Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
File: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft (raw, json)
Hash identifier: /YS34SnLZoOaPOcRPWj26X/qjJAJE91+cEEOk0FXhRE=
Subject key identifier: 38:DF:F8:D9:41:80:CE:AC:8A:68:72:8C:E6:52:34:CB:04:8C:BF:66
Authority key identifier: 43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
Certificate issuer: /CN=430e4026ca964cf3512940b26b11e64871c47944
Certificate serial: 01A1822BF01C24661BBF02982181FF2D6B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
Manifest number: 1A13
Signing time: Wed 28 Oct 2026 11:01:19 +0000
Manifest this update: Wed 28 Oct 2026 11:01:19 +0000
Manifest next update: Thu 29 Oct 2026 11:01:19 +0000
Files and hashes: 1: 6yATERdiX2wk0GFwUGUYwsoJuDI.roa (hash: KtrtZMXlX/Ho5Lrtg2Wv7jNJ8tmVGjU+3M5mJcyVobY=)
2: Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl (hash: j1p8JGe2hu0WxpYzfww8p9ObF+K6R9Wele4H5w5qWuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:f0:1c:24:66:1b:bf:02:98:21:81:ff:2d:6b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430e4026ca964cf3512940b26b11e64871c47944
Validity
Not Before: Oct 28 11:01:19 2026 GMT
Not After : Oct 29 11:01:19 2026 GMT
Subject: CN=38dff8d94180ceac8a68728ce65234cb048cbf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5c:e0:64:9f:4f:33:12:36:c7:d2:47:90:f9:
77:2d:1c:a1:59:a1:da:ef:f5:cd:6a:04:5b:c6:48:
e0:46:e0:e3:00:f5:d5:fe:e7:75:ff:3d:71:aa:f7:
1f:4f:ae:a7:5a:21:26:dc:1e:0b:a0:6e:7b:e1:75:
86:28:ed:37:50:5e:43:d1:9a:ee:1b:19:a9:3b:70:
e6:46:dc:b8:be:6c:f2:9b:86:fc:6c:26:e9:25:b0:
ac:bd:52:22:de:87:6f:97:9c:1a:11:1e:f3:c2:b3:
d9:53:0b:3a:1b:48:9d:c3:ae:1a:ab:73:2c:4e:0f:
fa:f1:84:c2:00:ce:9b:c8:bf:0f:17:a7:fb:f1:1b:
6c:eb:f5:a2:15:96:65:9d:86:6d:75:38:24:0d:f4:
63:aa:4a:01:ab:32:f6:9e:02:05:ce:50:27:6f:46:
7a:06:cb:38:33:c6:c5:93:7d:71:5e:7f:6f:79:69:
51:1f:8f:fd:ae:f2:32:3b:7a:a0:df:7b:54:54:02:
37:a3:e0:bb:78:5e:96:1d:e5:81:4b:f8:ca:6e:a0:
17:e9:17:e2:48:ee:8a:f1:cd:98:1c:4c:f7:26:16:
37:e8:a8:18:15:db:6d:88:5d:98:d3:be:5f:b0:19:
17:56:78:23:98:87:bd:cd:0f:c7:74:81:02:8e:43:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DF:F8:D9:41:80:CE:AC:8A:68:72:8C:E6:52:34:CB:04:8C:BF:66
X509v3 Authority Key Identifier:
keyid:43:0E:40:26:CA:96:4C:F3:51:29:40:B2:6B:11:E6:48:71:C4:79:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/132410-4839-4174-8de2-1113ae563369/1/Qw5AJsqWTPNRKUCyaxHmSHHEeUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0d:73:eb:7b:39:3c:ed:c9:a4:60:1f:86:a5:73:4c:de:a5:
d0:d6:28:1e:51:d7:d5:29:73:0a:96:b3:c5:93:af:39:bd:b0:
45:8c:46:4a:dd:f3:aa:a4:0a:48:a0:ef:2d:c3:ec:75:78:10:
ca:89:d5:45:09:fd:28:4d:c2:b6:55:74:bf:75:e6:16:9d:71:
c6:44:20:12:cb:8b:0b:4e:c3:26:e1:fe:16:b0:b0:16:77:f5:
23:58:c8:da:be:11:d7:8e:11:5c:e8:37:4f:15:d6:7d:f2:e9:
2a:56:18:7f:f0:2d:c5:a4:ea:ca:f7:8c:8b:19:d0:0a:a1:2c:
9f:b7:81:b3:02:08:0e:53:ce:ed:c8:94:40:9e:77:8b:60:fc:
79:d8:6a:33:5e:68:f3:5c:83:f5:ba:8a:fc:55:9f:af:d3:8d:
76:54:3e:9d:88:e1:a7:a1:57:91:7e:96:fb:ea:77:5d:cd:46:
69:22:6f:b5:a0:71:7e:81:fa:66:aa:97:ba:51:b3:24:a3:ff:
84:9c:f6:4b:a5:e9:7f:12:ff:c8:a1:a2:6b:f3:7e:34:00:63:
8f:b6:8d:cb:c2:7b:d6:be:88:22:2f:f2:91:cf:cf:6a:71:54:
24:d8:5d:af:c6:db:47:93:69:9a:41:59:c6:36:6b:43:b7:e3:
75:9a:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:40:02 2026 by rpki-client