
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
File: qlTEdj6gGMPccCA9BO_nH9SxsGY.mft (raw, json)
Hash identifier: na3XlGTphz/CI+mqrH+KKwmnpjDEwXqq9yriTfOJfhg=
Subject key identifier: F6:6B:99:DD:14:BF:C8:79:2D:F7:44:E3:CF:89:E2:9F:E4:FE:25:93
Authority key identifier: AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
Certificate issuer: /CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Certificate serial: 01A0C8FCE9117ECB4CCCEC3ABF04034CFA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
Manifest number: 1747
Signing time: Tue 22 Sep 2026 12:00:12 +0000
Manifest this update: Tue 22 Sep 2026 12:00:12 +0000
Manifest next update: Wed 23 Sep 2026 12:00:12 +0000
Files and hashes: 1: bZqOUIU_1IqMOnS3XXUrS60GrpM.roa (hash: LFmDzSYfJ7mk0ygK5bmtim3i/wVzAaEknmN17hltFu0=)
2: qlTEdj6gGMPccCA9BO_nH9SxsGY.crl (hash: 3nTkcFByL+UjqflRBz9TwmU260tvEzOC2MxBxDQUN5U=)
3: qxRVneBb_uUd_NsM3Vb645rM-7A.roa (hash: G6Y/r+hYk+mMByjpNJdV1U1ctvTf0yt3EQ8Sq5betwQ=)
4: sPMgSkKer_29geM5-1T1-keLLGw.roa (hash: 4QbBQJWJYkQw7XP4lLebE7Woxf8+43i+sSWLrzO/9j0=)
5: tP-zd4fvUG5Ghj_hj4jy-iA0H5M.roa (hash: dncyiHvUZh8Otlmg0Vs+Wpy7Azdi/J7dNn/2EsRGlWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fc:e9:11:7e:cb:4c:cc:ec:3a:bf:04:03:4c:fa:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa54c4763ea018c3dc70203d04efe71fd4b1b066
Validity
Not Before: Sep 22 12:00:12 2026 GMT
Not After : Sep 23 12:00:12 2026 GMT
Subject: CN=f66b99dd14bfc8792df744e3cf89e29fe4fe2593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1a:ef:e9:4e:8c:68:af:c1:9c:16:42:4a:68:
78:16:0a:4a:65:66:75:8e:88:58:f7:4f:cd:a0:7e:
c4:3d:88:9c:2f:9f:e8:e3:c0:42:e0:61:44:87:6d:
79:e9:af:2e:d1:65:57:f4:b8:30:0f:b5:e0:bd:84:
bb:5c:7e:9c:bc:db:2e:41:a1:fb:9a:22:69:0b:89:
57:3d:57:c4:4a:f0:76:57:0c:c3:68:91:b6:dd:15:
e7:46:33:3e:2c:ae:60:60:d6:67:56:2e:1f:0b:30:
8b:47:af:10:b7:23:1a:f9:7c:d5:84:e6:8b:69:d0:
77:47:6f:59:76:67:a8:ee:5a:58:ae:b6:27:b2:f7:
f8:74:48:69:03:c4:89:91:e7:31:c1:80:57:9f:12:
07:6f:b3:2c:d6:26:64:ff:4b:38:36:41:ec:a4:54:
75:65:b7:a4:f5:ec:4e:8a:4f:7d:7f:f0:c9:c6:a6:
02:ac:0b:8d:86:bc:7b:7e:6c:60:08:b5:60:31:0b:
ef:9e:dd:28:3d:db:c7:06:8b:85:d2:49:f3:44:58:
92:ea:5a:88:19:a7:f5:6c:cb:ce:36:25:6f:4c:79:
c8:df:43:b2:b9:10:b0:03:1c:88:d3:cd:74:b3:9a:
d7:0d:4b:c4:92:8f:3e:d0:7b:fe:e7:5d:ff:00:5e:
51:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6B:99:DD:14:BF:C8:79:2D:F7:44:E3:CF:89:E2:9F:E4:FE:25:93
X509v3 Authority Key Identifier:
keyid:AA:54:C4:76:3E:A0:18:C3:DC:70:20:3D:04:EF:E7:1F:D4:B1:B0:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlTEdj6gGMPccCA9BO_nH9SxsGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a21c9e-87f1-4983-8394-de37673c409c/1/qlTEdj6gGMPccCA9BO_nH9SxsGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:be:0d:f4:ea:3a:11:c4:1e:02:db:60:8a:26:7a:9a:de:a3:
3c:1b:3b:ea:b2:2d:59:25:86:53:97:84:bd:b9:4a:61:2d:2a:
6b:82:d7:75:62:20:a1:f1:aa:84:30:8b:46:a6:bd:97:55:7e:
0d:c1:a9:fe:7b:40:eb:a7:4c:49:25:3d:f1:1c:b8:4f:93:db:
04:6b:af:e3:9d:23:c6:e5:9c:a8:ae:0a:bd:7e:88:77:8e:2c:
ce:5b:08:c8:0d:05:91:b1:af:a2:85:e5:3c:90:39:25:86:80:
76:a4:73:6a:37:14:d1:43:62:51:84:c4:1b:e2:63:80:2e:3a:
05:4d:80:51:3d:d3:c2:73:d2:8f:84:4a:d8:4b:a1:0b:15:e7:
04:7d:d3:e0:95:b6:1c:b4:87:3f:00:cb:ee:39:f8:ed:95:6d:
2f:76:9e:d6:2e:82:24:5a:84:d3:72:69:90:92:ac:0d:dc:1c:
f3:20:aa:cb:02:35:db:45:f8:8f:e2:19:59:7d:de:81:9e:aa:
3f:1b:5c:09:3e:84:e8:83:b8:75:dd:8f:74:1a:71:0b:d7:44:
76:16:c8:87:6d:eb:bd:d7:26:e5:ec:a2:f8:2d:f8:cf:b6:32:
22:6f:c1:ed:03:be:45:eb:d2:8a:75:cb:a4:63:67:01:8e:73:
fc:a1:96:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:05:22 2026 by rpki-client