Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: mQtjwhCTY3YoFk+Ci6JFDFsV8sk6xhZMVZz6ScrgIAY=
Subject key identifier: 60:34:D0:96:2F:56:2A:8D:F0:B2:FB:8F:7D:E0:86:04:5D:1B:DC:D6
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 01A0C9D94725DA4B35349681DCBBF305CBCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 0D0F
Signing time: Tue 22 Sep 2026 16:00:54 +0000
Manifest this update: Tue 22 Sep 2026 16:00:54 +0000
Manifest next update: Wed 23 Sep 2026 16:00:54 +0000
Files and hashes: 1: Ep1UdBXzCWlqSTpFzem1RUVZTHA.asa (hash: f0L/PAFatn0IgaIhqoEyZoZ0cRFuKV57J/o6cZd4vJM=)
2: UVwGUstyqvelkq37jwrCyB34k94.asa (hash: E7qX0L3M0NDAHs6Gtk5Rp5Gs8S25rdSfJnVG4BtVL6w=)
3: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: QLZ1FZS6NPAgJgKLz0UBLoR5nbYtCyfEik+8lyUssvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:47:25:da:4b:35:34:96:81:dc:bb:f3:05:cb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Sep 22 16:00:54 2026 GMT
Not After : Sep 23 16:00:54 2026 GMT
Subject: CN=6034d0962f562a8df0b2fb8f7de086045d1bdcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1a:f7:b9:86:0e:71:2d:64:4e:0f:bf:09:fb:
b1:ab:dd:c3:b9:da:69:1a:71:01:5c:5d:87:79:7b:
e0:b7:9e:2d:96:66:f8:4c:32:29:91:8d:15:03:49:
74:6f:f9:5d:75:21:a2:f2:d4:a2:d3:c4:1f:86:29:
b4:b4:ad:55:92:7f:5b:01:26:af:07:03:7b:a8:8c:
da:0e:ea:93:7a:72:f6:61:69:3a:79:ee:78:4b:5e:
c7:d2:8f:b3:e5:66:77:f5:51:f9:75:80:75:ca:37:
55:a6:53:23:1f:8a:a8:25:bc:4b:01:0c:6b:de:66:
82:75:97:83:a4:27:0b:1a:fb:3a:f1:a3:1c:c5:65:
12:b6:c3:d7:56:25:de:b4:71:f9:a8:fd:d8:4b:7a:
3b:56:27:be:79:70:9c:2f:e6:4b:75:8b:ec:57:d6:
51:3f:95:67:9b:2d:2b:dd:62:b7:aa:21:6b:b6:a9:
0a:94:b5:58:5c:3e:d5:4b:42:85:43:ba:17:f6:cf:
b7:3e:e5:52:17:00:ea:c0:0e:f0:50:57:fe:e3:ba:
ae:3c:5a:ed:bd:f1:8f:f9:13:e7:40:d9:a7:39:8b:
9e:77:c1:21:bd:df:e3:6b:05:cc:45:a9:03:a1:fe:
36:39:8c:8d:6d:cd:17:e2:52:07:ab:62:39:2b:fa:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:34:D0:96:2F:56:2A:8D:F0:B2:FB:8F:7D:E0:86:04:5D:1B:DC:D6
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:35:a9:1c:46:a8:14:6c:a0:85:b6:6f:5f:2e:89:30:cd:06:
8f:27:a6:2f:4f:7c:bb:4b:ab:33:e5:0b:97:df:71:10:61:c6:
d9:3a:27:a2:97:10:f8:11:d2:7f:ad:c4:94:b3:01:88:1d:d0:
fa:f0:b0:c8:7f:30:e8:fa:c6:cb:63:e3:7c:9a:9b:5a:55:f7:
0d:61:73:e2:eb:58:4a:2d:b2:20:17:9b:09:dd:76:73:da:5b:
b2:12:6e:c0:e2:d1:03:21:c1:af:a7:e7:33:cb:a4:78:90:ed:
9a:86:14:c0:ee:ff:e3:20:aa:f4:94:05:90:bc:0f:00:96:7e:
fd:c5:07:18:1a:5c:19:32:3e:83:be:8d:ff:6a:c4:f9:b4:55:
11:66:8f:e6:27:d7:24:ad:40:2d:7e:be:40:f3:20:b3:5d:99:
c7:2f:d3:a2:f5:98:e4:c5:e7:d2:6a:f8:0a:46:30:b9:50:f4:
22:87:11:76:87:a7:ac:9a:54:b6:0b:38:87:03:57:ab:0c:14:
74:0b:9d:25:98:c4:d2:64:71:8d:fc:e5:22:e7:64:0e:a2:9b:
99:cc:86:93:9c:4f:59:93:d3:48:cf:02:0f:71:82:0d:4b:5d:
93:19:41:84:19:29:ed:2f:5b:3c:bb:31:5c:00:ad:70:57:e2:
2f:9e:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:41:23 2026 by rpki-client