Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
File: qTS43sEoG8VDF8f-0OmsvHuXysc.mft (raw, json)
Hash identifier: XGmD97KSP4Jwh+5BCBZkk3qB+VXip/DZXLkQR0MdAQc=
Subject key identifier: B0:56:E4:EE:63:E9:08:39:CD:C3:4E:CD:E0:5A:D6:50:94:B1:ED:54
Authority key identifier: A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
Certificate issuer: /CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Certificate serial: 01A105EE924F3ECD0EE535B36AC048008594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
Manifest number: 1A8D
Signing time: Sun 04 Oct 2026 08:01:23 +0000
Manifest this update: Sun 04 Oct 2026 08:01:23 +0000
Manifest next update: Mon 05 Oct 2026 08:01:23 +0000
Files and hashes: 1: 17NcvApuNSXy7j6b0yleIlW66rE.roa (hash: ELqpc8rB+esi/WJGkFsbXdMD1AmM+2FxKPDU9lOV9eY=)
2: M_-1yevGXxmg89kgZZwEjkECaGQ.roa (hash: Vo4/wHw48EoLaCQHDcS1MW43X+9bXlGsuQH6qGMPLug=)
3: qTS43sEoG8VDF8f-0OmsvHuXysc.crl (hash: hAAdDude88nwclf42oPQG91gjgyyuZtB3G4WXjuBtTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:92:4f:3e:cd:0e:e5:35:b3:6a:c0:48:00:85:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934b8dec1281bc54317c7fed0e9acbc7b97cac7
Validity
Not Before: Oct 4 08:01:23 2026 GMT
Not After : Oct 5 08:01:23 2026 GMT
Subject: CN=b056e4ee63e90839cdc34ecde05ad65094b1ed54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:79:6d:d6:d4:54:30:63:a4:ea:99:11:49:15:
ad:3a:00:99:23:b8:ce:37:98:f1:67:af:d7:40:4a:
f9:61:bd:bd:b1:bf:7d:df:81:85:ab:1b:12:9b:48:
12:68:cd:a7:36:bd:b7:aa:3b:25:cf:2c:dc:48:21:
01:a4:ba:0a:8a:55:72:a9:4b:e6:f6:b4:4e:5b:98:
af:5d:3a:85:96:47:e4:fd:4e:a2:97:04:2a:22:85:
0b:cf:2a:42:71:06:ef:e6:db:bb:28:4b:1b:62:8d:
eb:5b:30:f2:30:5d:d4:77:ac:91:c1:8d:b1:84:7d:
9a:97:93:83:07:ff:7a:86:71:47:6f:1a:3b:f0:ad:
b2:5e:7c:ed:37:70:56:94:35:7e:b0:60:e3:93:15:
75:a4:3b:4b:09:37:fc:e8:7a:24:e2:a7:08:95:4c:
68:e6:73:7d:3f:76:e1:26:ea:33:19:a6:8b:1c:7c:
46:a7:61:d6:3e:9d:f4:6c:c3:16:99:5b:17:31:f1:
0b:d4:9a:9e:1e:de:96:3b:41:48:b4:61:4e:5b:9d:
ab:ac:23:55:a7:d7:06:8d:85:55:4c:0c:6f:f2:2e:
dc:60:80:21:09:3a:02:6d:47:86:b5:7b:e0:1c:72:
68:ea:a9:f5:25:f5:17:f6:a4:5c:56:af:e0:c0:81:
b3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:56:E4:EE:63:E9:08:39:CD:C3:4E:CD:E0:5A:D6:50:94:B1:ED:54
X509v3 Authority Key Identifier:
keyid:A9:34:B8:DE:C1:28:1B:C5:43:17:C7:FE:D0:E9:AC:BC:7B:97:CA:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTS43sEoG8VDF8f-0OmsvHuXysc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/87b562-cb7d-4a93-bd43-27ee42d925ad/1/qTS43sEoG8VDF8f-0OmsvHuXysc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:f2:75:c7:77:a4:8a:54:b0:f5:83:66:51:2a:39:3d:eb:a4:
03:3a:a6:13:ee:0d:52:34:47:36:7a:fa:f9:26:53:14:0a:ea:
56:25:62:6f:cb:d1:ee:4c:1d:31:ad:54:7e:17:9a:02:c8:1d:
10:be:7e:41:2d:f0:3d:27:b0:5c:0d:2a:05:10:8e:b0:22:7a:
73:1e:a8:7e:1b:0c:6e:a6:d7:49:59:97:d2:2e:1f:40:53:a0:
87:b3:19:3e:f1:0f:4f:dc:20:9e:3e:62:fa:c4:1f:e6:b0:4e:
2c:e2:59:65:45:24:ea:49:55:e0:bd:21:4d:51:5f:bf:8c:c3:
74:22:b3:56:25:53:f9:5d:de:00:8f:0d:f9:01:5e:52:94:8e:
f4:d4:e9:81:ac:d8:a6:07:5e:00:3f:43:a2:fe:0c:ec:40:67:
57:0f:e9:ab:23:c5:54:2c:eb:68:62:5e:e0:96:14:60:1d:6f:
4b:0f:98:9b:c1:22:6b:86:52:e0:4c:31:a9:df:f8:56:24:2e:
53:83:9a:21:09:95:58:14:74:3f:40:7c:03:e7:8e:a1:b7:4d:
20:8d:ba:ec:1e:c0:60:e5:a9:11:ba:28:5d:18:b6:61:d3:de:
97:59:15:dd:e4:03:c0:92:7d:ed:79:05:57:df:ca:88:80:73:
ea:c9:3e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:43:06 2026 by rpki-client