Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
File: qZqHY_p1CetPmwhGtYXUhz6xHDk.mft (raw, json)
Hash identifier: tONo4eSp0+rVm+INN51pv81qhrkktDA7xATkUkXsGog=
Subject key identifier: 35:6A:16:EF:21:F9:DD:F9:7A:9E:E4:B3:57:5A:9A:EE:B0:CF:9C:FF
Authority key identifier: A9:9A:87:63:FA:75:09:EB:4F:9B:08:46:B5:85:D4:87:3E:B1:1C:39
Certificate issuer: /CN=a99a8763fa7509eb4f9b0846b585d4873eb11c39
Certificate serial: 01A180E2082160CE8C32ADB7E0E6A15FA68B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
Manifest number: E1
Signing time: Wed 28 Oct 2026 05:00:59 +0000
Manifest this update: Wed 28 Oct 2026 05:00:59 +0000
Manifest next update: Thu 29 Oct 2026 05:00:59 +0000
Files and hashes: 1: 07HgvTpzt_I3I4EOcFJZcLyN3gk.roa (hash: 2KLYAgLwlLD1ziStycUNwOuuTXGCU8iVgQkazsIAxM8=)
2: qZqHY_p1CetPmwhGtYXUhz6xHDk.crl (hash: lGvnLf59F0YpgdcnhE4jkAnAIL7mERwKGlYh8t2WfL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:08:21:60:ce:8c:32:ad:b7:e0:e6:a1:5f:a6:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a99a8763fa7509eb4f9b0846b585d4873eb11c39
Validity
Not Before: Oct 28 05:00:59 2026 GMT
Not After : Oct 29 05:00:59 2026 GMT
Subject: CN=356a16ef21f9ddf97a9ee4b3575a9aeeb0cf9cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3a:0a:38:82:e7:60:71:8a:96:c4:c8:3e:eb:
64:da:e7:17:9d:6b:b5:39:b0:b7:7f:3d:4f:7f:90:
1d:a5:71:f5:05:12:09:f3:9a:70:82:e5:61:76:a8:
80:e0:9e:de:c2:67:9e:c1:01:ee:37:10:85:0b:c0:
ce:e2:1f:5e:e3:fe:d3:e3:79:ca:2a:54:11:f9:e6:
30:df:55:8a:8b:65:ca:1d:bd:26:00:2d:7d:36:8e:
e8:4e:d4:56:7c:39:0f:9b:bd:7a:9d:50:a8:35:af:
99:5e:a0:e8:eb:84:b5:58:31:cb:c4:f0:5d:58:e7:
90:69:42:be:71:5f:48:ed:7c:38:57:48:8b:92:d6:
ca:19:cc:6d:f7:ea:8d:c0:a7:dc:41:9c:61:75:b7:
f6:da:bc:53:2d:df:da:85:d3:c9:1b:28:48:c5:83:
01:90:07:d1:23:35:3a:e8:d6:b4:c9:c7:a2:43:1e:
8c:2f:6f:14:ae:27:6e:8e:0e:67:aa:b4:05:13:45:
1b:02:d9:18:cc:f9:9c:72:c2:31:e8:b1:0c:6e:f4:
a2:0a:d4:e3:90:e6:4d:75:f7:d5:2d:e7:e8:90:3b:
e4:3b:38:d0:af:22:3a:62:c3:54:a4:f4:6b:07:04:
af:f1:94:fa:fe:66:2a:64:55:1c:75:3f:89:7a:5d:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6A:16:EF:21:F9:DD:F9:7A:9E:E4:B3:57:5A:9A:EE:B0:CF:9C:FF
X509v3 Authority Key Identifier:
keyid:A9:9A:87:63:FA:75:09:EB:4F:9B:08:46:B5:85:D4:87:3E:B1:1C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qZqHY_p1CetPmwhGtYXUhz6xHDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9a5dd6-ec7f-4ed0-9780-3b084438969d/1/qZqHY_p1CetPmwhGtYXUhz6xHDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d3:97:d8:22:ed:01:51:25:fb:3f:b0:8c:07:bb:82:1b:62:
78:09:c2:7b:36:bf:c4:64:9d:4c:c4:8f:58:5a:7d:fd:df:d0:
a6:0f:96:a7:68:5b:2c:ad:6b:33:6f:2d:33:07:08:75:f0:31:
e9:2a:33:90:19:b2:10:b1:83:60:ee:16:a2:62:89:92:11:79:
45:9a:5a:22:18:a2:da:ed:63:b3:0c:83:b7:12:6f:3f:6b:39:
d6:7d:f1:cb:a9:55:21:d8:1d:9a:2e:9d:db:14:ce:16:8c:5d:
28:a1:e2:98:af:8f:68:ac:13:e5:fd:39:e3:0d:55:ae:b0:35:
df:40:80:17:ee:fa:0f:ac:68:19:6d:7f:51:2d:c3:d4:40:73:
09:ce:84:0d:68:64:8d:1a:88:78:93:74:e8:95:00:9d:ab:3c:
9b:d3:29:e0:c9:37:c9:1f:7e:a5:21:88:b8:88:ba:85:4d:89:
55:6e:48:9f:40:e8:61:68:3d:0f:01:b9:61:5e:6f:f3:08:12:
94:4a:22:dc:b5:e1:39:7e:b9:76:ce:22:5b:ae:fe:0a:f9:21:
4f:da:ca:6f:ab:86:cc:96:67:15:9d:30:3a:b2:57:24:9e:46:
9c:23:62:87:50:3a:5a:cd:05:80:d3:ff:b2:b2:04:5d:ab:1a:
f3:35:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:26:09 2026 by rpki-client