Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: PnzFDiIRSyGGPMxvhTdFqHASBWxJancmsgEr+q6Lld4=
Subject key identifier: A6:3E:3F:47:48:20:2C:96:A6:1F:E3:02:FA:7B:8F:64:A2:AC:51:33
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 01A0D94C77C2E095A21022AECFBAE5CBDAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: 0525
Signing time: Fri 25 Sep 2026 16:01:02 +0000
Manifest this update: Fri 25 Sep 2026 16:01:02 +0000
Manifest next update: Sat 26 Sep 2026 16:01:02 +0000
Files and hashes: 1: LzYZHC-rjJGbruYM23VscVWulpM.roa (hash: sBrrJnoeM0fqyubYgpN8QGXQIytqFwMQbpd5rGJx9Ns=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: CgS0AEefb6KWM0oYjOKlmgvolHsSgfNa81Yt8VBOER8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:77:c2:e0:95:a2:10:22:ae:cf:ba:e5:cb:da:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Sep 25 16:01:02 2026 GMT
Not After : Sep 26 16:01:02 2026 GMT
Subject: CN=a63e3f4748202c96a61fe302fa7b8f64a2ac5133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2d:cb:5c:16:09:93:06:94:f3:6a:69:32:e8:
cf:e1:4f:71:6d:4c:71:91:14:76:30:07:56:c9:4f:
b4:13:9f:4a:71:f5:30:59:8a:6c:9f:fa:59:5b:c2:
16:d4:f3:ef:fe:9d:8d:c9:e2:21:1d:25:a9:3c:64:
93:76:6e:8c:0e:2c:e2:e6:24:e6:f2:3d:3d:c3:b3:
61:89:05:95:cc:37:5f:be:c4:3c:30:ad:33:46:f4:
6b:b8:b3:9b:31:91:2d:2b:e4:18:0c:3f:09:da:4d:
9d:a4:6c:f6:fb:66:4a:63:a5:6e:f6:fa:f6:fb:bd:
be:cf:9e:99:75:ce:bd:89:85:23:e6:f3:f3:19:d9:
fa:fb:82:c7:8c:d3:93:9d:a8:bd:29:10:fc:e6:24:
cb:e8:6b:da:6c:5d:a6:40:2f:13:78:74:6f:80:f9:
6d:60:d8:b7:a7:31:0b:7a:b0:a0:13:22:70:1e:c4:
c3:81:c5:24:ae:fb:3f:9d:3d:be:00:31:48:a1:fd:
d6:b7:a0:10:6c:10:32:53:20:e0:a9:be:ee:5e:82:
03:3e:24:7c:e2:ce:86:dd:9d:bc:cb:5e:ae:a6:ab:
7f:07:e8:4b:da:d3:84:ed:49:4b:46:e8:09:3c:b6:
7d:a2:ee:68:65:88:18:1a:6d:bf:76:4d:e0:52:85:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3E:3F:47:48:20:2C:96:A6:1F:E3:02:FA:7B:8F:64:A2:AC:51:33
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:14:c6:1e:e3:6c:8c:bf:33:e4:7d:52:46:7b:17:5e:1c:d0:
15:85:f5:a5:6f:0e:11:2e:db:10:c2:84:53:df:9c:c0:fe:64:
09:19:fb:69:10:50:23:f4:2c:78:43:f7:f9:16:e1:03:46:15:
59:a2:d9:00:49:33:bc:22:d5:a0:59:cd:b1:a1:6d:45:87:c0:
b7:2c:4c:41:e7:e0:85:bb:74:fb:8b:0e:17:a2:33:94:65:50:
20:14:9d:c5:64:a7:30:f0:47:64:99:ab:5e:dd:99:6a:1e:29:
76:21:9f:49:9e:82:fa:79:2c:94:52:70:68:87:80:bd:01:20:
a3:85:fc:dc:a4:92:b2:88:01:02:e2:0d:78:45:3e:83:d6:c0:
be:b8:0b:0b:d0:53:7e:fc:5a:bf:9e:a4:52:a9:aa:c6:63:da:
a3:73:fc:91:e3:92:f4:0a:2f:c7:22:d3:41:e3:ab:47:ff:72:
12:72:d6:8a:78:6d:6e:0f:ce:b5:cf:93:8e:a2:34:b5:2f:6a:
7b:99:f6:f1:0e:8c:58:77:b6:de:98:44:db:61:43:30:21:64:
df:ec:41:92:aa:f3:71:42:18:b1:11:cf:67:89:c0:01:68:49:
20:09:1d:9b:3b:8a:e0:c8:f8:c3:5e:2e:f1:7b:73:0f:fd:8a:
7b:41:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:52:16 2026 by rpki-client