Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
File: RQLrIq5cC03NOaD5ZBolcGNEcfk.mft (raw, json)
Hash identifier: 5TkVA2brfhXbc2DtuqrZtZ97htc/TIfMJkvF2rllufE=
Subject key identifier: FA:42:22:57:67:00:51:12:7A:F8:30:5B:2D:62:AE:93:9C:40:CD:5D
Authority key identifier: 45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
Certificate issuer: /CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Certificate serial: 01A0035D2DDD819EA4EA755B055FA9DCDC1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
Manifest number: 0A19
Signing time: Sat 15 Aug 2026 03:00:33 +0000
Manifest this update: Sat 15 Aug 2026 03:00:33 +0000
Manifest next update: Sun 16 Aug 2026 03:00:33 +0000
Files and hashes: 1: KUoewwdfRmOf_tbAsPp_9X-LAEQ.roa (hash: LGunqhuUXzXuULPWvo35kZbrmM/8QY9qb8IveKrkACU=)
2: RQLrIq5cC03NOaD5ZBolcGNEcfk.crl (hash: qnaTZf8GQeNxvk6pvNDOS7yPz5OF0wixFYqo4bxCVDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:2d:dd:81:9e:a4:ea:75:5b:05:5f:a9:dc:dc:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4502eb22ae5c0b4dcd39a0f9641a2570634471f9
Validity
Not Before: Aug 15 03:00:33 2026 GMT
Not After : Aug 16 03:00:33 2026 GMT
Subject: CN=fa422257670051127af8305b2d62ae939c40cd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e0:11:f4:71:5f:d6:5c:bf:4e:55:5b:12:68:
24:ff:68:9b:4f:07:0a:93:44:1c:4f:be:c6:18:64:
c9:1e:fa:df:73:3f:f0:bb:b6:25:68:39:d3:98:50:
c8:0b:ac:69:79:28:4f:59:75:26:2f:8e:1c:b7:81:
73:6e:a1:32:a6:e8:f0:da:84:88:1a:c9:8c:fb:4b:
ce:90:50:0a:e7:c5:be:80:bf:2a:b4:e1:e8:af:d2:
ff:23:0d:1f:7c:cc:fd:3b:a2:9f:67:aa:45:df:25:
3e:13:fa:c1:59:29:58:8f:09:c5:5e:2b:fb:81:b8:
7e:58:dd:3c:aa:75:23:3d:e5:2c:6c:3a:a6:92:97:
e6:54:6a:88:04:26:75:57:0d:0e:e2:c6:d5:03:bf:
48:a0:37:f7:6e:33:60:dc:5a:a1:66:75:a4:64:74:
53:ca:cb:e0:90:90:86:88:e6:a8:fe:b1:1e:cf:6d:
02:ab:4a:35:29:56:55:a9:e6:3c:23:60:25:22:f3:
01:3e:be:9f:49:b2:d9:5b:29:63:4f:4c:83:49:bd:
93:0a:43:d4:8a:cf:61:75:a7:b0:fd:23:23:e3:76:
bd:d3:84:7a:cb:9d:55:7c:18:8d:65:0b:af:39:20:
7c:a3:2b:97:e1:bb:30:a0:95:a6:49:06:e5:1d:d9:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:42:22:57:67:00:51:12:7A:F8:30:5B:2D:62:AE:93:9C:40:CD:5D
X509v3 Authority Key Identifier:
keyid:45:02:EB:22:AE:5C:0B:4D:CD:39:A0:F9:64:1A:25:70:63:44:71:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLrIq5cC03NOaD5ZBolcGNEcfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/45659b-24d7-4220-a118-93f4255f2b82/1/RQLrIq5cC03NOaD5ZBolcGNEcfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7c:ac:77:21:12:55:50:53:11:e8:45:85:69:a9:05:4d:63:
b2:af:cb:5a:77:ec:99:0c:fe:43:2a:62:10:6e:b5:c3:e9:b0:
58:f3:a6:88:e6:f7:ae:a8:09:c2:16:35:51:6d:b4:f1:b5:1a:
ca:80:a8:73:0a:68:2b:bb:53:62:6a:45:51:88:04:14:74:18:
81:46:89:f0:8a:76:e9:d7:8f:75:74:17:84:1f:d7:1b:bf:ec:
43:e5:cb:8e:e4:69:09:40:4c:e4:a9:d9:88:58:b7:9a:06:f2:
c0:c7:56:38:68:ef:b0:3f:b5:58:bf:1f:de:f7:8b:e4:0c:c8:
9d:3b:4c:b9:68:4c:c7:cd:74:d1:ae:6d:cf:41:76:f7:c2:93:
c1:1a:29:76:03:9b:55:ff:d2:43:50:b2:43:02:9b:7b:f3:92:
a1:f3:06:c0:6e:63:9f:d8:46:8f:b1:a7:66:76:4d:89:fb:56:
ae:67:be:2e:1d:5c:ad:2d:72:e1:88:3a:97:80:b0:79:33:c4:
f6:22:c4:ea:76:7a:d7:db:bd:2b:19:7f:4d:c2:86:fe:09:b8:
32:56:be:fa:46:2a:b3:54:dd:24:04:4f:94:03:d5:1f:23:93:
f5:45:ac:88:a9:1f:bc:77:4b:b4:15:7b:88:b3:ac:b7:75:98:
63:5a:86:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:34:14 2026 by rpki-client