Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft (raw, json)
Hash identifier: VOlju30tz6YQvqpXeOC7OmfaxxOrKkXNzmFvXnmkyZI=
Subject key identifier: 20:12:40:53:54:82:11:8C:69:28:38:B6:DE:0F:34:19:FB:68:77:2E
Authority key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Certificate issuer: /CN=43a438813750133e55001bf89670a0db3ae5be1f
Certificate serial: 01A12353B2334584FACCB828C3B5B2A26C90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 01:00:50 +0000
Manifest this update: Sat 10 Oct 2026 01:00:50 +0000
Manifest next update: Sun 11 Oct 2026 01:00:50 +0000
Files and hashes: 1: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl (hash: 52zYnn6QEYP4T0xg46mr1lXO/1pib6YfrumSEy9MXj8=)
2: TooDCGrMmE8TWOWnC74K3nWuV3A.roa (hash: GIzJZl3HOD2NAFRpAxSwsyFue5zuRGFN1EKt60XvdLE=)
3: _Fbs2myjlyXM3gZy6ijAia4ZHT4.roa (hash: 8ZiAikGkRwLzcArbFm/2YKSLA5m5mnQdWj1FO5Wjvcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:23:53:b2:33:45:84:fa:cc:b8:28:c3:b5:b2:a2:6c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a438813750133e55001bf89670a0db3ae5be1f
Validity
Not Before: Oct 10 01:00:50 2026 GMT
Not After : Oct 11 01:00:50 2026 GMT
Subject: CN=201240535482118c692838b6de0f3419fb68772e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7f:de:cf:bc:6a:e9:28:5c:3c:9b:0d:23:96:
11:87:8f:ab:1f:85:a6:6b:e8:52:c3:d9:c6:46:3c:
41:72:aa:a0:07:f0:0d:3e:dd:aa:45:1a:f7:1c:94:
51:37:86:99:bc:9e:b8:c4:f9:dd:89:63:5f:c3:02:
9e:d1:da:89:2f:6a:7b:bb:d3:7e:3d:96:ef:fb:f3:
5f:ca:e8:a3:fe:f0:17:3d:81:ac:da:2c:23:40:7d:
f0:b5:7b:1a:a3:81:25:03:fa:0a:6c:44:65:56:10:
75:b6:01:40:84:2e:bc:c7:49:d7:93:ce:e0:4c:99:
c8:21:11:87:13:4d:96:65:7b:40:ea:3d:26:63:dc:
da:d0:55:8f:fd:b2:15:28:85:45:36:66:84:8c:59:
1e:7d:68:37:64:af:dc:8f:7c:aa:ff:be:e4:cf:e1:
21:63:c2:2b:55:b5:2d:21:55:05:09:46:df:9c:5e:
ee:d4:01:22:bf:45:06:e6:b9:94:6a:64:38:66:cc:
0e:1e:74:00:f6:94:f5:c2:93:c5:a7:fb:d9:8c:cf:
97:ee:3f:1f:80:43:93:59:0a:6f:e3:c8:70:b2:c7:
4f:ba:61:e2:91:eb:e7:66:eb:f0:ad:ac:16:5f:1c:
0b:99:62:45:76:8a:8e:5c:f8:4b:85:07:84:ac:77:
93:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:12:40:53:54:82:11:8C:69:28:38:B6:DE:0F:34:19:FB:68:77:2E
X509v3 Authority Key Identifier:
keyid:43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:0d:09:97:f2:53:47:97:1a:07:c8:1b:4d:84:ab:f2:10:1c:
01:de:91:a4:d8:38:2f:9a:8f:45:52:3c:b1:64:c5:7c:4a:af:
1f:57:02:39:bc:73:50:2a:73:67:8b:a7:04:f4:ed:06:0c:df:
b7:75:1c:29:fd:95:3b:67:94:db:ed:a0:f7:a8:f8:37:de:dc:
78:f1:ce:bf:e1:22:b7:4d:8e:c9:66:62:38:f3:6f:9b:a3:73:
f1:c8:d6:fd:f1:01:55:7d:0a:d7:ed:4d:81:ab:d4:92:7f:ec:
71:46:c6:d1:59:df:df:48:c9:a8:36:25:03:aa:63:c3:3a:48:
4e:a6:69:96:7d:80:07:6b:92:ee:2a:70:ae:f5:84:20:a2:78:
7b:ae:2f:5a:31:21:52:2b:0d:cb:f7:f8:84:49:b8:64:09:a5:
3e:21:4a:19:43:63:09:f6:98:a7:60:01:8a:5c:0b:07:3c:47:
a9:2a:df:05:e6:d4:10:9e:ff:4c:5c:46:3e:1e:c6:48:28:77:
0f:a3:36:84:e1:c3:62:b3:e4:30:a8:82:28:ee:4c:f9:aa:14:
8a:b9:05:0a:c8:4e:7f:1e:71:7d:ad:3b:a9:57:d6:4f:9f:21:
6d:25:26:c7:f9:fa:13:0a:a2:15:cf:ea:e7:98:99:52:ab:27:
00:2b:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:34:52 2026 by rpki-client