Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: 60NHq4pWCQyJkU8oQwjB59YgQRl0LWXbRBa9m9jfutQ=
Subject key identifier: B5:C8:1C:BA:AE:B3:44:6F:78:34:52:3B:FE:64:AC:6D:D9:B2:E5:5D
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 01A0C25615B6EDFD4F6FC0FBC2A32CE08813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 1419
Signing time: Mon 21 Sep 2026 05:00:16 +0000
Manifest this update: Mon 21 Sep 2026 05:00:16 +0000
Manifest next update: Tue 22 Sep 2026 05:00:16 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: gxngzt69ppxfYUMjOxsG7C2t9n52HM6oQI1wTyupTPk=)
2: Fmacp4NY6nEGonmiT-U_xfP1PNA.roa (hash: nMGKz5J/UdppiFPUA3K/6569wtZvBmanoCiwnJ4msoE=)
3: G8ok4WnRssMF_kSU0fMKahJetsU.roa (hash: l43UBskPXl3nXaaaJdzsHUtTJRUjiog9FX+gAeGDp4g=)
4: HXx-9xf840ychc1XFQvrQhYAMc8.roa (hash: wEQlpP9y0gAps6ZTYiJzXEzVVAyiwRr/90bpIEEpgsY=)
5: KdqxPru-n3hoW07_Ia_EY5qo-gs.roa (hash: nHBt8Iolo72XzLdo8e8Ep2RH7UXsZGR1GpAo5yUz4DM=)
6: _G6g6_QnVtIFB_-iAP4mTCvteXs.roa (hash: uAtUHoDLiIbUy1NlipnwKBXuGU0z4c5OSzrv5oTG0UI=)
7: lbA6fkEyToINYPSmlJ-B17hV6T8.roa (hash: RPJR9tlk6PGxFVrIXjpYwQZILEQbLWxfjexbsXGiL+U=)
8: nU05wjCCjQdvD0N5GwShQguLcMg.roa (hash: j/VwIGsTlBAaDg3IJsHet13mXvJWrVOZiHUgffdX7c4=)
9: smJvEGMAn4xu8Scd8dffeO2ae_U.roa (hash: hTRU88LHGp5KUHTSb+P61y5pXqOZZZN6CAlWM8NKLFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:15:b6:ed:fd:4f:6f:c0:fb:c2:a3:2c:e0:88:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Sep 21 05:00:16 2026 GMT
Not After : Sep 22 05:00:16 2026 GMT
Subject: CN=b5c81cbaaeb3446f7834523bfe64ac6dd9b2e55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c0:6f:b5:7d:3f:fb:a0:50:b5:0d:35:1d:0f:
9e:69:82:48:b2:e1:8a:5d:13:ac:10:8c:56:87:a7:
93:ef:e7:87:8e:de:75:6e:4b:ad:bf:65:99:49:7c:
06:28:5e:8e:e4:1b:77:f2:65:4e:1e:63:05:4d:f0:
6a:90:17:cd:81:41:b2:e9:f2:d8:17:01:73:75:18:
91:44:ce:02:ea:af:8f:bf:47:54:72:e1:c8:56:24:
9c:e1:c3:8d:f8:1b:f6:22:2d:0d:27:22:c3:33:59:
6d:ab:77:f6:d8:55:9c:a1:62:01:c2:6e:13:3e:5e:
64:e7:07:21:e3:7d:bf:49:7c:f4:d6:16:e5:88:0e:
26:12:fa:4b:65:57:f1:8b:f2:79:42:eb:1f:10:54:
d2:c6:0d:88:85:ef:52:c1:70:70:30:4d:99:33:34:
b0:ba:76:89:66:92:d6:3d:5c:5f:fd:7d:01:62:cf:
f5:d3:43:ec:2e:8e:c9:d7:1e:1c:f8:3e:cd:a7:92:
3b:7f:a2:13:c0:b5:e8:d2:ed:4e:04:85:d8:77:ed:
3a:3e:9f:9c:93:0b:59:e0:f3:77:2e:c3:ea:61:bf:
f7:78:16:5d:13:54:63:f9:62:0f:be:69:fc:98:7e:
ab:f5:8a:14:28:6c:37:37:d4:d2:4c:73:0c:74:19:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C8:1C:BA:AE:B3:44:6F:78:34:52:3B:FE:64:AC:6D:D9:B2:E5:5D
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c5:db:20:4b:5b:44:d6:b9:fb:5a:67:66:ec:85:56:b5:8e:
90:91:92:4c:cb:1b:02:80:b3:83:ec:55:6a:64:bc:fb:ba:44:
0f:c8:e8:48:8e:f4:66:4d:a6:ca:a7:19:7a:1c:78:15:40:b3:
69:c8:44:01:6f:f9:02:c6:2a:a1:88:97:b3:3f:df:ab:9d:f2:
80:69:4e:24:61:18:fb:0d:ea:21:c1:1e:36:02:c8:2b:dd:fb:
ee:50:68:6f:61:f7:ab:eb:52:22:03:f9:79:e3:c2:e9:9b:ed:
d0:77:87:31:15:56:2c:2e:2b:f9:48:4f:98:6f:b3:6e:cf:18:
e3:11:8d:fd:a1:93:07:58:01:6a:61:0c:b0:52:84:e3:33:28:
9c:a6:40:17:b0:62:7a:52:2f:d7:86:2f:fd:43:71:6b:16:e7:
49:32:90:fa:67:c1:0a:97:95:0b:32:56:52:59:91:f8:c3:a9:
b1:5a:f0:e1:30:67:d7:2c:9c:08:33:69:11:34:d5:52:5c:68:
51:04:bd:5d:6a:f7:71:b3:15:37:6a:88:fa:d2:a3:3e:78:8b:
67:1d:aa:b8:98:b1:fd:52:ed:38:28:be:05:5d:be:96:8b:73:
be:a5:08:6b:43:5b:69:e7:63:1d:a7:03:88:aa:41:38:92:1a:
81:e7:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:40:39 2026 by rpki-client