Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: FwI4shxXQwA26Ribf/N8zisWA0UI1MNiOnUYqpuvLIM=
Subject key identifier: FA:23:64:32:84:C8:E6:4F:D9:99:18:EF:71:44:D1:ED:FB:1A:CA:1D
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 01A17137B0D132EE6D210C1E53878D50B6EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 1730
Signing time: Sun 25 Oct 2026 04:00:37 +0000
Manifest this update: Sun 25 Oct 2026 04:00:37 +0000
Manifest next update: Mon 26 Oct 2026 04:00:37 +0000
Files and hashes: 1: 13KLyP6gZAyfsLYlKYob4QTrBOY.roa (hash: UC903c/BhGuwxFubD7WJePOBlwZE5lZusD52hX3+scI=)
2: JDIQvJOOgOU1198oLwbvPRw_rhI.roa (hash: ULh5noQt/vxcOhnB+/7fGlpNTGaGPtsJ4TS11neT8M4=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: 0LYMj1fUsdDcVmK6LC9UVJfaDeUzZpXjJSIIUeZOPdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:37:b0:d1:32:ee:6d:21:0c:1e:53:87:8d:50:b6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Oct 25 04:00:37 2026 GMT
Not After : Oct 26 04:00:37 2026 GMT
Subject: CN=fa23643284c8e64fd99918ef7144d1edfb1aca1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:f7:90:15:4c:be:d9:6b:3e:55:94:b1:4e:
42:46:75:5f:1f:9b:43:1d:c8:06:e7:36:7c:f6:4c:
db:c1:ce:71:e2:9e:34:62:9b:34:a4:8f:5a:dc:72:
15:bb:97:18:ab:f6:ce:06:a9:ff:c0:39:1c:c9:f3:
ec:3b:a4:d8:19:78:2c:b1:06:29:7d:d7:ef:71:ae:
96:d8:e2:7a:57:2e:70:03:10:4e:05:0d:f5:3b:e8:
8b:18:38:df:9c:78:bf:a7:02:e4:e6:c8:a9:3f:73:
40:0f:e6:d1:15:a7:a4:ba:a0:c4:4f:54:4f:f4:cc:
d0:21:b5:cb:8f:fa:1d:ae:c0:52:4c:17:73:7b:6b:
7a:e4:c4:25:cb:37:e8:79:e6:97:24:75:2b:da:2d:
b6:07:34:88:b0:af:8e:8a:ec:df:ca:b7:f8:3a:b0:
19:55:6b:ea:b6:b3:8e:5b:05:8b:45:db:81:e6:3a:
fc:8f:3e:11:69:c5:2a:fb:e4:a7:77:42:17:56:d2:
b9:45:00:0b:5b:c5:9a:58:09:66:22:86:b2:b5:ed:
a9:68:1a:75:18:cf:dd:e1:3e:d3:6c:13:16:d3:ed:
93:69:2c:2a:9c:ad:aa:1a:06:de:f8:da:2f:6e:fd:
ce:e8:d8:ec:85:d8:a6:60:3b:63:b6:11:ac:ef:c8:
af:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:23:64:32:84:C8:E6:4F:D9:99:18:EF:71:44:D1:ED:FB:1A:CA:1D
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:a7:72:d8:44:92:96:7b:4a:2f:e3:70:e3:a3:5d:e2:f6:00:
54:a5:be:88:e9:4d:9a:c8:c2:e4:b6:85:01:5a:66:3f:2f:eb:
45:68:d7:86:72:66:8f:40:60:aa:40:8a:79:56:0b:b5:e7:37:
d0:de:91:5c:0a:8b:ef:82:2d:f8:ac:23:a7:16:d7:98:3f:a1:
35:69:6f:1e:b7:b6:98:ee:d3:4c:9f:03:04:3f:80:d5:90:bd:
a6:a5:6a:9a:ee:84:d2:88:a0:37:a3:4a:cd:61:fe:5a:b8:b1:
39:d1:49:86:6a:ec:00:eb:b8:80:c2:23:26:fb:16:bb:df:8d:
35:b0:28:22:11:db:af:22:75:05:fc:75:d6:87:d6:fc:a2:1c:
94:5c:55:8d:81:44:a2:0f:7a:f8:39:0c:cb:8c:33:98:4f:14:
7c:2d:ad:69:cd:5d:5d:32:2b:5f:18:5f:47:2c:db:cd:5e:14:
32:20:54:29:d5:22:b6:bc:08:a8:39:7f:0a:4f:ef:13:98:fc:
a3:25:a0:88:75:70:0a:09:74:b9:8c:8c:c0:d2:5e:85:2f:85:
a4:91:f4:7c:3b:eb:0f:89:47:15:a2:be:39:c2:8d:1b:bc:ca:
b0:78:fa:72:8c:5a:39:58:01:7a:2c:a5:1f:4a:78:50:a1:a2:
91:af:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:14:01 2026 by rpki-client