Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
File: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft (raw, json)
Hash identifier: dabQPPp7TyZknFpTnSL9+6TO+lPchyrOf8o/nlQvsks=
Subject key identifier: 31:ED:43:0D:89:12:CA:12:FF:28:48:7E:6B:E4:D1:3A:88:16:A9:55
Authority key identifier: A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
Certificate issuer: /CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Certificate serial: 01A0EAAE325C9D232C36B239EBC3C1C2879F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
Manifest number: 1557
Signing time: Tue 29 Sep 2026 01:01:19 +0000
Manifest this update: Tue 29 Sep 2026 01:01:19 +0000
Manifest next update: Wed 30 Sep 2026 01:01:19 +0000
Files and hashes: 1: HYvKCcw-bAqCpd1NvqN2fLCuK_c.roa (hash: XoIkC6gkzv3SV50tLrqpWkzeeEIwqrXecB9Y4IUt8gc=)
2: qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl (hash: b5s8xq2hgqaQqBgEO4yvjGcSiPDV1mDYrhUEQRa8etM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:32:5c:9d:23:2c:36:b2:39:eb:c3:c1:c2:87:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93616365693fb6502cb4d687bb66747b1a2fd74
Validity
Not Before: Sep 29 01:01:19 2026 GMT
Not After : Sep 30 01:01:19 2026 GMT
Subject: CN=31ed430d8912ca12ff28487e6be4d13a8816a955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c2:e5:c3:48:f1:bf:22:7d:f8:7f:46:7c:65:
e1:3c:c8:e1:0a:5e:d0:28:1c:85:7c:d1:fb:7f:3e:
30:28:29:77:d8:32:fe:20:d7:23:de:77:68:00:e6:
6d:0f:0c:46:b4:05:27:fc:08:0e:ab:44:7c:4c:e0:
d0:d6:16:c7:41:33:41:34:25:31:94:fa:48:3d:9c:
4d:91:fc:d6:78:a1:6b:63:14:c9:c2:3b:64:ee:0f:
2d:50:84:16:ff:8f:ce:51:0f:a4:d3:57:9a:ea:3b:
60:ab:8b:7e:36:39:14:d4:c3:b7:91:33:e1:90:74:
48:37:0c:2a:8d:25:e4:9f:bb:ae:9b:67:66:74:d9:
40:21:a0:3a:a7:ca:2b:ad:23:19:01:48:ed:e8:75:
0b:7e:5d:6e:72:47:ce:8e:4b:d0:64:60:2c:a9:08:
01:39:a8:8c:4e:02:06:7f:12:0c:7a:15:5d:f9:82:
23:57:79:be:fd:07:87:16:ac:0a:69:82:27:d2:36:
9d:6a:4a:02:1a:ff:5e:98:e2:e6:ab:b5:7b:8b:c6:
0b:59:ff:fa:4f:b9:34:00:c3:ce:c3:95:97:b6:e4:
d6:67:16:77:d3:8e:35:79:b0:24:42:98:12:e4:76:
58:35:5b:c1:5c:5e:5c:50:ea:28:6d:45:f4:4c:1f:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:ED:43:0D:89:12:CA:12:FF:28:48:7E:6B:E4:D1:3A:88:16:A9:55
X509v3 Authority Key Identifier:
keyid:A9:36:16:36:56:93:FB:65:02:CB:4D:68:7B:B6:67:47:B1:A2:FD:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ceb187-7486-404c-a1dc-09129872e143/1/qTYWNlaT-2UCy01oe7ZnR7Gi_XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e2:0f:c8:eb:a2:4c:c1:da:32:1c:bc:ca:c5:f6:c4:43:92:
08:fa:98:c2:14:d7:3d:2d:1c:5b:57:ab:8a:97:f3:93:89:80:
36:25:d6:61:36:e8:0f:cd:93:44:d4:82:54:db:59:d7:54:a9:
58:81:b0:43:4d:1a:6d:3e:b0:3e:89:c5:a5:b2:4e:31:04:b1:
6a:65:47:f4:60:1d:57:9a:64:48:76:65:96:40:f3:a3:cb:1a:
7b:a7:c2:66:72:45:64:fb:81:ed:57:b4:8d:2a:8d:78:2c:4e:
7e:58:56:0b:28:ee:a3:8e:f3:7b:2b:cb:f3:62:10:29:43:07:
ee:90:a6:68:1d:a5:86:01:52:50:f8:66:1f:fd:1f:c4:ae:05:
06:59:2d:2b:76:0b:38:2c:88:de:da:71:71:44:63:98:32:4e:
6e:d9:be:f0:e3:43:00:22:15:1f:95:9f:64:74:6a:78:64:37:
c3:0d:c7:ce:85:4f:54:f5:2d:45:c1:32:65:cf:ed:c7:17:95:
ea:50:0f:a1:43:39:c6:1d:f4:a9:1c:93:e4:77:09:87:49:9f:
79:fc:73:05:00:b2:8a:d5:18:11:51:cc:20:3a:61:45:90:39:
5a:21:36:13:9f:da:81:90:b8:b5:58:a7:66:7a:3c:c5:a8:69:
84:85:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:53:12 2026 by rpki-client