Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.mft
File: QzU1eWRbvqHGfNqakci0GbUtg0Q.mft (raw, json)
Hash identifier: /WSzE3G9z3Sn+LC5zv0kS+uIDTA4Bteu844mVh52XFg=
Subject key identifier: 45:D0:77:94:74:E6:B9:B6:31:A8:F2:FC:85:09:2E:37:16:0B:47:B2
Authority key identifier: 43:35:35:79:64:5B:BE:A1:C6:7C:DA:9A:91:C8:B4:19:B5:2D:83:44
Certificate issuer: /CN=43353579645bbea1c67cda9a91c8b419b52d8344
Certificate serial: 01A0BF8C3671187BD4414B37DCE8A316B5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzU1eWRbvqHGfNqakci0GbUtg0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.mft
Manifest number: 05
Signing time: Sun 20 Sep 2026 16:00:32 +0000
Manifest this update: Sun 20 Sep 2026 16:00:32 +0000
Manifest next update: Mon 21 Sep 2026 16:00:32 +0000
Files and hashes: 1: EmTxLgOX0u1eXdSLbwj1AYSs8Gw.roa (hash: ZEwFPYBWkArICUZkIkdL6JG/Cplugs/id++jvH+LHRs=)
2: QzU1eWRbvqHGfNqakci0GbUtg0Q.crl (hash: abOJyOghQjuAQMRwWoajouLu1PwJrvOF4vcV2MJePJY=)
3: xeajp4H0qE3EDocOiWV3z6Lcaiw.asa (hash: CnB9aCfs1wpkHQTQRTFtAdPWGj1JXtd4sar6rSuSo2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QzU1eWRbvqHGfNqakci0GbUtg0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:36:71:18:7b:d4:41:4b:37:dc:e8:a3:16:b5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43353579645bbea1c67cda9a91c8b419b52d8344
Validity
Not Before: Sep 20 16:00:32 2026 GMT
Not After : Sep 21 16:00:32 2026 GMT
Subject: CN=45d0779474e6b9b631a8f2fc85092e37160b47b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7a:9a:0a:17:b5:52:cf:ec:46:c4:1e:3d:ef:
71:c1:8b:f2:24:b1:1c:70:b1:7a:58:0d:58:92:81:
db:2c:04:1d:03:b5:6f:4c:11:9a:89:95:d9:3c:a7:
22:2b:95:c6:1e:99:3f:2a:1f:d7:46:43:a8:8d:19:
e8:d6:f1:bf:0d:76:a8:6e:d0:e7:f1:e7:ad:5a:e6:
4b:b1:85:5f:cb:3a:68:d5:09:58:fa:a5:9a:aa:2e:
14:38:ac:a2:5d:fa:a0:e3:14:29:fa:c4:97:42:85:
c7:ea:27:c8:71:6b:c6:3f:74:d7:8f:e4:e8:cd:00:
74:cb:15:cc:e1:2b:04:a4:1c:2b:7b:90:68:0b:fe:
e0:ab:95:b5:2e:04:c9:7e:31:8d:8f:a3:35:70:6c:
ee:7f:c9:94:52:fc:cb:b0:70:43:92:d4:02:2c:40:
d4:2b:4c:97:9e:4d:29:c0:bc:05:7f:9f:bf:ef:94:
47:46:28:94:ac:16:1c:4d:e4:1e:44:b7:12:9b:47:
38:93:44:01:57:98:dd:0b:d1:a5:cd:93:e4:da:e6:
c2:e5:33:08:fe:ed:80:c5:3f:43:f6:9c:29:cc:5a:
21:96:50:ee:62:94:f3:5f:23:fa:7c:1a:cd:02:d3:
a0:ed:6f:d5:fb:f0:4b:68:93:b0:f8:91:0e:be:94:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D0:77:94:74:E6:B9:B6:31:A8:F2:FC:85:09:2E:37:16:0B:47:B2
X509v3 Authority Key Identifier:
keyid:43:35:35:79:64:5B:BE:A1:C6:7C:DA:9A:91:C8:B4:19:B5:2D:83:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzU1eWRbvqHGfNqakci0GbUtg0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/e22f5e-b997-4f4b-a821-9bafd5f995ef/1/QzU1eWRbvqHGfNqakci0GbUtg0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ea:2a:12:0c:50:5e:bb:bd:89:bc:ad:f2:cd:e7:ee:04:c4:
d4:94:2b:51:db:84:a9:77:4c:46:45:a1:e1:a6:ba:21:56:3f:
cd:90:2c:67:46:bb:d8:74:4e:9b:3f:90:64:18:87:fd:c3:5c:
f6:8b:0a:77:89:e2:76:d8:66:93:5d:da:cf:17:f7:de:3e:49:
4d:bf:c6:50:e8:30:d0:98:b1:81:6a:86:3c:b9:c0:6c:5a:bd:
7b:41:99:e6:72:a3:83:5f:e9:df:54:45:75:17:e1:c2:fa:b0:
2c:fa:50:64:b6:e5:1a:61:35:a4:2e:b2:20:90:7b:a8:78:a7:
67:cb:92:70:3c:42:8d:dd:bd:08:25:f0:90:fa:2e:0d:91:ad:
73:f4:bd:1f:62:49:37:6e:ab:27:ef:cd:92:bc:16:b2:4b:9a:
7d:a6:50:77:82:23:20:c8:9c:d1:f4:e6:5c:a0:a2:b5:1c:a7:
18:f9:e1:b4:c8:23:18:8b:eb:6b:a2:e6:90:58:8e:64:bf:4f:
c3:8e:1a:d9:38:f6:1d:3b:2f:27:ea:68:39:e3:64:23:2c:72:
47:1a:4c:30:d6:9d:e7:4a:2c:f9:20:ff:30:69:c1:4a:60:8b:
5d:eb:76:e6:b3:f5:83:8a:36:30:57:e9:94:88:07:f5:9c:52:
70:0a:fa:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:08:04 2026 by rpki-client