Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
File: qltGOxeiXraN6recsPmJ79fkihU.mft (raw, json)
Hash identifier: Xg/mAElia/SeGg/YM32P+SuUnbim04ehEbuLmBspja0=
Subject key identifier: 61:4E:04:8F:DF:E0:84:F6:19:0C:2E:A8:32:D6:7D:F1:D4:A4:41:23
Authority key identifier: AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
Certificate issuer: /CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Certificate serial: 01A0EC2EFEAA0C92C391F555E4BC28E3EDAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
Manifest number: 0327
Signing time: Tue 29 Sep 2026 08:01:37 +0000
Manifest this update: Tue 29 Sep 2026 08:01:37 +0000
Manifest next update: Wed 30 Sep 2026 08:01:37 +0000
Files and hashes: 1: bN_JbzQj2A8IvSsLV68QsClGiQY.asa (hash: xolsuAJOBeuMvNRpodvDEbIRMgGi/Im1/gCqvItApmY=)
2: qltGOxeiXraN6recsPmJ79fkihU.crl (hash: /Y4SISjuc5/UAFX87h2Mk9jFS5BehxlPkDqHDn5jA+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:fe:aa:0c:92:c3:91:f5:55:e4:bc:28:e3:ed:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa5b463b17a25eb68deab79cb0f989efd7e48a15
Validity
Not Before: Sep 29 08:01:37 2026 GMT
Not After : Sep 30 08:01:37 2026 GMT
Subject: CN=614e048fdfe084f6190c2ea832d67df1d4a44123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d8:1f:d2:0f:2d:8c:00:b9:b5:07:c6:8d:d8:
4f:b3:39:27:5c:81:4f:22:8d:70:d6:c8:ce:cf:ce:
4d:14:c4:d0:30:4c:22:f2:f5:30:08:39:e4:5f:ba:
c4:16:25:cf:ad:74:46:87:f7:95:c0:08:f1:37:7a:
37:33:19:14:8c:35:f2:62:86:2c:88:e3:37:ad:3a:
40:3f:f8:ad:d5:48:54:29:3e:5c:c2:a2:28:ed:20:
48:40:82:c6:39:56:18:f6:b4:65:90:99:fa:f7:fa:
f3:b2:c2:ee:6b:a8:f9:90:4c:ee:bd:d5:75:1e:ce:
3b:30:43:fc:3f:8a:4e:f0:2f:96:95:c9:6c:2c:e0:
33:db:bf:08:dd:31:8b:ef:e9:0f:1a:68:8c:ca:84:
9c:a8:2e:74:ce:d8:15:e1:dc:3a:1c:95:75:f7:79:
56:9b:f8:7d:44:60:b1:a1:95:d2:a3:5d:98:fb:ee:
12:c3:5a:e7:77:8b:3e:fe:53:16:9a:d0:c7:14:69:
bb:88:0e:24:01:a0:28:ab:45:51:40:dc:d7:04:f5:
f1:45:d1:13:7c:d5:92:9e:51:1c:5f:c1:67:62:fc:
26:ea:6f:79:80:c2:f3:e8:59:6d:26:ce:3d:e6:24:
f8:93:0f:dc:20:89:39:af:23:3c:ca:71:2f:ec:bb:
5f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:4E:04:8F:DF:E0:84:F6:19:0C:2E:A8:32:D6:7D:F1:D4:A4:41:23
X509v3 Authority Key Identifier:
keyid:AA:5B:46:3B:17:A2:5E:B6:8D:EA:B7:9C:B0:F9:89:EF:D7:E4:8A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qltGOxeiXraN6recsPmJ79fkihU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/1bdaeb-2f1c-4d8c-b4bb-c7e7115f4a2e/1/qltGOxeiXraN6recsPmJ79fkihU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4c:d3:d5:14:ee:56:ba:d2:68:8a:c1:7c:a4:74:66:f2:27:
90:b5:1c:b1:ee:3b:cc:ee:e0:0c:ae:f5:38:8c:df:48:71:0c:
4d:79:55:02:13:44:3c:09:03:9d:9d:db:b7:ac:f5:99:66:7f:
fd:96:70:05:b3:b4:ff:70:8b:05:b9:0e:6c:67:8b:e9:2f:e9:
8a:39:af:90:c1:11:e6:f3:0e:49:5f:1a:a9:96:8e:ee:d6:4a:
c8:61:fb:79:4b:e4:9a:7e:e3:fd:24:40:01:6d:d1:c9:7f:db:
a1:56:f4:a8:81:76:1c:4c:ca:78:9d:80:27:dd:0e:eb:ed:e9:
ef:10:82:fc:58:92:12:ca:2d:e9:74:67:92:2f:6c:48:7e:b9:
b4:70:b8:15:2c:8b:84:e0:27:ea:5f:41:cc:f0:e8:7e:21:45:
b8:06:c3:f9:41:50:de:c5:e5:ba:b8:3f:04:32:98:c6:27:67:
6a:db:31:ab:9f:a1:a6:b8:9a:df:65:00:79:ff:a6:e1:c5:1c:
7c:a8:ce:ce:56:3b:8a:66:13:31:1b:1c:7d:9e:11:15:52:64:
b1:87:5c:f7:ec:31:c9:df:4d:bb:cc:e6:78:19:8a:c7:b0:18:
d0:d3:bb:53:89:ea:dd:bb:da:86:94:89:39:48:61:62:4d:52:
15:ee:81:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:22:40 2026 by rpki-client