Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: twbFjWZi2DtabYmMAJjJQiorXvq5dTvqR/G+1cEWwEs=
Subject key identifier: 1D:39:97:AB:42:E0:A0:1B:84:85:3F:EE:11:DD:84:4D:D8:C8:41:31
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 01A0D615081EABE4BC6D30F845830C8D8127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 01:01:37 +0000
Manifest this update: Fri 25 Sep 2026 01:01:37 +0000
Manifest next update: Sat 26 Sep 2026 01:01:37 +0000
Files and hashes: 1: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: 0zcDvU1WAVHICYjReZHmqMGZ59/cNN7SESDaEGYFk+M=)
2: tkDo3ZU0uU50tRqmy_OtbPqQ45I.roa (hash: oFn0sS2KIEC+fcfgS1boOcIBmwWzk50WRGkvZp+ryXo=)
3: wga_WdR_8QvLv6SYCAFbkFgE4IY.roa (hash: 1WShRNTFDIi2o5zhM9Z4CcfauIXDzI1Kphz/pH1YsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 01:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:08:1e:ab:e4:bc:6d:30:f8:45:83:0c:8d:81:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Sep 25 01:01:37 2026 GMT
Not After : Sep 26 01:01:37 2026 GMT
Subject: CN=1d3997ab42e0a01b84853fee11dd844dd8c84131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:34:04:93:13:c2:de:38:d8:ac:5d:43:b0:
2b:56:9b:f8:26:24:37:e6:69:b9:cd:0f:2d:4f:31:
9d:bd:02:b2:78:b7:84:ac:e6:03:39:0f:5c:5d:1b:
da:9d:79:c8:ec:13:14:33:9a:09:ee:1c:30:6c:f7:
f8:73:07:ef:4a:2f:a8:ad:15:ea:50:42:80:c4:13:
81:03:ee:b3:19:d9:bf:6b:65:13:c7:6d:17:d6:1b:
87:dd:45:1a:b4:b5:e1:2d:a2:f9:43:6b:ca:86:ee:
e7:85:a8:b3:f6:7b:fb:1d:30:50:13:d0:03:f2:86:
41:50:6f:7d:e8:48:f9:bd:94:f3:66:d9:71:00:c3:
b0:34:34:7c:07:f6:e5:78:f8:c3:16:3b:56:16:f9:
70:b9:0c:4d:67:6c:a1:15:b7:33:27:3e:0d:fa:32:
5c:be:dd:97:18:c4:a9:69:b9:51:c9:44:e1:c9:79:
3e:f9:73:f4:6a:f1:e4:44:b3:6b:15:b5:d1:75:ff:
67:2d:c3:89:e0:fa:0a:66:af:df:e5:96:df:8c:45:
e4:87:ef:67:ac:bb:77:13:a8:98:68:fb:93:a4:63:
6a:f0:bc:7b:97:43:a5:58:e9:57:b4:4d:2f:4d:92:
0b:cd:b2:db:be:c0:f8:ae:0d:18:f8:66:4f:11:6c:
4b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:39:97:AB:42:E0:A0:1B:84:85:3F:EE:11:DD:84:4D:D8:C8:41:31
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:c4:69:d7:e5:ab:1c:f8:92:c2:78:4c:41:2c:35:cb:1f:
71:62:f3:1e:9b:b3:76:44:45:31:87:45:5f:a0:58:e1:25:b3:
45:4a:47:ac:1f:46:ee:82:12:f7:a9:64:1c:f0:c9:97:cc:96:
a2:4b:9a:50:01:c7:92:e6:53:e3:f2:9e:78:a1:ca:9e:cf:c6:
a5:24:8f:bb:f8:21:74:ce:00:29:8f:e1:20:35:4c:55:7f:bd:
f7:84:5f:49:0b:0e:17:9b:0c:08:b0:bc:52:0b:3d:ed:33:7a:
4f:fa:3b:f5:9c:11:59:5f:ab:82:25:e9:2c:6d:63:8b:2d:df:
d6:25:5f:13:e1:f5:97:bf:42:1d:3c:28:45:99:56:82:cf:00:
b3:44:82:e9:7c:67:6e:e9:46:5e:17:cf:1a:2f:4e:d6:24:93:
6a:1d:d8:de:64:6a:76:45:e9:f2:5b:17:de:c5:9b:89:09:81:
3d:a7:8e:bc:fc:12:f4:5e:37:9c:87:f1:8c:33:38:b9:7e:2b:
3b:0a:0d:11:47:6a:fb:7b:68:72:c9:f4:21:28:ec:44:14:1b:
ae:eb:b7:9e:f3:68:2f:57:86:fa:2c:66:43:04:a8:43:49:f5:
ab:cb:df:da:8b:06:ee:d9:71:0a:97:3a:55:ce:ce:54:11:b5:
9f:9a:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:07:14 2026 by rpki-client