Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
File: qoXp2iInNFwYq9fnUnL4HCmzDRs.mft (raw, json)
Hash identifier: DS1fH7dD5z4eUikeL+3z8IE75Px0oMy9Y6h9t1fWAlY=
Subject key identifier: 2D:45:53:39:1D:A2:D6:EC:D1:DB:C3:EA:2F:AC:F4:49:F4:9D:0F:08
Authority key identifier: AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
Certificate issuer: /CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Certificate serial: 01A1773A1B51209A9D4FAD05FF904B11B747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
Manifest number: 1A54
Signing time: Mon 26 Oct 2026 08:00:59 +0000
Manifest this update: Mon 26 Oct 2026 08:00:59 +0000
Manifest next update: Tue 27 Oct 2026 08:00:59 +0000
Files and hashes: 1: 9iFl9E0VgWNO_Nn27bQay-c817U.roa (hash: La1IKKEmOqIsMgjt9EJI2o3J371vdfvoBpTTdCWHcKQ=)
2: qoXp2iInNFwYq9fnUnL4HCmzDRs.crl (hash: +aB+ahq0nzxBE/Q6EYvQ43UZzYNSD0c+WDdtI1Mekn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:3a:1b:51:20:9a:9d:4f:ad:05:ff:90:4b:11:b7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa85e9da2227345c18abd7e75272f81c29b30d1b
Validity
Not Before: Oct 26 08:00:59 2026 GMT
Not After : Oct 27 08:00:59 2026 GMT
Subject: CN=2d4553391da2d6ecd1dbc3ea2facf449f49d0f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:d5:c4:d9:cb:e3:b4:c9:c2:78:6a:6a:e7:
69:a7:cb:9e:be:49:a0:dc:77:9f:08:a0:18:f2:d5:
ea:16:da:81:2e:05:1d:14:f6:db:1e:87:4c:33:95:
fd:e7:27:dd:f3:82:d6:fb:83:87:b3:51:37:ba:51:
d8:16:39:35:44:4d:0f:18:60:6f:82:46:c8:ec:eb:
14:7c:ef:68:bc:aa:ee:d3:57:5a:8e:0e:a7:db:da:
b1:d7:63:5c:ef:77:6a:a4:4c:66:cb:d7:72:e7:a6:
76:0c:d5:14:8c:50:4e:c9:eb:2c:b6:07:1e:89:ac:
0f:69:d7:a5:52:a1:a7:29:db:bd:d9:e9:73:57:6c:
65:67:15:1f:1b:00:d2:13:94:ed:7d:08:f0:91:8e:
f5:c3:15:65:8b:42:04:66:93:9a:69:de:66:e9:dd:
5f:11:01:48:06:77:81:40:0a:05:e7:8a:0f:f6:1f:
ab:c9:31:51:14:2c:ce:25:b6:72:11:21:0f:5b:70:
ca:1b:c3:d4:48:74:e5:6e:57:5e:b3:64:54:fd:8c:
2d:39:c4:ce:f6:a6:93:37:ca:26:ca:22:c1:16:69:
c5:d8:82:d0:27:a5:21:0a:c5:5f:7b:23:99:60:27:
d0:05:98:09:95:6f:62:26:da:8c:ce:50:9e:7e:de:
90:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:45:53:39:1D:A2:D6:EC:D1:DB:C3:EA:2F:AC:F4:49:F4:9D:0F:08
X509v3 Authority Key Identifier:
keyid:AA:85:E9:DA:22:27:34:5C:18:AB:D7:E7:52:72:F8:1C:29:B3:0D:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoXp2iInNFwYq9fnUnL4HCmzDRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f2fc0e-bbb9-4924-a89c-7620db279962/1/qoXp2iInNFwYq9fnUnL4HCmzDRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:db:fa:dc:c8:4e:bf:8b:b0:4f:fc:ce:df:0e:78:16:97:62:
e7:bf:02:f8:21:16:32:fe:38:a2:16:e9:1c:2d:ed:f4:25:d1:
0f:ff:cf:6f:88:30:ac:61:6a:98:0a:60:84:6e:99:e0:83:36:
ea:44:97:6b:ff:e2:dd:d3:1d:87:00:c9:c3:3e:94:c8:43:ba:
a6:4b:a7:41:05:76:fd:27:79:dd:2d:bd:34:2d:cf:6a:7b:b2:
e0:b2:10:e6:42:be:aa:46:f5:8d:78:82:23:41:dc:c3:60:51:
07:4d:7f:ba:af:6d:f8:f7:ad:18:7b:03:3e:d8:bc:70:4d:ef:
c8:6b:bf:28:74:aa:ab:7f:fc:fe:a2:1b:d5:7b:b6:0f:b7:96:
eb:61:df:2b:95:eb:b1:38:81:8f:8f:15:58:9d:4b:c6:06:30:
3a:7b:b3:ae:e4:45:20:76:79:4d:09:9a:79:e8:05:52:40:cf:
fd:84:18:d6:0f:ab:86:f4:ff:35:96:15:96:3c:c1:d9:f7:fc:
aa:b0:32:7c:d3:6f:ee:e4:af:d8:b4:02:90:1d:80:8a:9d:67:
6c:96:f0:8e:7d:3c:5d:cb:00:45:0e:5d:73:8e:af:1b:5e:77:
f0:37:86:26:04:6d:b7:af:63:6f:4e:ab:33:e2:d3:67:ce:79:
8e:b2:5e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:26 2026 by rpki-client