Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
File: qgYKY9op1_lWF6b_u09RzMvHhlE.mft (raw, json)
Hash identifier: wIOlGPU/7axTUxMQVo5NTqUN4+EnZVr+NJaYc5DFA8I=
Subject key identifier: D9:1B:3A:10:F9:4A:E4:9B:C0:5E:D6:6B:15:DF:26:AC:CD:91:F8:B3
Authority key identifier: AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
Certificate issuer: /CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Certificate serial: 01A16F494D5251E5B8AAE9A9E7E2EA745E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
Manifest number: 172F
Signing time: Sat 24 Oct 2026 19:00:37 +0000
Manifest this update: Sat 24 Oct 2026 19:00:37 +0000
Manifest next update: Sun 25 Oct 2026 19:00:37 +0000
Files and hashes: 1: 13KLyP6gZAyfsLYlKYob4QTrBOY.roa (hash: UC903c/BhGuwxFubD7WJePOBlwZE5lZusD52hX3+scI=)
2: JDIQvJOOgOU1198oLwbvPRw_rhI.roa (hash: ULh5noQt/vxcOhnB+/7fGlpNTGaGPtsJ4TS11neT8M4=)
3: qgYKY9op1_lWF6b_u09RzMvHhlE.crl (hash: wVNulMDhkA8VOBx5Ke5lMNahzuGdRvh5CDCIpjDM8eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 19:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:49:4d:52:51:e5:b8:aa:e9:a9:e7:e2:ea:74:5e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa060a63da29d7f95617a6ffbb4f51cccbc78651
Validity
Not Before: Oct 24 19:00:37 2026 GMT
Not After : Oct 25 19:00:37 2026 GMT
Subject: CN=d91b3a10f94ae49bc05ed66b15df26accd91f8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:82:b0:29:05:fd:b3:f4:64:79:9c:e2:47:7e:
4a:21:17:0d:ef:5d:c2:14:b6:11:4f:1f:2d:4a:76:
5b:90:23:9d:d3:e7:4e:3c:fe:7c:da:8f:b9:db:7a:
12:a2:c5:7a:b3:cb:c8:e9:6a:1b:53:c5:8e:5e:16:
95:d2:29:82:45:dc:80:f9:80:3e:6f:09:a8:c4:fd:
6e:cd:e6:07:00:73:23:86:8d:97:d6:fe:fa:3f:bb:
fa:c0:87:1c:c9:d9:3c:2f:21:d6:99:2f:f5:4f:38:
28:e8:db:5f:b9:b1:05:62:91:af:24:6e:94:f2:b9:
8c:ea:9e:c7:b0:0d:00:80:13:ca:8a:b5:61:81:5c:
3f:c7:c2:b7:9d:29:8f:4c:5c:f0:a2:21:a2:ec:20:
d8:35:08:26:df:44:4d:0f:dd:10:25:2f:41:28:8d:
45:b9:7b:13:11:ab:ca:1b:d0:cb:5f:f9:ea:c0:62:
44:e3:9c:41:b3:97:71:b3:a9:fa:0c:e3:1a:c1:5a:
ef:6a:2d:f1:64:1c:45:ae:89:05:b3:a1:72:1b:f0:
b6:4f:04:40:d9:a8:15:41:9a:e3:d2:27:9d:ca:7a:
71:83:e8:60:61:54:ae:19:9f:32:e8:9a:ef:96:a2:
65:17:67:97:09:85:45:75:9c:2a:22:c5:93:6b:8d:
b1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1B:3A:10:F9:4A:E4:9B:C0:5E:D6:6B:15:DF:26:AC:CD:91:F8:B3
X509v3 Authority Key Identifier:
keyid:AA:06:0A:63:DA:29:D7:F9:56:17:A6:FF:BB:4F:51:CC:CB:C7:86:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qgYKY9op1_lWF6b_u09RzMvHhlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/17e82a-0e0c-426b-a170-75fea6a70eb7/1/qgYKY9op1_lWF6b_u09RzMvHhlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a4:b6:e6:a2:ae:18:e9:ce:36:00:51:9b:1d:66:56:b7:98:
87:f0:ed:c6:ca:ec:e0:c0:47:d5:94:15:6a:b5:d4:b9:60:5b:
d4:b1:66:b2:4f:be:28:aa:e2:36:70:4c:32:43:40:04:e7:09:
db:9a:cc:3d:f0:73:3f:71:da:01:4b:6b:62:5f:21:5b:1e:f4:
c4:bb:2a:3c:73:86:b5:cb:a2:71:cf:91:0f:02:cc:69:9f:50:
e7:43:4e:8e:45:45:c1:81:6b:02:36:d2:61:bd:c6:7a:f6:1f:
a3:e6:28:0e:e3:21:6a:2c:9f:78:3c:21:37:d7:dc:dd:3c:35:
fa:2a:ad:ef:f1:12:3b:00:ab:0b:29:6f:da:25:2b:b5:d8:ed:
bc:70:2b:e3:54:9c:46:8c:3d:71:56:80:6f:59:7a:cd:c2:79:
37:62:3d:79:e6:60:4b:86:71:48:9c:6d:62:56:35:4f:0d:92:
76:9e:19:ab:23:2a:05:4e:97:64:e2:c4:b6:d2:dc:64:50:0d:
a9:5a:82:69:7d:e2:b2:59:41:f6:7e:5b:db:97:f6:09:04:07:
90:a4:be:b6:73:20:a5:28:bc:70:f3:26:7a:6d:93:e4:4d:fb:
01:fe:5a:ba:10:06:0c:1c:cc:ad:06:98:1f:9e:e8:9c:cb:45:
c1:17:a2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:11:05 2026 by rpki-client