Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
File: qlfg60pFBqGasu_5iaZ9VZuYzBo.mft (raw, json)
Hash identifier: zklejbvZz3YEcMCVrAsO/VG9d4og7IvQv6lJKNFYcG4=
Subject key identifier: 0C:33:45:58:AA:63:9B:71:AB:47:EE:25:30:80:83:39:B6:8A:14:D9
Authority key identifier: AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
Certificate issuer: /CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Certificate serial: 01A155C101B7ABFDDCCC00C1E2BF340ECB84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
Manifest number: 1AB4
Signing time: Mon 19 Oct 2026 20:01:14 +0000
Manifest this update: Mon 19 Oct 2026 20:01:14 +0000
Manifest next update: Tue 20 Oct 2026 20:01:14 +0000
Files and hashes: 1: PZcwljxkluLyPsCu5IOqcb5bfu0.roa (hash: 74prXbYhNn50EgwVIKtgiNZLNDDm+6LO8raCktKadFM=)
2: qlfg60pFBqGasu_5iaZ9VZuYzBo.crl (hash: z+h6ntNxdI1Fl7zEVzRZ/TWw01D0f+Z5WJPlY+axX1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c1:01:b7:ab:fd:dc:cc:00:c1:e2:bf:34:0e:cb:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa57e0eb4a4506a19ab2eff989a67d559b98cc1a
Validity
Not Before: Oct 19 20:01:14 2026 GMT
Not After : Oct 20 20:01:14 2026 GMT
Subject: CN=0c334558aa639b71ab47ee2530808339b68a14d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:54:70:55:17:29:8c:cf:7e:fa:9a:f6:2d:
e4:7d:f9:9e:e7:c1:5e:1e:cb:e5:9e:02:df:d9:8b:
cb:b2:1a:12:be:4e:67:87:71:76:52:c8:a8:e8:e0:
49:8c:7d:97:e8:03:42:fc:11:87:66:ad:a8:96:33:
fc:26:2b:f3:d6:a9:b8:63:61:a6:2e:90:d0:e9:9f:
2b:8f:df:3f:aa:5a:32:c5:4a:e0:ed:4b:e4:d5:e6:
b8:0f:c7:a9:d2:87:4c:8f:4b:45:56:55:81:29:e2:
79:95:77:a5:f8:c8:16:19:67:3d:40:a2:d9:64:05:
10:33:82:f5:5b:18:da:15:77:74:0a:5f:ee:e4:fd:
17:8e:44:24:70:e5:01:b2:dd:54:2d:ad:07:92:df:
d6:42:bc:11:e9:28:c0:ba:c7:13:0f:00:de:32:f6:
0e:ae:d7:7d:c2:20:1d:ee:85:de:46:00:31:b3:41:
2c:79:8e:b6:c1:cd:ec:ca:a0:f2:7e:93:8f:e9:66:
0a:1d:16:c9:6e:62:42:2a:86:87:8f:5b:ab:61:73:
26:fc:6e:87:b7:46:38:36:51:57:5a:9d:8d:13:19:
68:9f:de:95:3d:e8:cf:eb:c2:4a:e4:c5:8a:48:a0:
c7:86:26:bb:0a:21:e2:aa:54:fd:f7:b6:7e:86:4c:
a2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:45:58:AA:63:9B:71:AB:47:EE:25:30:80:83:39:B6:8A:14:D9
X509v3 Authority Key Identifier:
keyid:AA:57:E0:EB:4A:45:06:A1:9A:B2:EF:F9:89:A6:7D:55:9B:98:CC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlfg60pFBqGasu_5iaZ9VZuYzBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7fafdb-f74a-4ba1-9702-0fd02c44253b/1/qlfg60pFBqGasu_5iaZ9VZuYzBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:51:14:47:98:52:7c:f9:c6:bb:8b:78:61:d4:a5:29:d5:9b:
c3:5a:2a:b5:8f:e5:bd:ea:57:9f:12:ca:e6:4c:83:f0:95:f9:
08:ba:a3:46:6a:01:93:df:14:9b:7e:5f:5a:00:3b:d5:1c:2e:
37:4e:9d:01:6f:30:17:32:7d:33:82:a0:d6:9f:a3:43:8d:95:
78:45:e6:c0:5c:c8:a7:26:dc:7b:c2:9a:04:3c:12:5f:ce:76:
97:f0:ee:36:3e:9c:f1:7d:d4:a9:8d:23:f4:18:ef:42:aa:e9:
fe:93:d1:de:21:9b:89:22:d9:ea:20:79:91:ea:8f:e7:78:d9:
7e:c4:f5:43:87:ed:25:48:34:25:46:32:f3:ff:49:ce:27:a4:
b1:ef:a9:81:ab:1b:f1:96:1d:db:eb:9f:e9:93:f7:45:9b:e0:
b2:46:38:e4:a1:68:ba:30:e0:f9:72:f7:8e:4f:84:97:c8:1b:
71:90:e9:75:51:17:65:da:9e:de:0c:4c:c0:3a:bb:b2:00:a9:
0c:ba:1e:b5:fd:d5:90:9a:06:2d:4a:06:33:73:1e:a9:01:c2:
f0:5c:3f:34:7c:49:c3:a9:30:47:20:2d:a9:ac:2d:90:b5:83:
7c:37:4a:ab:04:16:b2:8d:06:bf:46:b7:9c:c4:3b:37:9b:6e:
10:ef:b2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:28:53 2026 by rpki-client