Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File: qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier: pV5q/npz4cD+lZaA0MHs4qHMg/9CkUi/RlNkIJzo1uY=
Subject key identifier: DB:BA:96:C9:7C:EF:0D:51:E6:99:47:E0:59:3A:8B:CB:56:75:F9:25
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 01A0C8598D89BFEB15D06607560758B2BB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 09:01:47 +0000
Manifest this update: Tue 22 Sep 2026 09:01:47 +0000
Manifest next update: Wed 23 Sep 2026 09:01:47 +0000
Files and hashes: 1: 1Gy5y0l2Z3RJbwpIdwQeXu-S_os.roa (hash: A0SPA20n6txHOLSFN/vzsdzLr5oEp33Xca7U8bJmR+A=)
2: qPlIJlUmNKbCCbrg6KCpFdUY8N8.roa (hash: OvZ+jG+TA2c8r8TRVg+Z8VbBKScMi5fnRQ6Z1I4vZyA=)
3: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: UArAgSKMUX/2SbdtwY+cmYeQP+4A56ZhMexzq+aG9Sw=)
4: vPp50IKlFxgQgBOicGnqoqn1x7A.roa (hash: IdCf0l+lQqi5OboKhySYCzxcGPbYokM1HRRt3wwbKLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:8d:89:bf:eb:15:d0:66:07:56:07:58:b2:bb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Sep 22 09:01:47 2026 GMT
Not After : Sep 23 09:01:47 2026 GMT
Subject: CN=dbba96c97cef0d51e69947e0593a8bcb5675f925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:1d:2e:fa:c5:93:6b:23:21:2f:d9:99:74:
81:f4:2d:cb:38:19:d9:87:5c:d2:92:97:6e:38:39:
de:3c:59:8d:5a:4f:ad:2f:c5:df:8d:99:af:14:4f:
4c:5e:36:a6:33:db:4f:14:e5:e9:9f:14:83:6d:44:
9c:4d:5d:35:26:e7:06:05:a4:b6:11:d2:25:0c:0d:
2f:e8:2f:e8:f0:ab:8b:70:21:88:d6:38:23:f6:1a:
b5:52:cb:0b:9e:ef:6d:13:8b:4e:62:f0:70:35:e0:
fb:35:66:b2:90:1e:bf:42:58:fd:57:7a:4a:87:74:
ef:cc:1c:42:9c:7b:fa:83:4c:8b:e3:87:42:d2:1a:
da:db:dc:85:70:c1:41:d0:bc:a1:59:ee:5c:a0:45:
bf:a8:40:11:33:15:99:0c:77:37:8a:3a:70:b0:3f:
a7:88:02:76:00:2f:e5:f8:04:24:65:fe:ca:69:a5:
85:2e:eb:20:7d:29:a2:cf:18:4a:e7:82:e2:a8:05:
12:5e:c8:98:f0:52:33:99:07:2d:7f:86:d9:f2:79:
3f:a7:e0:d0:0a:23:99:3d:bb:88:26:6d:c8:b3:d2:
2a:3e:38:c7:6f:6c:59:61:51:d4:87:fb:80:4f:2c:
2e:96:3b:1e:f9:30:dd:2e:9f:6e:37:10:e9:7e:c9:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BA:96:C9:7C:EF:0D:51:E6:99:47:E0:59:3A:8B:CB:56:75:F9:25
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b0:9f:84:e1:35:0e:59:17:fd:db:46:a4:f4:af:d3:14:70:
0c:9c:0a:30:a1:41:22:ef:1e:bf:45:61:27:3e:6f:e6:b1:89:
0a:a7:90:05:9e:1a:d7:49:59:d9:c5:73:31:44:54:ab:ca:7a:
c3:b0:46:f1:5d:89:c1:f8:e5:b8:5c:1e:70:e1:cf:fd:f7:08:
8f:1a:a5:70:5d:11:76:8c:85:66:49:15:7b:ec:b3:91:f5:4d:
96:82:bd:0a:d9:16:b9:5d:b6:91:dc:f1:2d:88:ed:c3:14:13:
93:d8:b2:7c:80:25:72:ab:e7:75:b7:5d:80:1d:a9:ea:79:d4:
43:85:e9:36:30:48:93:f3:f7:8f:8e:37:98:e9:0c:fe:44:9e:
07:94:4b:03:2b:5a:04:65:ba:3d:6f:d2:bf:39:16:19:a6:65:
4e:8c:eb:fb:9a:30:01:65:13:b2:ef:8d:6a:68:7c:46:34:95:
fb:60:e7:e1:c9:94:76:76:a3:ef:1a:41:da:39:cd:d9:8a:50:
04:e7:45:54:35:bc:96:84:c1:0e:eb:82:e6:88:4e:29:86:be:
ca:9c:e1:c2:cc:0a:7e:26:63:18:84:e5:85:b6:2a:5c:1f:d2:
47:5c:05:a3:71:09:e3:35:3d:a9:44:bf:f2:8a:94:65:79:e1:
d6:71:87:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:31:04 2026 by rpki-client