Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
File: qnv9Qg21yuutoaIFXYe8faKwnAc.mft (raw, json)
Hash identifier: aU19hlf20D8fxzYm54HyGTQXsJJTn1iRuXsWtGdWsdY=
Subject key identifier: 2D:4D:89:CD:20:02:92:9A:E8:92:DC:40:07:29:47:A4:81:1C:9E:E2
Authority key identifier: AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
Certificate issuer: /CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Certificate serial: 01A17C974D43B57420E1AE4D9DF8E62A842B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
Manifest number: 0565
Signing time: Tue 27 Oct 2026 09:00:52 +0000
Manifest this update: Tue 27 Oct 2026 09:00:52 +0000
Manifest next update: Wed 28 Oct 2026 09:00:52 +0000
Files and hashes: 1: qnv9Qg21yuutoaIFXYe8faKwnAc.crl (hash: RJ8GnH2k3OtT7lPMC910bKGdXnnL7EIiedtzYZSYyE4=)
2: tHTr07ZBhUD8R_5r3PxqgiRA1CA.roa (hash: /8DCcSpchfgecurYBVc/dGLfkDOCG1kP3rKMMF22VmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:4d:43:b5:74:20:e1:ae:4d:9d:f8:e6:2a:84:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa7bfd420db5caebada1a2055d87bc7da2b09c07
Validity
Not Before: Oct 27 09:00:52 2026 GMT
Not After : Oct 28 09:00:52 2026 GMT
Subject: CN=2d4d89cd2002929ae892dc40072947a4811c9ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:06:90:f7:4e:36:35:c1:dc:27:de:02:46:
1d:24:c1:ed:c0:f8:f9:9d:ce:17:7a:59:c5:6d:fb:
a1:53:c3:b0:0a:53:a0:65:04:ac:8b:c4:1a:58:da:
4a:30:d4:c1:86:6b:1e:4d:80:eb:be:eb:f8:0a:ee:
c2:91:7b:b1:dd:e6:aa:c5:2e:e3:46:7e:87:7c:b7:
dc:b0:fa:32:ea:be:b5:bb:a3:1e:e0:cb:a0:d3:53:
5d:16:b3:72:70:17:40:43:82:0c:e1:0a:2d:d7:df:
f8:04:63:d4:29:71:3b:73:4d:d5:70:a3:dd:d9:09:
ee:62:78:c1:00:67:e1:9c:7a:18:c4:40:c4:f4:24:
d7:27:20:b7:ca:42:09:df:0e:bf:cb:03:fa:2e:a4:
81:68:05:6b:a2:25:44:58:de:8a:eb:7b:86:1e:f7:
bc:80:07:6f:b4:79:dd:ee:d6:5c:6c:63:b2:1b:42:
d5:eb:f9:7a:1a:98:e4:3c:63:ea:b5:81:62:44:d3:
0a:37:c7:f6:31:45:6b:94:f8:63:e1:af:82:5e:86:
44:9b:6c:10:9d:eb:5e:00:94:89:b6:72:57:25:56:
ed:a2:4b:10:7a:28:49:68:d5:77:0f:5c:fa:33:31:
41:e0:32:d5:0f:d8:3e:d8:6d:cd:ba:f1:aa:ae:d1:
ca:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:89:CD:20:02:92:9A:E8:92:DC:40:07:29:47:A4:81:1C:9E:E2
X509v3 Authority Key Identifier:
keyid:AA:7B:FD:42:0D:B5:CA:EB:AD:A1:A2:05:5D:87:BC:7D:A2:B0:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qnv9Qg21yuutoaIFXYe8faKwnAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/55bd95-c637-451b-b07c-79b409c1bd38/1/qnv9Qg21yuutoaIFXYe8faKwnAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:28:b2:b2:22:40:38:a5:c7:c3:43:5b:8c:f3:3c:a6:66:83:
45:10:2a:5c:5d:1a:1f:93:f0:a3:6d:be:68:7a:8c:6b:e5:3a:
1f:a9:6a:f4:80:45:1f:83:75:66:c7:83:19:99:19:0e:e3:09:
bf:00:53:ea:6f:ea:a8:5a:f4:3a:a0:d6:6d:cf:07:48:39:16:
6b:9f:54:be:fa:03:75:1a:fb:66:77:3c:b6:8d:71:1d:80:d1:
81:da:94:f6:4d:6d:49:16:a7:db:7d:93:4a:d4:b6:9f:21:ab:
d4:96:bb:19:59:ca:68:1a:47:c7:07:f4:09:e6:cc:92:21:27:
5d:8c:8d:b9:28:5e:b0:cc:6d:50:49:94:5c:cc:1c:41:b0:86:
86:83:04:5f:84:44:d6:af:12:9b:0a:5f:b0:f3:3e:1e:60:85:
c9:22:32:1d:5c:b6:77:6b:5c:d0:25:0a:29:85:b0:39:81:ae:
55:4d:f6:fd:73:15:ca:af:fa:1f:69:8c:ae:4c:b6:f7:30:01:
9c:56:08:f1:65:b4:7b:e4:16:d3:f3:98:06:34:06:ce:0e:8c:
b1:f9:ed:57:d8:7f:86:26:37:9a:7a:6e:60:7a:c9:75:3d:0f:
06:0c:a4:fb:9a:ef:5f:67:10:d8:9c:9b:c2:c9:04:1f:00:6c:
3f:a0:2e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:42:31 2026 by rpki-client