Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
File: qltHHQugidnp9GwpExlnT6yBKNA.mft (raw, json)
Hash identifier: vnhLTFakyeIl3G4hWRbH7PVfL627VdNRA9Uoc4b0lt8=
Subject key identifier: 75:57:34:42:E8:1F:5C:22:F8:9D:05:AF:FE:DB:D9:2B:3C:68:46:03
Authority key identifier: AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
Certificate issuer: /CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Certificate serial: 01A02AD8BE6DCEA86AF8EB90ECD66DF71778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
Manifest number: 1068
Signing time: Sat 22 Aug 2026 19:00:42 +0000
Manifest this update: Sat 22 Aug 2026 19:00:42 +0000
Manifest next update: Sun 23 Aug 2026 19:00:42 +0000
Files and hashes: 1: RGHMhabHZkPW5wXprVh6WUeUNEU.roa (hash: aWxpktwD4HwK4DqUq/i3jSDZlGsjYGbb6rrk+6zxpz0=)
2: hW9pmZmoOAPv4EQxUHQXTXDJr6s.roa (hash: mjwhxdNEgH8aH/IfZWkqyz4fW356i+YVNu/YE2e6m8A=)
3: qltHHQugidnp9GwpExlnT6yBKNA.crl (hash: ReXC81Pz6aoojhM65/oGCQ3N0FbxvZnlS8DMCZwhBt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 14:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:d8:be:6d:ce:a8:6a:f8:eb:90:ec:d6:6d:f7:17:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b471d0ba089d9e9f46c291319674fac8128d0
Validity
Not Before: Aug 22 19:00:42 2026 GMT
Not After : Aug 23 19:00:42 2026 GMT
Subject: CN=75573442e81f5c22f89d05affedbd92b3c684603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:01:31:a0:40:ae:e7:4e:8d:b8:73:04:c6:27:
6f:40:39:6a:6e:e2:c5:78:18:24:d3:5c:13:fe:17:
a2:00:80:7d:56:a7:2b:fa:d2:28:e3:07:b1:fa:e3:
7d:df:5b:f3:85:6a:54:42:30:ff:84:3c:a4:97:fd:
8f:d3:75:15:9f:4e:91:14:54:37:9a:6f:2f:cb:6f:
ac:58:99:25:f7:aa:32:2b:29:d2:a1:a4:4f:c1:92:
cb:4f:79:fb:6d:9f:06:dd:16:7e:16:82:e9:b6:2d:
b5:d3:2a:a8:85:89:81:a9:bb:d8:ec:c6:65:42:58:
29:a2:81:c7:76:29:f5:6b:7d:69:f9:7d:77:9a:9b:
1d:5e:05:14:14:b9:66:64:83:13:34:fd:2e:c2:d5:
3a:8b:1c:e2:e0:66:ef:11:bd:61:de:b3:e6:f4:6a:
d6:ab:da:26:24:eb:04:bb:5a:67:81:11:29:0a:8e:
ad:34:e2:56:bb:6f:7f:e6:f5:fd:27:8c:eb:d2:07:
e0:0f:ea:95:89:69:0a:18:16:fa:13:11:46:5e:1c:
0d:9f:5c:c2:ab:5d:99:d7:44:f0:cf:1c:00:4b:89:
a0:e1:dd:b6:f3:4e:b1:3b:73:45:65:2f:28:2d:c7:
98:67:cc:e2:6a:97:e1:19:f7:27:01:79:16:0e:1f:
de:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:57:34:42:E8:1F:5C:22:F8:9D:05:AF:FE:DB:D9:2B:3C:68:46:03
X509v3 Authority Key Identifier:
keyid:AA:5B:47:1D:0B:A0:89:D9:E9:F4:6C:29:13:19:67:4F:AC:81:28:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltHHQugidnp9GwpExlnT6yBKNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4be027-88e9-47e3-bb88-6f2e2529be82/1/qltHHQugidnp9GwpExlnT6yBKNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:38:e4:c0:15:fc:65:8d:04:48:b5:30:ef:d5:e8:b6:85:6d:
fa:49:66:c7:6f:cc:f6:e1:7f:d1:02:2c:2d:be:49:3a:ce:bb:
24:df:c6:e4:27:c5:d0:c8:fe:d9:1f:c9:46:11:1b:9d:26:76:
e9:f2:5c:ac:9f:e0:9d:76:a7:e4:f4:1d:e3:53:c2:71:36:0e:
dc:55:af:a2:08:3f:ec:2a:b8:4f:2e:9d:d5:2c:35:01:a9:15:
28:5a:b8:56:27:63:fe:77:c5:ff:67:99:b8:52:14:d3:29:ad:
3f:d5:82:23:02:80:66:4e:10:38:ce:81:d3:63:09:a6:db:79:
1e:20:f9:6f:31:dc:b5:69:4b:58:38:b0:be:c1:f1:e2:a0:3a:
2d:df:19:a9:62:de:ae:b2:40:f4:0b:fc:19:ca:ac:9d:43:79:
f1:0e:70:2e:dd:6a:90:7f:6f:98:f5:c4:e2:88:19:3f:80:10:
57:76:e8:ca:82:8f:b2:5b:c9:61:d2:bc:f4:94:ef:f2:ff:e7:
16:02:2f:80:b4:91:7d:42:b3:de:af:db:79:02:9f:39:58:4d:
ba:92:29:db:c5:64:0c:56:09:a3:3d:50:14:5b:d7:97:cc:bb:
d6:92:a2:7d:cf:de:79:c1:10:7a:2c:5c:ee:26:28:9d:e4:8d:
2a:11:83:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 00:02:42 2026 by rpki-client