Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: +U8q6Fxp7durAdNUtkNhXI70E2n5EPMRieSNnbzU3QU=
Subject key identifier: 1D:6D:92:F4:39:AE:4A:F8:9B:7A:E8:FB:02:68:E8:BC:88:53:DC:A4
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 01A0E43E552859C24A621CDE5E77E7A0C0FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 10C8
Signing time: Sun 27 Sep 2026 19:01:25 +0000
Manifest this update: Sun 27 Sep 2026 19:01:25 +0000
Manifest next update: Mon 28 Sep 2026 19:01:25 +0000
Files and hashes: 1: RGHMhabHZkPW5wXprVh6WUeUNEU.roa (hash: aWxpktwD4HwK4DqUq/i3jSDZlGsjYGbb6rrk+6zxpz0=)
2: hW9pmZmoOAPv4EQxUHQXTXDJr6s.roa (hash: mjwhxdNEgH8aH/IfZWkqyz4fW356i+YVNu/YE2e6m8A=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: 2xoTS3/B6EAQNLwhgqUOWYPrzCC/Dbz5pJ+SgGdsJqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:55:28:59:c2:4a:62:1c:de:5e:77:e7:a0:c0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Sep 27 19:01:25 2026 GMT
Not After : Sep 28 19:01:25 2026 GMT
Subject: CN=1d6d92f439ae4af89b7ae8fb0268e8bc8853dca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:b8:59:f6:74:30:52:16:20:d1:f8:9e:2e:
54:55:69:b0:45:2a:02:9a:3a:9e:e6:d1:df:d6:6c:
4c:54:3e:95:6a:69:57:62:f5:1d:d0:6a:2f:c5:8a:
97:5c:81:44:02:3f:43:6e:52:5e:5e:59:91:39:3a:
99:f2:1e:54:a9:88:1b:37:0c:4f:5f:9f:6f:55:49:
ee:d0:ca:0d:45:09:3b:34:da:ad:b3:42:ca:99:6f:
0b:d1:c6:46:00:b5:df:fb:64:bc:05:18:4c:42:30:
03:12:10:ed:c7:57:e8:8c:0d:9f:16:d2:b0:a6:ee:
b9:95:a4:c5:86:e5:49:77:59:99:04:44:9a:0e:e6:
8a:2c:3d:4d:2b:9f:83:f8:6e:2a:a3:b1:91:cc:38:
91:cd:ab:70:9d:24:94:6a:10:4f:61:5f:cf:ed:25:
81:8e:1a:3b:85:cc:21:c4:7e:a6:30:1a:fd:5f:c0:
f9:56:7a:fe:f0:ec:ed:87:c3:81:07:5d:7c:83:c2:
76:db:00:62:af:c1:1c:5d:8e:ae:07:9f:6b:c1:8e:
d8:6e:6d:24:25:80:5a:bf:8b:df:73:42:ea:be:65:
e1:27:02:2c:bd:02:b3:d4:24:9c:9d:3e:8a:f8:f1:
51:67:35:d9:60:1b:be:34:7a:8a:35:a7:2e:51:25:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:92:F4:39:AE:4A:F8:9B:7A:E8:FB:02:68:E8:BC:88:53:DC:A4
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d6:0f:83:ae:2d:14:3f:67:0f:ce:e9:d5:a8:40:c5:bc:c3:
2e:7d:af:66:ee:59:41:07:19:b5:4a:57:89:9e:75:f9:09:67:
51:31:4e:8f:e4:84:42:28:8b:73:dd:b0:2a:bb:92:c3:3b:ce:
26:1e:83:8e:f7:35:44:0d:1b:48:f4:11:25:0c:0e:69:08:ff:
cb:03:da:be:84:bd:43:16:7f:c1:f1:6a:d6:70:c9:5f:60:fe:
ca:e8:a9:50:65:5f:5b:e8:a8:83:e9:a9:3e:ed:44:8b:5c:bd:
19:49:4e:d0:8e:84:7c:80:65:f6:57:ca:4f:c9:d4:a1:b1:62:
b2:9b:c1:35:65:ef:71:88:5c:25:00:06:6f:bf:96:05:65:35:
da:a3:19:2c:2c:c2:93:ca:3d:05:6d:06:d1:34:6e:c9:a2:96:
84:e7:9d:80:a5:1e:f5:57:82:da:d7:a9:9b:e8:87:29:a8:51:
62:99:3f:4c:9a:9a:28:91:24:89:30:03:24:df:6e:7b:78:7a:
6e:95:0e:30:d7:14:85:36:af:16:dc:29:8b:fe:f1:26:7f:db:
83:08:f7:6f:5b:b1:21:5a:0f:e1:7a:8c:11:eb:40:d5:2e:75:
8d:e9:f9:41:1e:45:de:eb:0c:0e:2a:87:81:0c:1d:e4:9c:f9:
1e:17:b2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:20:57 2026 by rpki-client