Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
File: QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft (raw, json)
Hash identifier: k13Xte9joKfilUMMwzzoL17pJVz5kFr8Zwol2BDik1A=
Subject key identifier: 92:4D:D9:50:AB:59:E8:2E:AE:6D:28:43:E7:07:B6:F2:AA:0E:F1:99
Authority key identifier: 42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
Certificate issuer: /CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Certificate serial: 01A0DA9626A951EF633DC972F785971EEF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
Manifest number: 17AE
Signing time: Fri 25 Sep 2026 22:01:08 +0000
Manifest this update: Fri 25 Sep 2026 22:01:08 +0000
Manifest next update: Sat 26 Sep 2026 22:01:08 +0000
Files and hashes: 1: QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl (hash: iHXqFmKh9UiEurRAvr/LbC0WyF+mr3ja7504IJpxbVo=)
2: SsfnBHuvPDESg4pTMTaqtv9nT-Q.roa (hash: ZrITCydyp3ig8q1pUL+0pHbv4soXKIcGIYDQm4wHpvo=)
3: c-KZaw3UumwWkGCg1_3weGS8B-U.roa (hash: 2AcxA0Jqp/dgXDEXPcxhpKLcjp+xB4KSRrsphLc65kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:26:a9:51:ef:63:3d:c9:72:f7:85:97:1e:ef:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42512561fc4ee54b799c5af428fffbcbafd454ef
Validity
Not Before: Sep 25 22:01:08 2026 GMT
Not After : Sep 26 22:01:08 2026 GMT
Subject: CN=924dd950ab59e82eae6d2843e707b6f2aa0ef199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:90:d9:92:95:d6:9a:f4:49:27:42:de:a6:9b:
ee:6f:27:65:60:23:2a:d4:11:75:56:e8:6a:cf:8c:
0a:37:fc:b6:79:f1:3b:4f:e9:e0:ad:ac:e3:0d:d6:
47:ce:19:30:a3:58:09:a8:75:4d:1d:9a:e6:2d:bf:
8a:5e:48:8c:b4:93:07:ea:f0:3c:69:d7:1f:e4:bd:
cd:f2:cd:5f:89:69:ee:ae:a1:ce:59:66:86:00:1a:
ce:7f:b3:98:a9:64:27:04:3d:2d:e7:21:15:37:e4:
82:ab:ca:bf:98:a3:43:96:b8:6c:b9:18:57:82:f4:
d2:bb:38:93:09:24:dd:e8:63:f7:5d:43:5c:de:f8:
1a:11:fd:80:ff:17:0f:ec:0e:85:2d:69:00:e2:6e:
a1:2f:bb:70:18:c6:3e:fd:04:e9:72:65:b0:ec:96:
f4:48:28:57:9f:3c:4a:c1:06:7d:a5:93:f5:56:45:
05:4a:d4:1e:ea:a4:97:65:f4:a5:eb:f6:6c:85:cb:
ee:04:5c:79:60:7b:66:69:e4:38:41:dd:d5:ae:43:
1b:80:89:cd:89:3d:39:01:f3:c1:b9:9b:a6:57:50:
af:54:4c:05:ac:70:15:5f:2a:93:5c:7e:bd:63:d1:
4b:df:a9:fa:79:95:30:43:a1:ad:66:02:f5:0e:67:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4D:D9:50:AB:59:E8:2E:AE:6D:28:43:E7:07:B6:F2:AA:0E:F1:99
X509v3 Authority Key Identifier:
keyid:42:51:25:61:FC:4E:E5:4B:79:9C:5A:F4:28:FF:FB:CB:AF:D4:54:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlElYfxO5Ut5nFr0KP_7y6_UVO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/b88c86-9629-43c6-821e-7a72e26c8918/1/QlElYfxO5Ut5nFr0KP_7y6_UVO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:15:fe:e8:2c:90:33:ac:72:5e:a8:dc:b6:6a:99:bf:e2:b4:
13:7c:56:28:eb:b2:70:e0:2f:ef:92:4e:d9:e4:63:ae:3b:b4:
e6:b6:e3:9c:c5:bf:a1:c1:33:15:97:2d:1e:86:fb:6a:57:5a:
d1:09:21:5b:9c:40:4b:35:3a:e1:97:28:b8:7a:68:16:7e:b3:
37:4a:b3:35:46:55:f7:80:60:7e:ca:e1:6a:52:c7:c5:aa:1d:
a2:7e:af:c4:63:d0:a7:69:60:be:4e:00:fb:79:22:c8:60:c6:
da:5a:ed:42:97:65:fb:fe:86:70:12:f4:e0:30:05:59:75:8f:
ae:b3:cd:27:e3:59:12:a4:3a:46:64:9a:86:a4:17:c9:51:7d:
be:84:0c:47:33:b5:c4:37:aa:a1:1a:46:99:a5:54:2b:0a:c3:
80:2c:8f:46:63:79:8f:7f:b3:3e:33:fb:29:2c:72:ac:ae:13:
3b:a9:71:0d:e3:24:dc:1c:92:14:54:ec:b6:f6:f1:1a:92:c3:
56:4e:2e:8b:88:66:98:a6:ea:2e:18:3d:c9:7a:30:03:a5:75:
83:1f:f0:3c:a1:df:b1:76:b5:f5:1d:16:32:f5:83:72:3e:6a:
18:ff:cc:fb:08:a7:d7:bf:da:0f:af:f8:76:35:42:d3:75:12:
66:01:43:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:39:08 2026 by rpki-client