Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: lYKvtbYWLFz5Ezb/8Ch4w5J31XRlAa9mNS9cl+6vEgQ=
Subject key identifier: F9:AD:62:C3:FA:3B:E5:13:80:88:0B:F8:AF:D7:42:59:36:32:34:F3
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 01A0BE42B7D2539306EB50CC1C8ED309D553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 152E
Signing time: Sun 20 Sep 2026 10:00:38 +0000
Manifest this update: Sun 20 Sep 2026 10:00:38 +0000
Manifest next update: Mon 21 Sep 2026 10:00:38 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: BzpgdkmIS9MLsQCmo0KmcNv5lZV5Ey7Ujkj1MrC3RNI=)
2: CfjqQqpPDnBhH-p0lAIrBIhNgY8.roa (hash: /5wTY3Au8nodbJrzfE4opPFUcgrAfS3BmM1XuaMh8Fg=)
3: SosxbjlFtLu-lsuh4-rF3Rw-rK0.roa (hash: c0C1OZyGN1Qv/oPDh5sJipEydB/aVrMAT59EdQMDAY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:42:b7:d2:53:93:06:eb:50:cc:1c:8e:d3:09:d5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Sep 20 10:00:38 2026 GMT
Not After : Sep 21 10:00:38 2026 GMT
Subject: CN=f9ad62c3fa3be51380880bf8afd74259363234f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:81:c6:aa:f4:00:a3:f2:ee:ff:93:b1:90:a4:
88:61:52:fe:90:b3:ae:32:31:6a:0f:b8:3a:43:96:
02:64:f0:22:d6:7d:a8:7c:09:42:d2:ee:f2:75:55:
97:4c:bd:53:f5:f9:18:39:dd:d9:8d:93:5d:6f:de:
4c:cc:c8:62:23:72:f2:1d:f2:02:84:a5:a4:0e:8a:
46:49:c6:ee:97:f2:98:21:d0:78:ac:16:e2:4e:8a:
35:92:08:ef:78:51:03:4c:3e:b5:02:f5:d1:7f:9b:
a8:c2:bd:ab:79:29:0d:e6:82:8d:bb:86:f1:29:9c:
10:a6:32:7b:60:af:aa:bd:4b:db:eb:3a:92:87:85:
22:ef:dd:cd:31:39:eb:c5:68:d5:b6:4a:e7:a5:78:
62:6f:c7:fa:9d:72:01:01:dc:d7:12:b0:c6:50:ba:
bb:a6:ae:19:69:85:48:bf:4e:3e:2b:ad:e4:e7:ec:
8c:5e:3a:93:67:77:d9:85:6d:36:e2:24:d5:52:70:
3c:3f:e3:c4:b2:22:12:8c:e9:2b:42:31:b3:db:bd:
c1:1e:ef:d0:0d:f0:1e:82:ce:be:52:14:45:b0:cb:
eb:2e:24:54:70:fa:d8:4d:42:49:53:03:0b:ee:16:
bf:cf:fb:7d:2b:8f:d4:fa:d6:ef:ef:38:20:dd:1c:
b6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AD:62:C3:FA:3B:E5:13:80:88:0B:F8:AF:D7:42:59:36:32:34:F3
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:62:bc:36:87:2c:80:72:79:52:a2:06:a1:65:2c:13:57:8c:
e1:f9:45:c4:de:02:92:87:b2:54:ef:53:75:ff:54:ae:81:02:
b5:57:4b:9f:43:59:05:88:7b:32:75:a0:05:2d:72:56:5f:40:
ea:61:20:9e:2e:ad:c8:e0:56:2f:57:99:c0:cf:51:67:43:a0:
94:52:1a:bc:13:e0:80:1b:3a:ac:e7:5f:a1:8d:f2:72:f1:8d:
ea:4c:8d:08:c7:63:98:92:8f:04:1f:59:95:1a:d1:76:cc:5b:
29:3d:22:4f:6e:9d:1f:57:a2:75:3e:8a:90:fe:95:59:2b:7e:
28:01:50:00:ef:8f:2c:06:d4:4a:14:23:ac:ec:67:1a:22:7a:
b2:fe:ca:51:6d:93:ff:9d:d8:36:fe:c6:99:de:12:f0:e0:44:
3a:ee:10:27:03:3b:51:45:80:5b:98:11:df:a4:2d:3e:2a:4b:
f0:e9:a9:65:ac:73:9c:d8:65:b3:c0:26:6a:f4:fe:68:7f:1d:
6e:56:26:f4:60:91:3e:f8:23:0c:21:a8:b1:72:42:45:06:aa:
24:d9:42:e1:2a:66:48:88:78:d3:34:29:4d:a0:bd:48:c7:18:
b2:13:26:62:03:e4:db:f7:0d:25:7e:2a:74:42:1c:b0:bc:a1:
e8:ff:df:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC+QrfSU5MG61DMHI7TCdVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDk2MjAzNWM1ZTk1MTAxM2NhMDY3MGNhNTY5ZTc5Zjhk
NjNjMTUwHhcNMjYwOTIwMTAwMDM4WhcNMjYwOTIxMTAwMDM4WjAzMTEwLwYDVQQD
EyhmOWFkNjJjM2ZhM2JlNTEzODA4ODBiZjhhZmQ3NDI1OTM2MzIzNGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4HGqvQAo/Lu/5OxkKSIYVL+kLOu
MjFqD7g6Q5YCZPAi1n2ofAlC0u7ydVWXTL1T9fkYOd3ZjZNdb95MzMhiI3LyHfIC
hKWkDopGScbul/KYIdB4rBbiToo1kgjveFEDTD61AvXRf5uowr2reSkN5oKNu4bx
KZwQpjJ7YK+qvUvb6zqSh4Ui793NMTnrxWjVtkrnpXhib8f6nXIBAdzXErDGULq7
pq4ZaYVIv04+K63k5+yMXjqTZ3fZhW024iTVUnA8P+PEsiISjOkrQjGz273BHu/Q
DfAegs6+UhRFsMvrLiRUcPrYTUJJUwML7ha/z/t9K4/U+tbv7zgg3Ry2fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPmtYsP6O+UTgIgL+K/XQlk2MjTzMB8GA1UdIwQY
MBaAFNUJYgNcXpUQE8oGcMpWnnn41jwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kNGU4ZTktMGQ0Ny00MTliLWIzZTIt
MDU0YTM2MzExNWY1LzEvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kNGU4ZTktMGQ0Ny00MTliLWIzZTItMDU0YTM2MzExNWY1
LzEvMVFsaUExeGVsUkFUeWdad3lsYWVlZmpXUEJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2K8Nocs
gHJ5UqIGoWUsE1eM4flFxN4CkoeyVO9Tdf9UroECtVdLn0NZBYh7MnWgBS1yVl9A
6mEgni6tyOBWL1eZwM9RZ0OglFIavBPggBs6rOdfoY3ycvGN6kyNCMdjmJKPBB9Z
lRrRdsxbKT0iT26dH1eidT6KkP6VWSt+KAFQAO+PLAbUShQjrOxnGiJ6sv7KUW2T
/53YNv7Gmd4S8OBEOu4QJwM7UUWAW5gR36QtPipL8OmpZaxznNhls8AmavT+aH8d
blYm9GCRPvgjDCGosXJCRQaqJNlC4SpmSIh40zQpTaC9SMcYshMmYgPk2/cNJX4q
dEIcsLyh6P/flA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:51:08 2026 by rpki-client