Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
File: qpyclaWMOBG9qV3IPC5IeiAMTCU.mft (raw, json)
Hash identifier: g9EAaNFHPWICIXM9PKHD9Q9lKxsnUwY7YhXzMQR5TOo=
Subject key identifier: 5B:95:D9:8A:7C:3F:EF:46:3A:25:45:86:84:A8:66:87:70:70:15:EB
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 01A10F28137D23DD182534679B29FDA42589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
Manifest number: 1675
Signing time: Tue 06 Oct 2026 03:00:46 +0000
Manifest this update: Tue 06 Oct 2026 03:00:46 +0000
Manifest next update: Wed 07 Oct 2026 03:00:46 +0000
Files and hashes: 1: FNkHYRMJRFCiIlaK4G8JgEPS518.roa (hash: g2wnBjvuJyEP0SF26uwzawUig5FkEl7CQILghR3/QXg=)
2: _eAhrIruhIkJvgQ7XYhpOhkBn5Q.roa (hash: 4hxoG4bKraWNMIF1RfBWFI69iacKZ3rVBDrPXr2dCEQ=)
3: qpyclaWMOBG9qV3IPC5IeiAMTCU.crl (hash: lpyGbC/ib1xxcamMJoFFg6gyc6gU1TP+zYZqYKms7B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:28:13:7d:23:dd:18:25:34:67:9b:29:fd:a4:25:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Oct 6 03:00:46 2026 GMT
Not After : Oct 7 03:00:46 2026 GMT
Subject: CN=5b95d98a7c3fef463a25458684a86687707015eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e0:91:a4:ce:51:f0:23:8c:08:de:5f:68:d7:
f5:15:31:ca:25:fa:cc:ce:e5:64:00:26:fc:c4:98:
41:85:59:96:3f:71:d7:20:7c:7b:ad:46:80:13:99:
f7:56:e2:48:a3:54:1b:39:22:4d:14:ae:d3:e9:68:
83:71:50:65:70:1f:3e:1a:82:44:74:62:42:f3:8e:
c1:74:0e:1d:d8:e0:41:df:83:7e:dd:6e:84:75:b8:
38:4a:28:cd:8c:18:19:e3:a6:34:72:b1:a9:98:5f:
a6:40:90:52:cb:0a:bf:c5:b4:c7:fd:ae:eb:00:80:
d8:ff:06:88:67:27:51:d0:aa:02:6d:9b:c8:0f:dd:
61:0a:77:f5:1b:14:cb:bc:3f:41:28:c9:97:b3:21:
d9:1c:cf:f4:8e:2b:4f:42:88:eb:51:10:f5:1d:84:
e6:33:3b:c5:59:55:68:9a:1c:42:15:86:bc:8a:23:
21:e6:99:9c:10:b3:af:76:60:2f:34:22:a9:fb:60:
aa:81:69:3a:2a:25:67:f3:ba:83:96:19:d9:44:8b:
3b:6a:02:ab:ac:2c:63:68:d5:b8:0a:5c:4d:ad:7d:
6f:97:f8:8b:25:ee:e0:d2:1e:c3:6d:f6:ae:82:d7:
03:2a:b5:42:41:0d:d7:f5:85:9c:46:2e:25:73:3e:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:95:D9:8A:7C:3F:EF:46:3A:25:45:86:84:A8:66:87:70:70:15:EB
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:51:a9:db:ce:41:77:a7:b4:eb:bb:7c:0e:13:a8:c6:bd:89:
db:9d:6e:8c:54:00:fd:1f:9f:08:b6:32:f9:2a:8b:d7:2d:84:
fa:26:81:7f:dc:e2:99:f9:14:2e:0b:71:e5:51:52:7c:37:b2:
d5:3e:8e:b4:58:79:4f:7c:4b:44:61:03:92:84:01:60:f6:71:
ed:04:91:a4:4c:79:f0:ae:f2:d4:05:d1:62:d2:2c:33:db:91:
35:40:8b:ba:41:3a:6c:72:77:af:c5:6d:11:c7:6f:bf:e4:fb:
5c:ad:c2:48:ac:5f:b0:a2:6a:82:3f:e1:eb:ef:8a:5b:16:74:
46:61:60:69:13:8e:17:73:0c:30:47:8b:9b:a4:ae:90:17:ab:
6c:94:6d:59:12:ee:ca:63:bd:19:d3:d2:69:b2:e9:c7:8d:ed:
09:14:9b:f2:58:db:16:96:38:75:50:2f:21:d8:58:2a:4f:99:
97:42:5c:13:6a:0f:d7:8a:62:61:f4:80:27:97:c8:8e:a1:e6:
a1:ab:36:fd:60:01:9b:9e:51:d5:91:26:f9:73:bf:f5:d3:5a:
39:b2:29:88:57:02:66:3f:73:30:d3:6b:29:28:b2:48:32:87:
a5:0a:c0:31:0c:1c:39:88:2b:b7:aa:e1:bf:ab:4d:31:0b:58:
36:17:87:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:51:55 2026 by rpki-client