Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: ddduAh/j3zYF2QPS1JZOfGZ3BQKp7aFmMUorobgyiaY=
Subject key identifier: 4B:1F:F5:33:BE:8E:3B:36:EA:AA:D9:5D:34:B9:58:D3:4C:F2:87:AD
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 01A0DB0425C112A21B76F428ECE16C2AEEB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 1A08
Signing time: Sat 26 Sep 2026 00:01:17 +0000
Manifest this update: Sat 26 Sep 2026 00:01:17 +0000
Manifest next update: Sun 27 Sep 2026 00:01:17 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: 6ufICGSYKhoSHGsBp/W6Pn/fEHHrW/xKfiIk5DgLUDg=)
2: ekViUfVjeX96GOzSolN__8-4A4k.roa (hash: YyzGmywtQBLblhHE3rDDlveGwps6u/nY6w46Xdc6qtY=)
3: meH9o9i7-j2R-Vcd-oY44f90eGc.roa (hash: jMkC1VRwXkD+Vzq7AX9qpzMXsW5ynXfkYRel0vHaW90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:25:c1:12:a2:1b:76:f4:28:ec:e1:6c:2a:ee:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Sep 26 00:01:17 2026 GMT
Not After : Sep 27 00:01:17 2026 GMT
Subject: CN=4b1ff533be8e3b36eaaad95d34b958d34cf287ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e0:c5:19:0d:ce:ec:97:14:b7:31:97:9a:70:
58:d5:c5:51:78:7f:73:a6:7d:d2:ff:fb:6e:89:a0:
c8:0c:05:68:fb:4c:67:55:28:09:fa:fb:d6:f3:a6:
2b:ef:72:66:a3:d7:5f:3a:85:18:62:16:ff:ec:75:
1c:48:fe:97:48:4c:d9:96:48:b9:fb:11:ed:97:94:
3c:5e:b4:43:de:da:43:66:9f:92:33:b4:28:6e:53:
88:cb:eb:2f:55:d3:da:c3:9d:63:3e:98:f3:51:26:
4c:ab:dd:5d:3d:af:79:8b:eb:50:ea:c5:63:cd:a2:
27:9c:24:d9:87:b6:24:ac:7f:d3:f0:73:54:3d:e4:
b4:2c:27:7c:18:80:3d:03:73:b6:ed:e2:d5:0d:f3:
bc:4e:82:88:cd:1f:b8:02:eb:9b:ec:17:b0:b2:a2:
04:97:1f:1b:04:c1:c9:a1:34:00:98:e3:82:8d:a4:
27:21:b3:10:8d:74:6e:99:52:9c:d2:3d:3f:76:4a:
29:d6:45:ae:61:71:e4:84:18:53:76:49:f0:f4:bf:
79:8d:ff:e8:4d:ad:39:39:ae:56:1f:6b:03:62:14:
00:23:e3:f5:1c:7e:f3:9d:aa:b9:bd:12:55:76:48:
33:e6:22:c0:52:b7:41:6d:3f:90:29:5e:cd:de:4f:
5d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1F:F5:33:BE:8E:3B:36:EA:AA:D9:5D:34:B9:58:D3:4C:F2:87:AD
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:8c:be:21:69:a7:39:93:d6:88:cb:ec:24:87:5f:07:f6:f1:
01:9e:8c:3b:f6:5c:27:1f:51:83:53:2b:d3:f7:40:10:2a:74:
e0:b7:0c:53:55:d0:92:91:35:d2:ab:76:92:83:89:30:57:40:
e8:fa:c7:70:8a:e7:92:b7:9b:6e:62:bb:59:8e:71:a5:fe:95:
60:00:3b:a1:20:a9:82:ff:b2:b2:87:eb:ed:eb:41:ab:07:52:
41:03:54:e2:32:a4:15:48:ef:b6:84:b5:d5:92:b0:ba:1c:24:
e7:79:d6:9f:34:ff:e3:bd:e6:2f:4c:d0:cf:89:3f:7e:9c:28:
f1:3c:f8:0a:a4:70:70:e1:06:e2:b8:a8:fe:18:b6:03:70:46:
7f:47:a4:2d:c4:90:74:ef:9f:4b:79:51:0e:bb:8e:a4:31:01:
f1:2c:56:f4:fc:d2:34:c5:ee:eb:05:ed:44:b3:3e:cb:91:71:
d8:5e:1d:00:7c:07:ef:f1:6a:25:65:66:6a:cb:11:92:75:24:
1e:52:15:cd:dc:20:10:cf:6d:ce:4f:2a:36:8a:3c:d2:58:07:
1c:b3:ed:27:06:77:13:25:a3:ca:e9:ea:bb:bf:cb:f7:c5:b3:
5f:42:af:70:0d:d3:30:ef:46:52:48:af:82:1a:61:4f:dd:77:
b1:93:17:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:19:27 2026 by rpki-client