Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File: qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier: UcXTCdl2l++kkZICvm+r+M4cbTMJytt7BSl1P61QUmo=
Subject key identifier: 34:D7:A8:E7:A6:62:D3:EE:B5:D6:A7:F6:CF:FF:7A:2B:02:79:80:AB
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 01A01FB0A980DF32BDC5BF3E11147D6755B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number: 15F9
Signing time: Thu 20 Aug 2026 15:01:06 +0000
Manifest this update: Thu 20 Aug 2026 15:01:06 +0000
Manifest next update: Fri 21 Aug 2026 15:01:06 +0000
Files and hashes: 1: FNkHYRMJRFCiIlaK4G8JgEPS518.roa (hash: g2wnBjvuJyEP0SF26uwzawUig5FkEl7CQILghR3/QXg=)
2: _eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa (hash: 4hxoG4bKraWNMIF1RfBWFI69iacKZ3rVBDrPXr2dCEQ=)
3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: PO116eh09JHvA6M0nCmIMBIk3jWx40VD9afM2mpgQvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:b0:a9:80:df:32:bd:c5:bf:3e:11:14:7d:67:55:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Aug 20 15:01:06 2026 GMT
Not After : Aug 21 15:01:06 2026 GMT
Subject: CN=34d7a8e7a662d3eeb5d6a7f6cfff7a2b027980ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:89:00:f8:8f:ce:89:8f:4d:f4:d9:36:f8:db:
d2:f6:80:c3:1c:f6:0f:5e:bd:47:f9:5b:1c:24:52:
de:f2:e2:4d:bc:6c:b3:80:c2:ba:55:fe:95:c3:bb:
a0:76:31:e2:ab:c0:f4:46:f8:61:90:e7:a1:97:2d:
c1:f8:f5:aa:f9:fd:d9:09:72:7d:5c:19:67:57:ba:
71:94:67:6f:78:da:d7:9d:19:d6:2e:07:ec:fe:29:
ff:30:f6:19:27:82:d5:ce:73:39:21:ed:6d:e1:22:
23:f7:97:a5:7e:2c:d5:f3:14:2c:40:2d:2b:76:50:
96:8d:4d:84:3a:a5:54:eb:9b:49:60:8d:17:3b:b4:
34:b0:ea:f3:b4:69:aa:b7:56:6b:d2:90:69:93:ae:
d0:3e:17:44:bf:d5:ed:0d:96:da:52:64:1b:f5:5d:
09:1f:2f:08:a4:81:43:1b:66:71:98:ac:ba:1c:dc:
01:93:fe:d2:a6:dd:24:81:76:4e:70:e7:02:d1:10:
cc:9f:28:9e:04:cd:df:a5:ac:a2:8f:13:49:c5:de:
f2:56:7e:cc:5d:4d:39:6e:b6:7f:54:33:67:e2:96:
3b:37:39:eb:d7:35:93:bc:33:88:df:50:53:45:0c:
24:c5:28:b8:03:c3:df:8a:9e:22:0a:30:92:4a:94:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D7:A8:E7:A6:62:D3:EE:B5:D6:A7:F6:CF:FF:7A:2B:02:79:80:AB
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4b:bb:45:f0:a1:c4:ae:98:27:dc:4f:26:9a:ed:2e:f7:4b:
a1:a6:c1:b9:9f:04:0a:11:98:96:95:b0:81:2f:3e:cd:60:56:
f3:fe:b2:31:fa:a4:b1:39:c5:3a:61:1b:72:5f:73:cb:03:3c:
c2:f6:07:ae:18:7c:88:8d:ea:75:5c:25:72:a0:f0:b6:a8:e6:
62:f7:9b:77:55:9e:c5:9b:2f:03:a0:2a:2e:86:b8:f2:8b:01:
93:a7:e8:73:ab:14:44:10:fb:d0:46:41:f1:15:f8:9f:3a:6d:
4c:bf:b6:2b:10:c5:f2:3d:3c:a6:64:6f:09:1a:30:40:b9:eb:
38:f6:19:7f:e7:c6:40:a4:d8:52:12:6e:9b:89:94:c2:59:c7:
bf:85:45:dd:0a:5d:15:b1:3f:7d:c0:0f:9f:c9:17:23:18:a2:
a6:cf:eb:52:cf:45:45:79:cc:bb:7c:d0:a9:80:f0:c1:64:a6:
9e:e7:71:26:e9:c5:98:62:66:76:61:b2:79:f4:57:92:38:dd:
87:e1:0a:c9:48:3e:99:d6:28:0e:be:d9:5b:5f:23:e9:cf:fa:
a9:61:92:6c:af:2f:c4:4f:ed:eb:40:51:44:5f:f4:15:86:72:
56:a9:53:e8:fa:f7:a6:e6:b3:af:62:51:b0:49:50:91:14:fe:
ec:8c:07:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:29 2026 by rpki-client