Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
File: qZqHY_p1CetPmwhGtYXUhz6xHDk.mft (raw, json)
Hash identifier: 0Jq8NYelX9Orr6Wem2zjKJC8ROp+W7JOkBwWgVUvN8k=
Subject key identifier: 50:43:3B:5E:49:E1:27:52:69:34:C7:28:0F:A9:6A:79:F4:77:CE:6B
Authority key identifier: A9:9A:87:63:FA:75:09:EB:4F:9B:08:46:B5:85:D4:87:3E:B1:1C:39
Certificate issuer: /CN=a99a8763fa7509eb4f9b0846b585d4873eb11c39
Certificate serial: 01A182D0E23A119B5EEB15F951DBD7C54A60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
Manifest number: E2
Signing time: Wed 28 Oct 2026 14:01:29 +0000
Manifest this update: Wed 28 Oct 2026 14:01:29 +0000
Manifest next update: Thu 29 Oct 2026 14:01:29 +0000
Files and hashes: 1: 07HgvTpzt_I3I4EOcFJZcLyN3gk.roa (hash: 2KLYAgLwlLD1ziStycUNwOuuTXGCU8iVgQkazsIAxM8=)
2: qZqHY_p1CetPmwhGtYXUhz6xHDk.crl (hash: C6nIMulJO8Zx6KouSuS/VmadeTiTS9KgFCKITlXriUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:e2:3a:11:9b:5e:eb:15:f9:51:db:d7:c5:4a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99a8763fa7509eb4f9b0846b585d4873eb11c39
Validity
Not Before: Oct 28 14:01:29 2026 GMT
Not After : Oct 29 14:01:29 2026 GMT
Subject: CN=50433b5e49e127526934c7280fa96a79f477ce6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8b:e0:60:a0:81:aa:91:cb:13:df:f6:f5:fb:
9d:3d:fa:d4:e4:2a:2f:7a:6c:9c:3a:64:fb:8f:4c:
5c:a8:1f:a7:d3:0f:09:09:19:1f:24:bc:5e:ba:a7:
66:c0:f1:84:39:dc:b7:21:33:b6:04:04:fd:58:dc:
8f:20:9d:37:16:86:24:0a:70:34:5b:8c:1c:cc:07:
38:61:f7:a5:a4:b6:1f:5d:de:33:49:83:7e:c3:99:
0b:b5:dd:0a:a9:e4:41:78:5c:fd:06:df:ff:8e:7c:
db:da:e2:e2:99:04:3e:a1:49:a6:e7:e2:e4:03:25:
b4:5b:ab:78:74:2a:ee:98:c3:b5:c0:97:f5:08:36:
e8:01:71:aa:f1:e8:14:a4:2c:63:4d:0e:0b:fe:08:
09:45:56:61:d4:af:6b:2a:26:97:ab:61:f1:a6:90:
5d:b8:d1:eb:31:d6:a1:ea:5e:3f:d9:fb:38:97:54:
87:0e:d2:fe:20:97:92:0e:52:86:53:1d:20:e7:59:
9c:fc:1d:58:70:94:e8:ca:0e:99:f9:40:48:f3:b7:
f4:19:10:33:fd:72:72:54:ce:61:eb:27:f6:e6:0b:
9a:ab:71:e2:ef:3a:b2:9e:99:2f:58:6c:16:4a:6c:
a6:09:48:2d:65:82:8a:22:71:64:3b:56:2a:36:8a:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:43:3B:5E:49:E1:27:52:69:34:C7:28:0F:A9:6A:79:F4:77:CE:6B
X509v3 Authority Key Identifier:
keyid:A9:9A:87:63:FA:75:09:EB:4F:9B:08:46:B5:85:D4:87:3E:B1:1C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:41:74:23:5c:d4:d1:54:ff:b5:49:02:40:32:3b:23:eb:e4:
aa:ae:29:47:78:2e:95:a5:0b:18:be:ca:77:c7:40:4a:9c:0c:
29:4c:ba:b5:ba:e9:75:18:e1:17:1b:69:f5:3e:6e:cf:71:cc:
e0:d4:91:87:a0:71:38:7e:28:ed:07:39:ee:27:fe:3d:6f:b4:
bc:16:73:76:17:5f:e2:d8:cf:6f:23:d2:6d:97:a1:4d:35:e4:
77:0a:f1:a8:98:ad:c5:eb:74:c5:90:03:7b:4e:12:c6:35:d6:
05:1d:3e:d9:65:d5:ea:df:74:9b:ef:d8:f2:44:2f:a7:b2:93:
c9:e0:81:ae:92:d9:4a:9b:58:55:79:8d:7f:2f:f1:f6:3a:b6:
0e:f2:09:ef:f4:d7:70:f3:b8:d5:c4:61:c8:d8:05:47:29:b7:
e7:fd:ac:fa:f3:df:e1:02:a3:d5:d8:32:50:96:9a:5c:b2:99:
a3:cb:83:15:fa:53:17:3c:f6:a2:48:66:3a:7d:0a:11:c0:4a:
52:e5:4f:21:26:e6:1a:9c:6a:d4:12:be:35:ed:3d:be:6f:23:
3a:7c:5b:93:ba:00:22:d2:f2:cb:aa:3f:21:5a:0a:bd:98:eb:
56:c7:a4:d6:45:b1:89:83:3f:96:7f:18:2c:8a:b5:33:f5:7c:
18:a7:c8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:27:11 2026 by rpki-client