Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
File: qlemjwii4wun1z1EyabiQA_Qo7E.mft (raw, json)
Hash identifier: EHk/+La4ep47Agn8SdB0T/A41l85tQgGml88XBlORNs=
Subject key identifier: 7A:27:08:CA:19:4B:D0:D3:0E:1A:B4:AD:90:AF:21:81:F9:2F:1B:F9
Authority key identifier: AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
Certificate issuer: /CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Certificate serial: 01A0D804D3C68993BDE9986A58815EA2B069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
Manifest number: 0C47
Signing time: Fri 25 Sep 2026 10:03:09 +0000
Manifest this update: Fri 25 Sep 2026 10:03:09 +0000
Manifest next update: Sat 26 Sep 2026 10:03:09 +0000
Files and hashes: 1: 6ixSBAJQlI9QTdVaxkNUntZMsmE.roa (hash: md0a0a+udrQg7g7OFxeWWB53q44wWyhdageagzGFqqY=)
2: qlemjwii4wun1z1EyabiQA_Qo7E.crl (hash: mKnaUeJarj0+BsqOwIKs+o9/eMPc8S+iRhlaapwnEfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:04:d3:c6:89:93:bd:e9:98:6a:58:81:5e:a2:b0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57a68f08a2e30ba7d73d44c9a6e2400fd0a3b1
Validity
Not Before: Sep 25 10:03:09 2026 GMT
Not After : Sep 26 10:03:09 2026 GMT
Subject: CN=7a2708ca194bd0d30e1ab4ad90af2181f92f1bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:04:c7:ec:98:3a:6b:85:df:d5:c7:2a:87:
a1:fa:d6:60:03:b6:7b:e5:68:ee:d5:fd:3e:20:8f:
12:7d:c2:ad:e2:c5:7c:47:7b:da:18:a0:03:9c:44:
35:11:84:30:3e:75:b1:d8:30:0c:05:ab:e1:23:25:
67:a5:e3:c0:4b:ea:d7:a2:43:9e:1e:c0:10:47:74:
c3:b2:ee:33:f1:61:26:f0:ac:ed:f7:68:32:7d:63:
20:6a:92:36:37:47:40:ca:da:ad:d6:c6:fe:93:f6:
57:eb:dd:ce:2a:34:bf:f2:61:c9:80:30:b3:a4:4b:
e2:37:f6:26:d3:5e:73:f8:e2:b7:a3:5c:b7:1f:73:
f9:1f:62:ee:2c:af:b9:2d:2d:c6:13:c1:83:55:a0:
60:f6:a5:dd:92:11:61:41:93:76:53:75:38:2b:c8:
31:27:9b:f8:46:9a:0c:16:8e:1d:08:64:68:e8:cb:
e5:c6:50:9d:f3:15:5d:41:d0:ae:c4:e1:46:1b:91:
f9:5f:fe:90:56:d6:18:70:53:4e:9e:97:67:38:d3:
f7:0d:06:ae:57:9f:5d:62:bf:b2:bd:1b:ad:4d:81:
d1:00:d6:f7:39:87:a5:5e:d9:8d:80:63:c1:0e:b5:
67:b6:00:8d:87:6d:96:c9:ec:9b:b6:05:4a:40:0e:
be:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:27:08:CA:19:4B:D0:D3:0E:1A:B4:AD:90:AF:21:81:F9:2F:1B:F9
X509v3 Authority Key Identifier:
keyid:AA:57:A6:8F:08:A2:E3:0B:A7:D7:3D:44:C9:A6:E2:40:0F:D0:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlemjwii4wun1z1EyabiQA_Qo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9b7377-d465-46b9-a563-8468e49f00ed/1/qlemjwii4wun1z1EyabiQA_Qo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:24:ae:b7:cf:8f:cc:42:0a:1a:17:cb:5b:9c:f6:35:87:a7:
8e:34:41:7e:f9:58:db:46:07:b1:ab:6e:2f:b5:67:a2:55:57:
6f:fb:9c:bf:25:de:8e:70:68:98:63:7d:92:bc:bc:87:fa:97:
cd:90:ed:ea:f6:90:79:0a:34:98:8d:aa:5d:ed:13:1c:47:7e:
f6:04:eb:f5:24:06:0d:63:da:5d:38:05:11:f1:4b:5d:fd:9a:
07:cf:77:d6:02:25:b4:e5:7e:b1:62:1f:3e:8c:ba:9a:05:46:
53:11:89:e3:73:ba:a1:d2:3e:01:82:05:ac:b7:51:a1:ed:6e:
ab:fd:d3:39:98:ac:e3:1d:dc:28:c3:c1:20:43:4a:f8:97:58:
79:bc:69:2f:83:8e:9b:6c:fe:25:78:ed:fc:18:db:95:32:f0:
53:e4:95:f8:7c:b0:fe:13:44:31:db:9c:95:db:e2:94:5c:b2:
0c:da:f7:18:81:7e:b3:7c:0d:4c:8d:bf:07:f5:c7:70:c3:78:
d5:45:ee:ef:9a:1c:b6:a8:b1:3f:d5:e6:ec:e8:81:86:f8:27:
bf:7e:91:90:03:d9:4a:72:69:01:eb:69:f0:33:fb:66:be:ab:
59:56:31:8a:43:7c:da:81:7f:71:7e:6f:5c:c3:56:62:84:ce:
f9:4b:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:09:57 2026 by rpki-client