Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: D6FUUFbU7RerPkdkF7lTrxWELUbZLkTh22p+vRUJDss=
Subject key identifier: B1:63:F2:EA:83:C1:55:80:65:74:3F:32:10:5A:43:DA:7B:02:03:49
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 01A0E81CB9ADBAA0C4B8DB9763EFC63B207B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 162D
Signing time: Mon 28 Sep 2026 13:03:11 +0000
Manifest this update: Mon 28 Sep 2026 13:03:11 +0000
Manifest next update: Tue 29 Sep 2026 13:03:11 +0000
Files and hashes: 1: 0EzmePks-egIiJdpcXeEPBWaiJQ.roa (hash: VNTL9T5egZkLrCiJmBLxazk1HQGTpK6/iS8WwNYTg14=)
2: 97p9ZUhGZG6kJjtKp2TuV47gh5U.roa (hash: x88qWTYqI0aG2w0GajPiY4NGO9pvbzLLCkLeMTUd2t4=)
3: AG_3AL0BiXNne_-iEtcT4CW3QFY.roa (hash: MXbxSxIompr7PTpUg8mtZo8EDK4eK9dEM10GngyQSBQ=)
4: R3GyXBYJhMHhgq5yrGVUK3jdnkA.roa (hash: g1FeF6e8PlISr+mSxj+h+WNftfc+dabb3ghrlPO9BE0=)
5: S1xGdMwCL7zcvvXwmIxBk0TUOII.roa (hash: Dt+ahUx8ad2ugzMhIwhEEjwNwt3G09wi3vOVTLugUWQ=)
6: XundD1ATPkgExkAuZ9fhY2EBgJI.roa (hash: +uqd1waFJ4ZIkhGQA2rPiPNb2R7bE9L91cSGBFAjyVM=)
7: p0lVyIeHUzTGYLAW5RWLMmU0VEI.roa (hash: RTQGUQH3DHZP7KXMTE9osS1yh94s1ux67e3vp2zT3Iw=)
8: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: s0NVngrEjgiTcc7YB9N+h1vicp1XHpeAM+OYyL4jzQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:b9:ad:ba:a0:c4:b8:db:97:63:ef:c6:3b:20:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Sep 28 13:03:11 2026 GMT
Not After : Sep 29 13:03:11 2026 GMT
Subject: CN=b163f2ea83c1558065743f32105a43da7b020349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:7a:d9:d6:48:cc:b5:2b:8a:10:7d:2e:2d:
0d:77:45:e2:6a:b5:63:ab:8b:27:37:05:b4:14:d9:
8f:a8:b5:1d:bf:0a:40:88:73:df:b7:13:84:36:69:
0b:53:89:f8:51:0a:72:1a:c3:95:c7:7b:20:7b:d0:
87:1a:c3:9c:8c:38:d2:d2:d5:d6:b4:33:a9:35:70:
48:46:28:65:9f:63:ed:70:c0:e6:b1:f9:94:ff:f2:
d6:f5:d1:fd:f0:fb:1d:0c:ec:d3:68:fa:27:46:f0:
f7:47:05:02:61:fd:d5:d0:5f:00:b7:a7:f5:65:86:
2a:0e:5a:26:46:e4:bf:bb:d2:f8:1e:c9:28:d4:01:
49:fc:03:c1:9d:9b:27:4c:cc:96:30:0d:ba:cb:be:
8c:d1:24:47:a7:70:48:57:d6:68:45:37:66:12:c5:
47:4f:6d:5b:14:d0:e5:72:5a:29:4a:62:8e:9d:fb:
56:14:1b:15:46:37:b3:70:08:d2:8f:d3:a3:2c:41:
58:4f:d9:d1:52:68:14:d3:f1:51:32:cb:97:5e:2e:
a3:8c:80:9f:98:41:b3:b5:00:c9:9e:49:43:a0:ce:
6a:0d:2a:a5:9e:28:15:f8:c6:4f:7a:b7:c3:8c:ef:
b0:7e:57:53:e9:08:59:2b:2c:dd:e5:e9:13:2b:df:
f3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:F2:EA:83:C1:55:80:65:74:3F:32:10:5A:43:DA:7B:02:03:49
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d9:5c:19:cf:81:ed:cf:35:38:87:b0:5b:a5:a8:fc:58:70:
a1:ae:17:15:c7:99:76:cd:27:c7:02:dd:2b:29:22:c5:c1:0a:
b8:85:8d:c0:2c:6b:2c:bc:b8:16:1a:1b:21:33:34:73:4c:b4:
bf:0c:88:b1:6b:37:96:a4:58:4e:15:1d:af:6d:29:dc:eb:45:
a1:79:70:2d:e0:f8:b7:8d:ff:a0:e6:1e:37:8b:81:31:a1:39:
a0:65:65:f8:7f:46:c0:8c:76:d8:6a:84:0c:12:8d:13:98:05:
aa:83:33:b1:84:3e:b9:3b:1e:2e:08:de:5e:a8:d5:e5:12:57:
5d:5c:3c:4a:59:b0:0b:cd:53:c9:7d:c8:30:0e:31:1b:a2:44:
37:b2:6b:65:cc:99:62:fd:07:52:6e:d2:b3:51:b7:20:2a:7b:
ab:17:d2:3b:0e:7f:7d:b3:a4:3d:5c:ba:90:dd:53:82:6d:5d:
d9:37:36:4f:2d:84:e2:16:f0:95:cf:84:d8:68:77:92:9b:85:
e9:13:ca:ae:94:c3:7c:eb:e2:dc:21:36:ab:38:60:27:ab:c4:
b3:cb:39:2a:f5:10:0b:69:51:01:2b:d8:b8:6d:c4:98:81:0f:
42:6a:55:d5:a5:f8:b3:5b:b9:bc:ad:19:07:d2:26:4d:01:fa:
5a:14:cb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:31:39 2026 by rpki-client