Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: 3i95puRdtUg2MDrP9kP2g7ESsmvHEo4gHKzT5BP+kIQ=
Subject key identifier: E9:8E:F5:57:10:8A:DA:9B:F6:AB:50:86:BF:05:18:D7:CE:6E:67:11
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 01A0CBFE6C37940A388CDFA6F316A2F29CE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 02:00:43 +0000
Manifest this update: Wed 23 Sep 2026 02:00:43 +0000
Manifest next update: Thu 24 Sep 2026 02:00:43 +0000
Files and hashes: 1: TG-T28D3sM1IJX9-bR6zimuu3dQ.roa (hash: sKx/GRdEWeKSqR5AF1hTqJiMQ+ztWu0vS1aze4IWqmA=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: dfpjLL8EH/UXlCXdHLeq/R850+2XHibgCkHb8r0E5gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:fe:6c:37:94:0a:38:8c:df:a6:f3:16:a2:f2:9c:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Sep 23 02:00:43 2026 GMT
Not After : Sep 24 02:00:43 2026 GMT
Subject: CN=e98ef557108ada9bf6ab5086bf0518d7ce6e6711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:52:bc:27:f9:21:7b:bb:ae:3c:a0:1e:d5:
c6:57:f8:cd:88:25:9c:d1:1f:b9:f8:92:48:c7:53:
29:5e:34:c1:11:ae:1b:f9:fb:98:f0:53:3f:d2:65:
90:11:6b:74:30:e3:c9:5f:bb:d4:5e:9a:ed:31:fd:
62:8e:21:d2:f5:44:0f:5a:5b:fe:a2:d8:64:19:f6:
b5:66:d7:64:4c:70:b3:e1:0f:60:b3:bf:5d:09:33:
1a:db:31:66:af:b1:1d:98:62:95:a2:b0:0f:15:6e:
70:f5:2d:6e:77:6e:69:a0:8b:50:3a:7a:ac:4a:9e:
66:7c:59:de:f3:de:36:47:7e:37:8b:5b:d6:12:a0:
8c:f1:13:10:49:db:6a:f6:cf:1e:50:5d:1a:33:10:
73:46:b5:4d:52:71:6a:f7:7f:d0:f1:48:71:f3:fb:
52:e6:eb:d3:65:10:11:e7:19:a6:ff:e3:12:65:bb:
33:4a:48:65:6f:d2:ea:00:ec:33:61:89:83:07:7f:
a3:2f:ef:e6:40:ac:b1:32:67:e3:2f:27:07:7e:b6:
7a:26:38:fd:10:22:1c:aa:ed:12:25:cf:4d:11:4d:
f9:fe:74:60:13:10:a3:b1:ec:c5:36:37:be:00:24:
c9:5e:a7:4f:db:29:2c:8a:e8:ec:30:fb:cd:8d:d1:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:8E:F5:57:10:8A:DA:9B:F6:AB:50:86:BF:05:18:D7:CE:6E:67:11
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c3:f0:7a:bb:8e:3b:e0:ff:21:49:42:cb:5f:10:a1:ac:da:
db:5b:92:a0:28:51:34:62:f1:e6:fb:14:70:18:3c:4a:81:17:
ce:53:81:00:82:5b:6a:41:79:09:09:ff:80:e8:58:e6:21:c4:
2a:88:43:cb:ab:31:38:15:61:31:50:f9:58:fc:b7:57:cd:e7:
08:db:0d:f3:c0:ee:b5:f2:c3:b5:41:f9:f4:84:f6:9a:e2:7f:
e3:67:dd:cc:f9:74:10:ff:0c:89:14:5e:43:72:42:31:67:c6:
1d:f4:14:83:c2:f3:87:f1:d1:78:53:94:b7:fa:3b:d8:29:0a:
fb:d0:48:0b:3c:a7:70:6d:d6:59:83:57:cb:7b:96:19:7d:93:
cf:5f:01:f0:3f:c5:09:70:b6:2d:d8:4b:5f:27:fb:f5:3d:11:
7d:ee:6d:85:49:a8:e6:67:0c:18:44:33:92:b4:db:4f:41:33:
2a:ab:88:2f:d0:1e:cc:45:9d:d5:b6:0f:0a:f0:0e:37:50:15:
d2:c9:75:43:76:f1:13:22:af:78:b6:bf:f6:f7:be:4f:11:00:
0f:0f:b7:69:da:a4:12:5b:35:87:38:04:7e:4a:83:11:16:8b:
32:56:d3:77:73:bf:3a:53:bb:8a:74:43:80:e7:39:d1:a7:0c:
6c:95:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:33:17 2026 by rpki-client