Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
File: qkHqzdOJUCmcnoEKOen_VCnL4lo.mft (raw, json)
Hash identifier: gypgnoOPEIHkbDO8bOdSVEwACsevvhc5hPq0CEA6yx0=
Subject key identifier: D5:62:3F:59:BF:D7:A5:90:0C:B4:87:AF:24:A0:8E:4F:51:43:F8:F6
Authority key identifier: AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A
Certificate issuer: /CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
Certificate serial: 01A0E174AB1610FD45FBCCEC1636A5C8391D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:54 +0000
Manifest this update: Sun 27 Sep 2026 06:01:54 +0000
Manifest next update: Mon 28 Sep 2026 06:01:54 +0000
Files and hashes: 1: aMJy9IeANZbYVL8CAtiHgm0xoqQ.roa (hash: E4M6mEfejQMjX8Zwy4Poh/25Qtop8e+0EXBl1KbNADM=)
2: qkHqzdOJUCmcnoEKOen_VCnL4lo.crl (hash: /TUYleTouUez5yTlJxkSUqygNiMMZLXp/y1fgK17lxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:ab:16:10:fd:45:fb:cc:ec:16:36:a5:c8:39:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa41eacdd38950299c9e810a39e9ff5429cbe25a
Validity
Not Before: Sep 27 06:01:54 2026 GMT
Not After : Sep 28 06:01:54 2026 GMT
Subject: CN=d5623f59bfd7a5900cb487af24a08e4f5143f8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c2:a0:87:8e:a1:04:a4:bd:6e:de:18:1c:9c:
52:30:99:f2:cf:24:9d:fb:69:eb:66:20:0d:3b:50:
8c:62:cf:e4:ab:b4:9c:21:7c:bf:9b:a0:a0:50:b2:
dc:2c:06:3d:3c:59:d8:80:3d:9f:b7:f6:a3:22:1a:
5b:43:a2:fd:c3:0d:af:bd:4b:03:64:38:80:32:ae:
23:c3:66:ac:d4:95:12:2d:06:3b:76:c9:4e:e9:1a:
e1:75:39:e6:40:24:ae:18:33:a9:b3:0d:2f:59:75:
ea:76:2f:20:56:23:0e:b2:89:24:7f:6a:79:5c:98:
6e:6a:d9:46:fd:47:c6:40:e3:73:df:b2:dd:ba:bd:
f2:f3:2d:57:7b:df:a3:a3:d5:95:d9:b4:e1:3a:28:
19:c8:9f:2e:cd:d9:26:10:eb:c9:26:57:54:d1:00:
7e:f2:b7:83:bb:5a:81:55:7a:48:51:05:8f:ff:30:
2c:40:2c:19:ee:08:76:f2:12:0c:8e:e6:d2:4d:20:
3e:69:91:2c:e0:9a:ef:0b:bd:18:8f:7b:15:a9:cf:
ce:08:81:f9:f2:17:6c:f1:f8:ca:6b:e4:8b:07:ae:
64:8e:de:3e:01:a0:b1:3b:db:49:b3:c4:0f:ff:11:
03:32:31:8d:bb:c0:80:b5:38:15:19:64:93:4e:36:
71:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:62:3F:59:BF:D7:A5:90:0C:B4:87:AF:24:A0:8E:4F:51:43:F8:F6
X509v3 Authority Key Identifier:
keyid:AA:41:EA:CD:D3:89:50:29:9C:9E:81:0A:39:E9:FF:54:29:CB:E2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkHqzdOJUCmcnoEKOen_VCnL4lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/353282-53e2-46a2-8fc4-41d49a8ffc81/1/qkHqzdOJUCmcnoEKOen_VCnL4lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:a2:d3:8b:9b:6b:3e:97:59:55:0d:be:78:86:9d:9d:73:43:
b4:8b:1e:48:f3:f0:a6:bf:62:27:71:d2:78:d9:3c:14:91:09:
74:7f:5d:cf:f5:21:81:de:2c:7c:26:1a:7c:1b:f6:85:b1:79:
06:f6:b6:4a:1c:2d:a0:b9:aa:bf:c7:f7:f9:45:83:a2:eb:35:
f2:67:54:a6:b0:5d:4a:27:db:26:43:4a:11:60:24:52:91:e8:
60:bc:ee:f9:f6:4d:a6:46:4b:ee:74:f6:d4:e6:a7:e3:11:b6:
cb:b3:cf:24:63:81:c0:13:b1:17:40:f7:20:ec:3a:29:f7:5d:
06:94:47:39:80:8c:50:80:c4:c9:a9:99:3c:a2:ee:fb:e8:e6:
8f:c4:b2:03:10:32:ec:83:a5:21:f3:a9:58:11:3f:96:fa:a5:
ee:ff:8c:72:4c:94:cb:de:f7:cd:5e:6c:f0:f3:47:99:27:14:
f5:e0:ab:e1:ab:0e:18:14:ee:a8:4f:c4:d8:1c:ec:08:9c:6c:
61:9c:9a:3d:f7:c9:79:a3:f4:0f:11:ce:99:da:c9:4a:f5:a2:
ed:36:08:f9:4c:df:80:6e:02:f1:ef:cd:08:3f:31:22:4f:5d:
f5:bc:5f:f4:37:26:0c:0b:35:98:78:25:52:25:c8:a8:41:6b:
55:79:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:34:12 2026 by rpki-client