:8f:5f:7c:ad:2d:cc:bd:6d:2f:05:
39:6f:2e:fd:d2:7a:af:d9:f0:56:f1:c4:9e:71:f6:
f2:c4:54:d0:b6:41:e5:77:b3:2d:2b:43:68:27:72:
d2:7d:bb:00:46:65:6c:87:5b:06:67:65:ad:b0:c2:
47:10:c5:08:d6:16:d3:c8:6c:e5:25:af:a9:c6:35:
20:26:45:b2:57:87:e0:be:60:49:27:b7:1c:2e:d3:
e9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:CF:2F:75:89:94:8C:B3:45:88:9D:C6:48:60:4F:78:5E:BB:E0:37
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:21:d5:49:43:c9:b1:b6:5a:62:b1:fd:58:be:8e:98:7b:e7:
98:d4:d5:68:cc:25:8a:b0:a1:bf:2b:72:ce:8f:a2:e0:59:13:
62:86:79:2c:e3:15:ca:93:31:b3:44:3b:48:86:2d:01:00:76:
da:5d:86:a0:02:bd:3d:d0:91:8b:3a:4f:79:f7:6e:07:4d:2f:
58:b6:94:ba:05:ac:27:2a:f4:c8:ac:a5:28:d4:d3:43:b5:06:
73:76:06:0e:86:62:e0:6f:9e:0d:d2:ba:d2:3f:49:42:93:61:
22:58:d9:99:60:1e:28:15:80:5f:9d:95:f1:48:41:9f:dd:33:
aa:5f:89:17:19:26:c1:2e:aa:ef:1e:7b:0b:89:5c:7f:ed:99:
20:84:0f:91:ee:34:a5:34:80:50:d1:ba:d1:68:2a:fb:22:9e:
6d:d6:0c:c5:4d:f6:21:3f:8d:d2:05:30:49:94:bd:20:7d:f1:
25:69:dc:f9:b9:6e:15:40:92:32:5a:eb:1d:a3:9e:4a:1f:5b:
aa:f9:dc:c4:ad:5e:2b:89:94:ce:58:0a:e0:dc:09:2f:5e:8f:
88:75:1a:e0:d6:25:85:4f:0f:bf:63:27:de:92:92:01:3f:23:
d9:c3:5a:5e:b8:f2:4a:4c:fd:27:fb:49:19:5a:b9:24:5e:2a:
e5:2f:69:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:55:20 2026 by rpki-client