Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: O+8f5fU7lwkp6zlTBT1G6WIJiD/Kv9+aBGFmgYiH4sY=
Subject key identifier: 3F:D5:30:CC:5C:38:74:27:AF:14:22:10:81:57:D8:A7:2A:92:E9:E3
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 01A130A2736BCE11F931C60BB582B9439BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 15:01:54 +0000
Manifest this update: Mon 12 Oct 2026 15:01:54 +0000
Manifest next update: Tue 13 Oct 2026 15:01:54 +0000
Files and hashes: 1: GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa (hash: D0faA0NAhOg5B8uJp2cs027yC0WcbwJy1xgJBQXojpc=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: LMfXo/yCmUEsHjg4LT0DTqUXqUHznBONtQKUfqscxbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a2:73:6b:ce:11:f9:31:c6:0b:b5:82:b9:43:9b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Oct 12 15:01:54 2026 GMT
Not After : Oct 13 15:01:54 2026 GMT
Subject: CN=3fd530cc5c387427af1422108157d8a72a92e9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:96:7e:04:b2:13:86:7a:b1:c0:9d:8c:7f:1d:
0b:2f:54:45:21:16:74:8f:f4:0c:bf:5d:c6:40:b2:
bd:86:3f:53:4e:18:d0:8c:14:ee:69:ce:70:d6:50:
3f:d8:65:21:be:c3:e0:eb:96:5e:af:29:ba:63:05:
ac:14:9e:41:7e:0d:23:82:e9:5b:cd:d8:b4:12:b0:
4a:f2:b7:0f:91:96:01:ef:92:5c:b0:2c:b1:8e:f5:
86:9e:56:6f:10:b5:0f:37:fb:1c:9f:7c:8d:e8:00:
2f:7d:47:43:23:f3:fb:11:16:88:90:5f:a0:7e:8b:
d9:04:6d:2c:ae:6b:5d:43:af:88:5e:6a:53:f2:50:
55:18:6c:40:3f:a6:58:48:f4:c8:49:3a:da:0c:56:
77:4d:a0:86:63:69:6e:bf:1a:99:19:60:7b:99:c0:
c2:28:f5:16:50:0e:45:06:77:00:d5:b2:aa:e1:35:
f6:a0:84:c9:67:ad:a0:fb:c3:27:ba:1b:17:62:f5:
44:7e:0b:8a:c4:54:e0:c7:e5:9c:0b:ff:bf:51:bb:
66:37:ab:37:0e:e3:7f:e9:bb:93:21:35:17:e3:7c:
2f:61:cd:8f:6b:cd:69:d0:72:71:7c:65:e4:35:8d:
92:cb:1e:f9:06:08:10:28:06:eb:0b:d5:88:8d:72:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D5:30:CC:5C:38:74:27:AF:14:22:10:81:57:D8:A7:2A:92:E9:E3
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:5d:d5:2e:c8:e4:4d:4c:47:d9:c2:df:7c:8d:2b:71:ca:14:
34:9c:d1:de:34:1a:07:15:f6:47:68:84:c0:d2:57:c2:cf:03:
9c:14:4c:5c:aa:24:08:3c:5c:97:a0:65:f3:16:ae:c0:79:55:
fa:df:c3:ce:02:dd:9e:2d:ec:80:cc:86:9e:a2:38:15:4c:9f:
73:b4:e0:f9:9c:06:d8:dd:44:fa:29:fe:e4:91:1b:bc:cc:89:
af:7b:73:83:30:7e:63:ac:5d:82:d3:b8:8d:c7:72:66:70:9d:
22:d4:0e:58:1e:59:cd:dc:d1:f9:01:20:68:32:2a:cc:06:d1:
ba:a6:7b:10:73:1f:e4:01:17:8e:81:2b:64:27:73:06:f9:f1:
6b:f9:87:8b:87:4f:49:24:3f:2a:0e:f6:4a:55:0b:5a:6d:9c:
ea:52:ef:e5:b7:a9:d7:b8:44:12:1d:c0:72:15:04:99:ec:5c:
cc:2e:ab:d5:1c:6e:81:ac:dd:62:5b:3d:eb:53:7c:49:50:fe:
50:f0:e9:1a:c1:11:be:b6:c5:98:2f:82:81:dc:aa:42:b0:4d:
31:9c:ad:30:dc:46:0b:91:4b:f2:bb:4c:cc:09:88:05:92:33:
2c:74:66:79:7b:22:19:77:f4:6c:23:04:21:d9:5d:a1:91:65:
bd:62:5b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 21:35:15 2026 by rpki-client