Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: UKxxrpk0ZvfPLf2eYgkHxH0Ib2M1vfb8Qw3tuBqp60E=
Subject key identifier: 5F:4B:58:69:86:14:05:00:8B:F7:76:9D:0D:C2:22:84:78:85:4B:76
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 01A0E81CD2AC50154BA09FFADC7E693FCB07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1A0D
Signing time: Mon 28 Sep 2026 13:03:17 +0000
Manifest this update: Mon 28 Sep 2026 13:03:17 +0000
Manifest next update: Tue 29 Sep 2026 13:03:17 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: VKg3smeTkBLGvcRiE+nLXQVtfn02qRWdi03GJh6ZIp4=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:d2:ac:50:15:4b:a0:9f:fa:dc:7e:69:3f:cb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Sep 28 13:03:17 2026 GMT
Not After : Sep 29 13:03:17 2026 GMT
Subject: CN=5f4b5869861405008bf7769d0dc2228478854b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:13:0e:20:be:53:37:7e:02:6d:1c:f8:64:4f:
bf:48:69:e9:b2:a6:53:3a:0d:32:67:0a:11:77:62:
dd:d4:3a:24:7d:3f:88:0b:a9:bf:b6:8a:e0:9f:73:
fb:3d:fb:b7:29:22:9b:c5:25:8d:4b:b1:43:25:60:
1d:47:14:25:be:e2:f6:4c:28:5c:89:8e:bd:4c:ef:
c0:a5:62:77:19:7d:31:5a:06:36:25:2d:db:03:43:
d2:6f:25:04:4e:6a:e5:d5:a5:a4:b8:72:9d:2a:fe:
5c:f4:b3:7a:1f:bc:63:b4:14:f0:4f:21:31:96:4b:
29:0a:f6:7b:d1:0d:6b:29:30:47:f1:d5:d1:4f:52:
28:73:69:6f:09:78:6b:9e:19:e7:94:96:ef:20:f3:
6b:69:9c:f1:8e:28:6c:84:df:28:2e:0b:2c:3b:ff:
f0:91:70:ba:97:4b:12:5c:e4:b9:7c:13:a7:05:c8:
24:f9:87:91:74:9a:38:7b:c7:61:19:f0:d7:de:e4:
de:18:e0:a0:48:37:13:d7:8f:c7:3b:1c:80:4c:d5:
63:ab:e6:5c:5b:5d:53:98:66:65:0e:11:2e:44:8f:
b8:97:fc:d2:5e:05:e1:3f:f2:b5:53:fd:7d:a7:66:
04:59:0f:14:68:d2:a9:70:08:73:2c:37:b2:ba:81:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4B:58:69:86:14:05:00:8B:F7:76:9D:0D:C2:22:84:78:85:4B:76
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:27:52:fc:11:d2:0e:16:a7:6c:d8:b9:23:78:1c:2f:2d:57:
8c:7a:67:8f:73:a5:4f:0c:9e:30:5f:8e:c0:1e:66:fe:f5:39:
0f:e7:49:60:f7:4f:e1:2e:1e:3f:87:82:a0:9b:fb:e8:fd:40:
d0:bd:78:89:87:af:ce:5c:9c:73:1e:9f:cd:3e:c5:f6:d1:c8:
14:8f:13:61:9a:a5:b1:37:7d:b8:bd:16:61:fe:7e:05:37:27:
3b:e2:89:e9:b4:6c:95:6d:38:fc:ce:37:13:91:fc:4a:0f:26:
f8:27:0a:64:e4:13:9b:90:a6:ae:82:ce:fb:ed:91:e3:26:55:
8b:ad:cc:6a:91:39:2d:35:9d:d9:30:12:29:39:4d:98:54:73:
7c:8e:cc:9b:4b:6c:6e:ee:f2:68:34:06:80:ce:21:cd:e8:41:
e2:65:25:a2:61:d2:e6:fc:34:97:51:51:df:8f:09:da:f3:81:
3c:1a:0a:63:89:86:88:d1:1b:45:75:f7:55:c5:ce:05:f9:54:
11:d0:9b:53:32:2a:eb:c7:8d:4e:cf:2a:53:d9:23:27:44:c2:
a3:54:48:b0:01:67:51:5e:d9:1e:40:14:2c:07:d7:b4:03:c4:
49:48:2d:13:48:08:43:a3:3b:16:b7:9e:f5:92:5d:44:de:1f:
25:f3:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:12:52 2026 by rpki-client