Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
File: qDYJyI8427VIofAvif8pu20Yhk4.mft (raw, json)
Hash identifier: jVrC6PGwCYmdd351efnrdX1DETj9in6mdxT9DOwH+hA=
Subject key identifier: 70:49:17:E8:C7:3F:AB:23:9C:CE:48:C7:EF:5E:73:B5:DB:35:29:E2
Authority key identifier: A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
Certificate issuer: /CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Certificate serial: 01A16C48B51A143C4B2FD1DADEC11689746B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
Manifest number: 084D
Signing time: Sat 24 Oct 2026 05:01:06 +0000
Manifest this update: Sat 24 Oct 2026 05:01:06 +0000
Manifest next update: Sun 25 Oct 2026 05:01:06 +0000
Files and hashes: 1: AeJUYs8KPvdeXojsNmXjmiR1Wh4.roa (hash: QZQFb9zgvngTfrMDFz4cGmkMiycjMvXPVgZGd4lxN9o=)
2: qDYJyI8427VIofAvif8pu20Yhk4.crl (hash: jJJXEqJ+AYG5P2GjDTbSpixkVEtjsLCvizJM0UlY+rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:48:b5:1a:14:3c:4b:2f:d1:da:de:c1:16:89:74:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83609c88f38dbb548a1f02f89ff29bb6d18864e
Validity
Not Before: Oct 24 05:01:06 2026 GMT
Not After : Oct 25 05:01:06 2026 GMT
Subject: CN=704917e8c73fab239cce48c7ef5e73b5db3529e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0f:08:cf:5e:82:15:4f:16:62:74:03:8b:15:
39:25:4d:76:2d:1f:74:44:8d:56:a2:b3:ed:ce:a7:
32:9f:4b:bd:ab:f4:d2:52:ad:83:a0:f1:da:74:06:
0e:ad:ad:a7:f3:1f:bc:cd:28:46:96:b1:dd:8a:ab:
e6:49:ea:68:db:f4:42:0b:12:47:f8:6f:38:27:3d:
8f:25:43:76:11:2d:02:f0:05:d0:bf:68:38:5e:26:
f6:e5:d3:13:66:56:15:2e:97:da:57:1b:61:44:3e:
ca:f2:5a:92:64:56:92:23:9b:1f:e0:c1:59:cd:d4:
92:20:fa:35:26:a2:b8:4b:79:78:ae:42:62:9e:95:
23:8b:2e:8b:77:55:ea:25:cf:73:3a:84:19:4f:8e:
50:ca:79:18:95:a1:c0:24:b3:2f:65:0a:99:49:3f:
fc:d6:88:f4:f7:d5:e1:18:79:bb:80:77:8c:d1:40:
a4:e6:49:f5:94:50:47:39:50:7c:66:93:8b:f6:aa:
21:75:54:87:df:5d:88:40:0c:58:f7:79:ab:b9:95:
3f:26:69:ab:b8:4b:11:75:e5:6e:e4:1f:dd:f8:9b:
93:72:9c:84:39:81:6c:8f:33:2c:7e:c0:d3:f6:3d:
26:fc:11:d8:b4:96:3d:51:8e:a5:0d:ff:e3:c1:20:
40:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:49:17:E8:C7:3F:AB:23:9C:CE:48:C7:EF:5E:73:B5:DB:35:29:E2
X509v3 Authority Key Identifier:
keyid:A8:36:09:C8:8F:38:DB:B5:48:A1:F0:2F:89:FF:29:BB:6D:18:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDYJyI8427VIofAvif8pu20Yhk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e14fe1-62ab-4415-9bce-e40fe0b094b0/1/qDYJyI8427VIofAvif8pu20Yhk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:70:5d:b4:c9:55:4c:32:5f:97:72:d8:b1:38:b8:3c:71:00:
24:39:0a:77:68:51:a3:98:b3:34:50:05:83:c8:2b:3c:ff:ba:
c0:70:a3:4b:12:3a:ea:54:c5:cd:95:df:01:9f:fe:70:14:59:
28:0f:3f:73:ee:3b:bc:be:57:17:1c:25:90:3b:1e:7c:62:e9:
0b:01:89:1d:0f:b8:5c:10:2e:0c:ce:81:6a:54:6a:49:78:40:
15:e9:69:f6:41:59:c4:db:e6:43:c3:67:e2:93:18:0a:49:e2:
4a:78:55:7e:7e:33:56:04:bf:f3:88:cd:f3:1c:dd:8e:31:b2:
e0:fd:ba:cd:6a:11:35:0e:fa:54:7d:94:5d:88:6b:ef:b5:1a:
59:3f:e4:69:a3:e0:08:e4:5d:c7:47:84:88:3b:ee:09:e2:a6:
f7:76:56:77:13:85:2a:b5:92:a8:d4:c1:1c:38:0f:6a:b7:28:
c8:72:4c:11:61:1e:ba:ed:5b:4d:dd:59:17:53:56:1f:b7:50:
75:d6:c8:1e:47:7e:b9:32:8e:d3:66:39:e2:0d:66:b0:e4:a3:
03:dc:00:ca:c9:dd:64:1d:88:6f:31:40:a9:bf:6d:27:91:46:
9c:3e:78:2d:15:60:63:21:04:8a:d6:14:7b:f9:68:c3:e9:b5:
9b:fc:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 13:41:05 2026 by rpki-client