Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
File: qCYCgPNU92LV7fNMisgW4cIHG1k.mft (raw, json)
Hash identifier: IKrqEEt6jDHpqwWtdtm4VAp8G9MqMSbMrQIYi48Fee4=
Subject key identifier: F7:C6:6B:80:AC:45:12:B6:8B:CA:50:14:BE:DE:8F:1D:DD:66:46:4C
Authority key identifier: A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59
Certificate issuer: /CN=a8260280f354f762d5edf34c8ac816e1c2071b59
Certificate serial: 01A17E4F00DFDEF5F02424690D259A7BC557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
Manifest number: 1AC3
Signing time: Tue 27 Oct 2026 17:01:09 +0000
Manifest this update: Tue 27 Oct 2026 17:01:09 +0000
Manifest next update: Wed 28 Oct 2026 17:01:09 +0000
Files and hashes: 1: qCYCgPNU92LV7fNMisgW4cIHG1k.crl (hash: P8P1lcCoqdUIPETISPVSw2r2FSq0J9pVXi2xBpd3fi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:4f:00:df:de:f5:f0:24:24:69:0d:25:9a:7b:c5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8260280f354f762d5edf34c8ac816e1c2071b59
Validity
Not Before: Oct 27 17:01:09 2026 GMT
Not After : Oct 28 17:01:09 2026 GMT
Subject: CN=f7c66b80ac4512b68bca5014bede8f1ddd66464c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d2:c2:22:22:84:d2:00:07:06:36:7f:a7:55:
7b:c1:a6:56:be:1b:69:a6:35:89:33:dd:78:66:d1:
a8:53:4e:c6:c2:57:01:f1:81:f9:62:88:96:e1:e5:
d0:37:62:52:8e:3f:6e:06:f2:cc:4a:c3:66:b2:ad:
e1:96:fd:6c:69:b7:49:ba:f2:98:8c:b5:17:08:ae:
b5:42:34:99:81:c2:44:7e:5a:d5:e9:a5:e3:1e:62:
c4:24:09:fc:e1:3f:b7:63:5e:9a:0b:66:86:8a:c8:
37:ed:77:3d:d0:ff:b9:27:36:5e:83:2e:a0:64:d3:
d4:3f:3e:ce:0c:8c:20:e1:de:83:dd:38:f9:12:d8:
3d:ec:52:43:f7:83:3e:3e:df:c9:c9:ac:b2:42:8c:
7e:01:ec:9a:7c:cb:9c:85:e4:d5:20:81:96:2d:49:
98:f9:12:43:d2:46:b3:be:1e:54:84:80:34:39:a1:
11:d2:64:d6:21:27:c2:ca:dd:f7:e1:43:e3:1e:b5:
5d:fd:d6:fa:d8:1a:99:05:90:87:d0:7c:e5:49:a9:
e8:88:ac:e4:93:5a:3b:94:8f:75:cd:ba:91:50:1f:
23:84:c8:60:73:c1:90:8b:1f:23:b3:3a:83:ab:60:
f1:61:0d:28:b5:e4:03:bd:54:32:14:60:27:37:61:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C6:6B:80:AC:45:12:B6:8B:CA:50:14:BE:DE:8F:1D:DD:66:46:4C
X509v3 Authority Key Identifier:
keyid:A8:26:02:80:F3:54:F7:62:D5:ED:F3:4C:8A:C8:16:E1:C2:07:1B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCYCgPNU92LV7fNMisgW4cIHG1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a303fd-36a6-438d-96da-183a47a45b2a/1/qCYCgPNU92LV7fNMisgW4cIHG1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:99:d1:58:68:ca:0c:b6:1e:df:78:f9:1c:f5:b0:14:24:b7:
07:24:81:92:cf:7a:b5:14:59:b1:59:f8:66:8b:74:ca:01:f2:
3d:4a:5b:9b:47:ff:90:e1:57:bd:11:c9:f8:2d:58:21:8f:b3:
a9:ce:b7:0d:cf:48:9e:0e:96:5f:7e:e0:9b:ad:d5:ea:67:11:
98:00:36:7e:88:e3:61:93:68:ec:e0:6e:14:25:7e:0b:ba:04:
a7:4f:5d:8d:87:0b:ad:e9:40:61:22:9f:cb:0a:e3:25:e5:66:
6c:ed:32:84:da:7e:5b:7d:a3:c4:34:16:9c:6c:ae:49:40:69:
df:2f:f1:c5:5d:09:f6:c4:d2:33:36:a0:e8:c9:02:32:13:ed:
2c:15:5a:81:ff:9f:6c:95:e3:e1:be:d2:62:43:a6:2f:fe:cf:
fc:9c:40:c6:9e:56:78:77:da:68:0b:6f:3e:67:ff:9f:1a:e8:
cd:6e:a3:a0:f2:78:02:86:27:13:b0:62:a2:b0:d0:67:53:a5:
5a:d7:2d:04:6a:54:cf:24:60:a1:cf:eb:cd:7d:8a:6f:77:e1:
70:c1:84:eb:90:dc:0c:7a:eb:c1:3c:b5:89:67:9c:ee:42:d7:
8d:fb:4f:99:72:46:78:2b:d2:e9:23:26:d9:85:81:b5:dc:86:
35:df:bc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 01:55:59 2026 by rpki-client