Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
File: 1qVTYS2UsJGzZZshILyO-yYOfTA.mft (raw, json)
Hash identifier: f6OX5VQKpHPqarU2ueNH4XIlQ89cMtqxZSU+prVcqag=
Subject key identifier: 04:4B:0D:DF:FA:20:5A:65:32:24:1B:D5:12:29:3C:10:C8:EF:F1:09
Authority key identifier: D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
Certificate issuer: /CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Certificate serial: 01A1366D263246BA3C7593BBCCD3BF9E089B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
Manifest number: 0372
Signing time: Tue 13 Oct 2026 18:01:25 +0000
Manifest this update: Tue 13 Oct 2026 18:01:25 +0000
Manifest next update: Wed 14 Oct 2026 18:01:25 +0000
Files and hashes: 1: 1qVTYS2UsJGzZZshILyO-yYOfTA.crl (hash: TCXjYJ+2kzcmwLv23wIuknFAPBAyuy6owwWQMJchW50=)
2: YUX5rzp00o400A0WbJALi9ABx8I.roa (hash: x86fl/4qgkCI4hFoudrfc/jIoc01pQrYzS8Cq8H366U=)
3: yMSdih1BEkH3pQ4fKRRG34haBVs.roa (hash: zQcIZwJ6Pu/eO5hnk91XHasGs0yD2RAKEuFEjFFSfEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:6d:26:32:46:ba:3c:75:93:bb:cc:d3:bf:9e:08:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6a553612d94b091b3659b2120bc8efb260e7d30
Validity
Not Before: Oct 13 18:01:25 2026 GMT
Not After : Oct 14 18:01:25 2026 GMT
Subject: CN=044b0ddffa205a6532241bd512293c10c8eff109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:23:dc:8b:54:ff:50:b0:c3:16:61:cd:2e:18:
00:6c:ad:e0:6b:f4:ec:c1:3d:42:f7:d1:94:55:df:
a8:08:8e:33:b2:88:59:ab:b4:69:b6:2a:21:5d:48:
c3:42:86:6a:b0:83:19:55:f6:43:9b:7b:da:6e:2a:
8d:3d:4c:0e:c6:ed:15:76:83:d3:b1:cf:91:56:23:
46:0b:30:3a:a6:0f:34:ac:85:3b:d0:60:4e:ac:b0:
7f:49:0d:4f:fe:81:9a:9f:13:cd:87:de:01:6f:f3:
ad:a4:aa:56:5b:f1:0b:62:c0:59:00:ce:d3:08:49:
a7:51:af:d6:ce:c7:63:74:fc:3a:f7:a8:37:59:a0:
23:45:36:33:59:b7:e9:92:59:d1:95:94:08:80:bb:
b3:a9:c1:7d:0e:cd:07:b3:dd:c8:c4:b4:81:0a:6a:
17:fe:c0:90:43:a4:f3:3b:cb:86:dd:8f:8b:c2:f3:
4d:65:5d:56:c8:60:2d:c9:66:ab:6d:1a:11:16:af:
fb:50:47:23:88:33:48:e7:fb:ec:27:a6:69:87:b5:
27:52:ff:56:e9:81:06:73:ef:57:35:c4:fb:f3:f3:
4f:61:56:ba:9f:42:fb:dd:ba:34:5e:1f:c7:6c:05:
9b:e7:4e:c7:e3:96:36:5d:ea:6a:bb:2d:7c:11:99:
db:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:4B:0D:DF:FA:20:5A:65:32:24:1B:D5:12:29:3C:10:C8:EF:F1:09
X509v3 Authority Key Identifier:
keyid:D6:A5:53:61:2D:94:B0:91:B3:65:9B:21:20:BC:8E:FB:26:0E:7D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qVTYS2UsJGzZZshILyO-yYOfTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/188fcd-d689-436d-a684-e05906cb6948/1/1qVTYS2UsJGzZZshILyO-yYOfTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f0:94:0c:13:7b:b0:ac:4b:e0:85:02:11:3f:d9:c3:67:79:
fa:1e:ee:29:1d:3d:66:24:34:a8:43:84:bd:0b:f0:1b:82:f8:
f4:3a:07:7a:d5:a4:88:8c:b7:8f:22:95:d7:c4:f7:a7:1d:3b:
1d:f5:e6:f2:f8:da:c0:14:91:6a:7c:6c:97:3b:e3:fe:3d:cf:
80:cc:1d:7b:f4:37:60:5a:56:2e:ce:a6:42:74:89:d1:7d:41:
b0:0a:10:16:ba:d4:4a:e9:24:c5:64:ee:0f:e8:06:e2:9f:5d:
15:4a:c5:d0:fa:5f:ba:26:b9:ec:25:78:97:85:86:e7:34:f7:
d5:8b:70:92:be:df:d5:59:b0:17:98:1e:fb:68:48:29:05:ba:
96:e1:54:eb:32:98:fe:b3:2f:24:b9:a0:6d:e9:21:e6:46:c0:
b7:73:68:9b:10:dc:e4:cc:72:02:8d:91:ff:57:fd:60:9e:2f:
b6:e9:47:8e:ca:87:6a:af:29:43:ab:43:ae:76:27:a4:ce:53:
fe:df:de:00:87:f8:e5:2d:93:92:be:06:58:c8:c7:da:ee:41:
d7:c0:92:6f:7d:bc:f2:92:7b:06:22:b4:96:d6:fe:e6:6d:94:
93:0b:b6:2a:d6:2c:2e:cd:55:be:c5:30:f6:ee:6a:98:d7:9a:
ed:c3:32:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:32:01 2026 by rpki-client