Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
File: qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json)
Hash identifier: c603nmDGG0DFarEhPuGFAjDheTVAl4/YO5xd7OdNUN0=
Subject key identifier: 66:B9:BF:25:B3:44:42:1E:83:F5:90:C1:F1:F9:2C:58:70:B0:27:33
Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
Certificate issuer: /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Certificate serial: 01A0F00B4748286B2F7EC417E7C099BBFFFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
Manifest number: 0329
Signing time: Wed 30 Sep 2026 02:01:06 +0000
Manifest this update: Wed 30 Sep 2026 02:01:06 +0000
Manifest next update: Thu 01 Oct 2026 02:01:06 +0000
Files and hashes: 1: bN_JbzQj2A8IvSsLV68QsClGiQY.asa (hash: xolsuAJOBeuMvNRpodvDEbIRMgGi/Im1/gCqvItApmY=)
2: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: 4VuIS0N1yIadVEt3ohVZS/GoyfB0TPxFZKYvQwrqgVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 20:14:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:0b:47:48:28:6b:2f:7e:c4:17:e7:c0:99:bb:ff:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Validity
Not Before: Sep 30 02:01:06 2026 GMT
Not After : Oct 1 02:01:06 2026 GMT
Subject: CN=66b9bf25b344421e83f590c1f1f92c5870b02733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:3c:26:fd:de:25:3c:eb:e7:31:c9:2c:01:
95:52:5a:f0:1d:38:fa:34:16:20:40:6f:23:90:2b:
bf:cd:c6:f6:26:2c:dc:a7:26:55:3e:4a:4d:ec:59:
13:a5:3b:4c:80:23:b8:a2:59:26:97:8a:c3:a7:5b:
b5:42:2c:fd:34:c3:ce:80:78:01:87:4d:4d:c9:e1:
6f:47:fc:89:fa:e5:9a:ca:5f:64:fc:91:a3:b0:f9:
3e:1a:c7:4b:59:6a:01:7d:85:a0:c7:2e:dc:34:3b:
fc:25:e6:95:3a:8e:99:e9:48:22:0f:3d:fc:4c:a9:
21:a3:91:5d:ac:c0:ba:62:d7:33:a1:bb:11:28:b6:
bf:ed:92:a5:6d:e2:a3:60:95:38:d3:ff:f3:d4:37:
4c:71:11:f8:e4:f8:44:17:bf:82:ce:00:6b:65:36:
6b:ed:9e:97:87:d6:ff:96:72:90:08:74:81:a4:54:
a1:75:8c:6f:b7:b5:b7:c6:3e:c5:9f:fe:14:5a:10:
ea:b9:eb:f1:58:fa:f6:8b:e2:d4:4f:b9:39:8a:29:
c9:39:80:45:3b:af:aa:7e:a5:eb:43:9e:de:5b:95:
31:57:6e:f5:31:36:8d:5f:ff:7b:e2:5e:2f:be:a8:
40:ab:0c:cc:60:31:1a:7f:32:1f:4e:c8:24:01:d5:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B9:BF:25:B3:44:42:1E:83:F5:90:C1:F1:F9:2C:58:70:B0:27:33
X509v3 Authority Key Identifier:
keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9e:31:bc:9d:99:e6:96:bc:42:51:2d:22:ae:a3:47:da:c1:
97:61:48:b8:9f:8e:aa:41:d0:c4:d6:83:fe:20:95:fd:3b:0a:
55:11:91:78:10:39:fe:89:4d:cd:10:cd:e1:62:0d:64:6c:5f:
73:50:74:4f:01:91:b1:b2:e8:8b:b7:b9:29:63:76:12:25:e5:
bc:ec:bf:36:d7:3b:ff:db:e7:8b:7c:2d:a5:3b:00:ce:cd:7e:
db:9b:16:be:39:5a:80:32:aa:a1:f8:72:c6:f4:a9:aa:08:17:
9e:0b:c0:4c:53:2c:2c:c6:64:73:6a:97:69:b1:37:52:e5:74:
8c:90:40:85:8e:b8:5d:c3:da:d5:51:86:e5:45:ac:a3:8f:44:
3e:69:50:3a:4f:d4:e3:10:68:8d:85:7e:3e:de:b5:80:99:c3:
9e:77:b2:03:20:d4:98:1b:ea:a0:ef:90:6d:05:39:84:75:8b:
17:f5:83:f0:9c:63:4f:b8:08:c3:f7:b0:dd:f2:6e:65:ef:80:
8d:f7:25:b8:3e:3d:da:ff:e5:5d:42:4b:03:c7:5b:ae:d5:af:
06:0b:68:e6:48:0e:f5:dd:28:aa:a0:7a:0b:16:7b:9d:28:db:
5b:6b:ab:a5:07:73:61:b8:8b:cd:71:bf:6f:df:f0:4f:48:c5:
30:a5:27:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 06:15:25 2026 by rpki-client