Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: HUMA5FiKRzImFK4TNgzUZzwY80mUvdiH0euSVseYJoA=
Subject key identifier: 67:0E:FB:53:1F:C4:88:5B:0A:BA:24:E1:E5:10:D9:48:28:CC:65:BF
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 01A10324E256A361394146CDAC54E8753C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 16F7
Signing time: Sat 03 Oct 2026 19:01:51 +0000
Manifest this update: Sat 03 Oct 2026 19:01:51 +0000
Manifest next update: Sun 04 Oct 2026 19:01:51 +0000
Files and hashes: 1: 13KLyP6gZAyfsLYlKYob4QTrBOY.roa (hash: UC903c/BhGuwxFubD7WJePOBlwZE5lZusD52hX3+scI=)
2: JDIQvJOOgOU1198oLwbvPRw_rhI.roa (hash: ULh5noQt/vxcOhnB+/7fGlpNTGaGPtsJ4TS11neT8M4=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: VHVI8OCoUxjUzOCX/SbIBC0gwF9gJHF6o0TLdWZgvWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:03:24:e2:56:a3:61:39:41:46:cd:ac:54:e8:75:3c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Oct 3 19:01:51 2026 GMT
Not After : Oct 4 19:01:51 2026 GMT
Subject: CN=670efb531fc4885b0aba24e1e510d94828cc65bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:01:3c:b3:ee:db:c1:a6:54:44:e7:50:73:ea:
58:c9:5a:0b:88:21:09:4e:9d:b0:86:3d:29:06:fa:
7f:ff:e3:03:d5:6d:29:bf:85:3d:f6:18:22:f7:33:
c2:53:83:ce:d0:c7:6b:b3:03:3a:67:b7:8d:90:f1:
53:5a:a8:60:7f:ab:e3:33:10:50:dc:e4:2a:ff:c9:
cf:64:80:0c:5f:0e:51:83:f1:68:6f:99:28:2f:57:
2b:9d:85:52:67:3e:12:de:2a:84:9a:36:d9:09:2f:
7c:ab:aa:dd:67:57:45:6e:54:8a:05:88:16:d6:d4:
fa:24:6a:02:00:d7:f6:b9:81:f2:18:7d:a5:55:73:
61:4c:4d:2c:c0:2b:15:d6:88:cd:b8:6b:2d:bd:6c:
ab:86:ee:6b:65:40:25:2d:3d:bd:21:c4:3a:96:3c:
03:ef:86:e7:a0:1a:fa:0e:d1:6a:14:c7:1d:b4:70:
6f:de:0f:a5:a0:24:c8:9e:1f:17:e1:c6:72:5c:58:
45:0f:82:22:ab:44:e3:26:05:ae:52:97:e1:41:c0:
49:f9:83:b9:fd:7e:0e:c4:98:5b:a1:d1:04:a0:ce:
2b:dc:e4:c8:4e:8d:3e:a3:b7:5b:dc:69:22:77:24:
1c:a9:ef:17:c3:cf:e0:b2:17:42:f7:22:d3:21:93:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:0E:FB:53:1F:C4:88:5B:0A:BA:24:E1:E5:10:D9:48:28:CC:65:BF
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:88:03:37:00:0d:f2:12:b1:9d:d1:d3:0e:5e:6e:e7:ef:fb:
d5:1d:15:e6:15:42:ad:92:8e:9d:d6:5c:ab:a7:94:91:67:02:
69:55:35:c6:dc:e6:bd:4d:d3:2b:78:78:d6:85:e3:f5:a1:1a:
70:cc:fa:fb:fe:ad:fa:fb:d2:a5:34:95:60:7e:45:8f:51:a0:
03:8e:e6:00:e5:ae:85:b8:85:fd:06:92:89:c2:e1:bf:4d:17:
6d:34:05:73:9b:e4:b8:a4:7b:e3:b1:7e:38:6f:86:f6:e0:fe:
b7:32:e0:66:12:cb:7c:2d:83:18:e6:bb:5c:52:fd:80:75:93:
65:0c:dc:e1:17:1c:f9:5b:94:38:5c:e5:0e:5b:2b:e5:0b:76:
08:91:cf:16:ec:ba:93:a2:77:93:64:02:b8:1b:99:c8:b0:bf:
6f:fc:9d:30:31:f2:61:33:8a:3f:b2:e3:8e:45:8f:30:f5:6a:
51:ac:8a:67:25:74:49:f3:6e:aa:2f:1f:c7:63:e3:f7:09:f0:
6f:1a:eb:fc:e9:fd:e6:fb:9c:f1:76:a7:d5:f1:4d:a6:30:e1:
c1:60:7f:0e:37:fc:56:b4:47:b0:6e:8e:d1:8d:15:a7:bd:59:
87:91:ac:eb:e1:d7:90:39:11:49:02:46:f7:5a:44:60:99:16:
6c:77:6c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:11:57 2026 by rpki-client