Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json)
Hash identifier: PjjVnGychkekY28+4GRp+9GOnLuMb6XtGyna5QETB2M=
Subject key identifier: 4A:9D:77:A6:3F:92:AC:22:83:89:D3:10:FB:53:D4:E4:04:32:1A:FA
Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2
Certificate serial: 01A17D73B36465550981DE8AC079D0DA8AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
Manifest number: 1AC5
Signing time: Tue 27 Oct 2026 13:01:36 +0000
Manifest this update: Tue 27 Oct 2026 13:01:36 +0000
Manifest next update: Wed 28 Oct 2026 13:01:36 +0000
Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: amVBR3MvKeIp08BkBWgMNYswdeW55zyu7bhEuOD0wL8=)
2: hU1lZW7ePs-jJStAbmgwJQdywgk.roa (hash: GCbi7/7u241zxcC9BwBBXY2OG87lKhbUz6RrhT+13oQ=)
3: oBx_PUd9jIs7YBgUmwcA4lLwIh8.roa (hash: hhGP/lSRzYSBVwOdWUcy+jdF25VySsbxm9Awg1JpKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:b3:64:65:55:09:81:de:8a:c0:79:d0:da:8a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2
Validity
Not Before: Oct 27 13:01:36 2026 GMT
Not After : Oct 28 13:01:36 2026 GMT
Subject: CN=4a9d77a63f92ac228389d310fb53d4e404321afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:08:7b:6d:5a:94:16:f7:c3:cb:6e:68:78:ca:
1a:a5:34:08:dd:d9:e9:82:c0:4a:ec:aa:1b:39:01:
2a:a4:db:0c:da:df:f9:e5:4c:11:06:c0:5a:45:a8:
9e:97:0d:a4:3e:f4:0b:93:91:00:6d:a5:f7:d2:15:
71:ea:eb:80:23:a9:0f:46:6a:40:fb:32:04:a4:69:
a2:11:12:85:59:ea:25:90:df:ab:d3:09:6d:9c:22:
54:59:62:1d:35:d4:69:cf:09:8c:51:08:de:58:25:
39:c2:fa:57:e0:2b:75:ef:ad:cb:c4:76:00:f6:6e:
61:10:bf:e2:e5:0a:8b:3b:f7:fe:1b:01:ad:d2:69:
02:91:7a:06:b4:56:03:d1:d6:4b:ba:60:52:5f:eb:
34:e9:a7:4e:f9:ac:c6:15:d2:bb:f1:09:53:5b:08:
58:0e:f8:91:df:fb:ef:60:97:cf:05:71:b1:1e:9f:
56:8b:90:8e:84:f2:75:b1:13:f6:4f:4b:19:cd:7f:
b6:a3:ae:0d:23:b3:1b:cb:7d:62:71:34:06:78:cc:
81:61:77:dc:fb:d9:94:3f:f7:dd:1d:13:2d:34:14:
34:a4:e3:39:d1:ec:ee:3b:40:97:3b:df:3c:91:b3:
71:31:ea:eb:c3:7b:8e:b8:e1:8d:e3:d3:7c:96:90:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9D:77:A6:3F:92:AC:22:83:89:D3:10:FB:53:D4:E4:04:32:1A:FA
X509v3 Authority Key Identifier:
keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:85:18:45:b0:29:5f:58:19:97:17:e1:a6:b0:b2:00:e9:98:
bd:4b:01:88:9f:39:53:f4:d7:b4:35:19:1c:f0:86:9a:e7:70:
ec:a6:03:76:c7:6b:38:52:53:39:12:7a:34:22:2d:fe:7f:4c:
f3:91:fc:7e:11:5a:2c:e0:1e:14:dc:c1:1e:7b:4a:db:96:d6:
08:f6:f8:2d:76:4c:ed:fb:f9:0f:ed:0a:ca:dd:9e:ca:bc:2c:
a2:82:9e:94:89:3a:2b:00:3d:2a:ec:04:49:01:18:67:0e:6e:
3e:59:15:89:62:65:06:81:eb:22:b9:25:ba:44:81:cb:db:3d:
d8:f9:48:00:f3:b0:05:85:e4:00:6a:d7:70:15:97:d3:cd:3b:
11:ff:3e:ff:21:a6:c5:dd:43:a7:f7:a1:5e:bb:38:71:18:be:
9e:9c:40:5d:88:41:0d:bb:2a:7c:e3:5a:01:57:cf:ac:02:d2:
02:c3:a1:8b:2f:b3:4c:1e:39:00:f9:40:1b:b7:4a:e6:b8:fe:
c8:90:88:f9:10:f5:ef:7a:f9:0f:f6:c7:66:d9:7b:9b:ec:2c:
9e:dc:3a:b3:11:26:05:12:cd:cd:6c:d8:58:ac:20:b9:10:89:
df:a3:fa:cb:a2:25:cc:e4:9a:00:d0:8d:a2:a4:ac:b9:7f:15:
f3:1a:26:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:43:44 2026 by rpki-client