Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
File: qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft (raw, json)
Hash identifier: th0tY4sZi0Sq+UFdJtZQio6uG5z+YlOHXsZKcen8VEA=
Subject key identifier: 01:D2:46:8C:B5:42:1B:EB:E0:30:B0:D1:01:E3:E5:44:C4:C7:C9:B3
Authority key identifier: A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
Certificate issuer: /CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Certificate serial: 01A187892B790CCC43C1ADE3EED3A7EF7E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
Manifest number: 0144
Signing time: Thu 29 Oct 2026 12:01:15 +0000
Manifest this update: Thu 29 Oct 2026 12:01:15 +0000
Manifest next update: Fri 30 Oct 2026 12:01:15 +0000
Files and hashes: 1: 1-uaXjZ6yrrtJqfNtsY2-IfoHC9A.roa (hash: ZnV7OIgyRpJomB9RH+WRj4jIbkVriTkEGmB17bdQUdY=)
2: UiuaMadIa34ZVH4JPpb_7TjTz3A.roa (hash: 81//4wt6oj+yRk5h9sBjg6Uv03FMVzZyifdZ80jFUsU=)
3: qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl (hash: JaCCKE9tdP9rCzW4pfrreGI+Vgb4DU5DaAkeLodumjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:89:2b:79:0c:cc:43:c1:ad:e3:ee:d3:a7:ef:7e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a91a4b0e8f2cabba6a256394725207ddf3e93434
Validity
Not Before: Oct 29 12:01:15 2026 GMT
Not After : Oct 30 12:01:15 2026 GMT
Subject: CN=01d2468cb5421bebe030b0d101e3e544c4c7c9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1b:d4:00:fe:25:1b:08:c9:e2:cf:b4:95:a9:
da:7d:e9:63:df:75:a4:69:d4:ce:61:97:ed:ff:0d:
8c:fe:b1:ac:30:f6:41:4d:54:97:41:4e:3a:1a:34:
9e:cf:b8:0e:a1:7e:18:f9:9f:d8:45:fa:3c:79:3e:
27:34:8a:a5:eb:84:32:2e:12:c4:c7:ba:0d:8a:88:
e0:c3:c1:91:11:cb:bf:69:f0:21:57:61:2d:16:e2:
9a:0e:ca:c5:fa:64:5c:76:3b:ff:72:de:0a:9a:f6:
bd:72:57:26:e3:12:a9:2d:2e:0d:2d:69:e6:8c:a3:
ee:9b:82:cd:8c:be:4e:a4:5d:d3:61:bb:ef:f6:a5:
e9:6e:16:2e:2e:90:f7:e3:4a:3d:39:b7:4e:a7:74:
95:d0:e5:09:fd:33:31:65:a3:90:6d:e6:fd:a6:29:
8a:4c:45:a6:c6:d8:6a:10:55:64:65:51:d9:fc:0c:
65:0c:46:d4:df:32:62:16:87:cf:cf:c3:2e:09:2e:
44:e5:91:d2:48:92:9e:fb:d8:72:05:4d:72:84:c1:
c4:70:b2:d7:41:9c:ee:c1:82:a3:22:af:a0:af:1c:
25:4e:4d:f8:7c:b2:65:53:9c:08:78:80:37:67:05:
bd:31:9f:5c:82:04:cd:0e:f0:22:ea:59:16:e0:21:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D2:46:8C:B5:42:1B:EB:E0:30:B0:D1:01:E3:E5:44:C4:C7:C9:B3
X509v3 Authority Key Identifier:
keyid:A9:1A:4B:0E:8F:2C:AB:BA:6A:25:63:94:72:52:07:DD:F3:E9:34:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRpLDo8sq7pqJWOUclIH3fPpNDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/dcf559-afb4-46b9-b2d5-937dcff51e2d/1/qRpLDo8sq7pqJWOUclIH3fPpNDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:44:8d:29:7f:09:7e:fc:63:1b:af:67:86:a0:2e:54:16:c9:
c4:fa:aa:29:d4:bc:b3:e4:33:8e:96:0b:c9:f5:28:23:cd:87:
e8:ac:1d:f2:a5:a3:ca:26:60:4a:50:dd:c6:13:a9:6b:3c:94:
a8:12:a0:26:df:31:e4:86:2f:69:f0:0f:1c:64:50:be:52:70:
3c:b7:7a:6a:0f:6c:87:f0:28:a9:09:62:a2:98:63:4e:ab:d7:
d8:9d:43:fc:6f:8c:3b:6c:92:aa:f8:42:84:69:af:0c:fa:05:
b1:a1:01:6f:6c:8f:c9:8d:7b:8a:51:9d:9b:ff:17:e9:c5:98:
95:68:46:2b:89:01:0e:75:5c:91:5d:ad:e4:fd:38:18:b6:41:
7c:c4:40:b0:62:6f:bc:d7:43:8e:61:2c:5b:68:69:5f:0a:db:
b0:55:e2:a9:8e:11:7c:26:1c:18:0b:a3:bd:7d:2c:e0:f9:8f:
b1:23:af:1e:dc:76:ff:33:d4:d2:4b:04:5f:dd:98:85:99:e5:
76:7d:d3:59:03:41:96:16:57:62:1c:e2:0f:9e:4c:28:87:d3:
12:7a:4c:16:79:05:1f:91:1b:bb:61:3f:6b:f1:bc:7c:ee:dc:
99:5b:a9:f3:ac:af:46:85:f2:d9:a0:a2:db:56:78:7a:6e:2f:
8a:8a:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:51 2026 by rpki-client