Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/qWlAIaF1yv0lNEwEeZ92d5_wRXY.mft
File: qWlAIaF1yv0lNEwEeZ92d5_wRXY.mft (raw, json)
Hash identifier: z929it1nHRvmrWjGDyjpTRknUMFOCekoGvG6ssDTBAA=
Subject key identifier: 41:84:78:83:18:CE:CA:CD:40:E9:CB:C0:4C:00:5A:89:35:95:DD:C7
Authority key identifier: A9:69:40:21:A1:75:CA:FD:25:34:4C:04:79:9F:76:77:9F:F0:45:76
Certificate issuer: /CN=a9694021a175cafd25344c04799f76779ff04576
Certificate serial: 01A1536487BA02A7B0FDCF3C89F5B5B2817E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWlAIaF1yv0lNEwEeZ92d5_wRXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/qWlAIaF1yv0lNEwEeZ92d5_wRXY.mft
Manifest number: 0129
Signing time: Mon 19 Oct 2026 09:00:59 +0000
Manifest this update: Mon 19 Oct 2026 09:00:59 +0000
Manifest next update: Tue 20 Oct 2026 09:00:59 +0000
Files and hashes: 1: qWlAIaF1yv0lNEwEeZ92d5_wRXY.crl (hash: 5wMdNJHsJbvwodaUXjY7YyO/sUVnJE3QXCwwowRKErk=)
2: rdJyBdK2iV50iM4LtkIDk5goq3w.roa (hash: lGGO7x3NU/orErYEGSdJ6SmoJ+86W9eVKa7qBlgKpv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/qWlAIaF1yv0lNEwEeZ92d5_wRXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/qWlAIaF1yv0lNEwEeZ92d5_wRXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWlAIaF1yv0lNEwEeZ92d5_wRXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:64:87:ba:02:a7:b0:fd:cf:3c:89:f5:b5:b2:81:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9694021a175cafd25344c04799f76779ff04576
Validity
Not Before: Oct 19 09:00:59 2026 GMT
Not After : Oct 20 09:00:59 2026 GMT
Subject: CN=4184788318cecacd40e9cbc04c005a893595ddc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f7:4d:ba:0e:6f:75:fd:fe:08:be:89:af:0d:
1c:56:ae:5f:f8:fc:93:7a:3d:e9:29:ba:21:3e:70:
18:31:f5:1b:73:ce:e8:dc:83:ff:2d:0a:1e:32:59:
ec:1f:6a:fc:f4:d2:58:39:84:82:7d:57:5a:9d:fb:
68:f0:4c:c5:2f:89:a9:33:12:6c:1b:37:d5:ec:64:
70:1b:ff:8f:a6:ed:a8:1e:10:0a:65:bf:bf:63:dd:
90:f5:6d:7c:42:5a:4a:24:36:e5:50:a5:d1:53:54:
2f:e7:4d:2e:98:28:30:56:34:0a:6a:c0:fc:04:08:
12:2c:d4:18:4a:a1:cb:0a:95:57:6f:31:74:07:69:
4e:62:99:ec:d5:a4:53:c9:88:d1:8a:86:5b:b7:7f:
67:9b:fb:7c:da:d4:f8:e3:93:20:66:f2:db:fc:a9:
6d:96:de:6c:b3:5b:bf:c0:b4:d8:99:2d:f7:a8:d3:
ae:84:ea:23:2f:8e:9f:ac:01:6a:72:e1:0f:3d:9a:
1d:b4:0f:66:44:21:a3:69:09:36:78:c3:76:18:9e:
f0:d5:78:51:99:39:b1:9c:39:71:36:07:da:76:0f:
60:7b:30:ea:85:67:de:f5:36:aa:51:e6:1e:94:55:
67:7b:b8:b4:94:d0:06:ed:62:2d:d3:f5:5f:e0:0b:
6a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:84:78:83:18:CE:CA:CD:40:E9:CB:C0:4C:00:5A:89:35:95:DD:C7
X509v3 Authority Key Identifier:
keyid:A9:69:40:21:A1:75:CA:FD:25:34:4C:04:79:9F:76:77:9F:F0:45:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWlAIaF1yv0lNEwEeZ92d5_wRXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/qWlAIaF1yv0lNEwEeZ92d5_wRXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/qWlAIaF1yv0lNEwEeZ92d5_wRXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:4b:32:ec:44:2b:a8:49:bc:e5:30:ca:6a:8e:1d:a2:57:34:
93:40:79:16:46:b8:d3:f1:72:69:84:06:a0:ae:38:24:80:3f:
2e:b1:22:78:d8:f2:c0:97:b5:65:34:79:5f:e4:bd:41:e9:7c:
69:f5:f7:9b:a4:5c:4c:55:50:42:be:12:a1:ca:03:e7:bc:35:
99:83:f6:26:ff:0f:6a:e7:49:89:54:d2:44:b8:5f:70:18:65:
ab:2d:d9:31:8e:e9:63:c0:ca:38:a5:07:37:e6:7e:10:a8:60:
bf:49:48:b4:7f:f8:6a:13:7c:85:56:fc:ae:e2:f4:5a:19:fb:
4b:b7:77:0c:4b:71:b1:c0:a5:96:39:23:01:3a:b1:1d:25:7c:
71:0c:1f:8d:e4:04:5f:78:82:27:7d:1d:59:3f:d9:5b:2c:7f:
59:44:23:44:e8:af:40:f2:aa:e3:df:45:10:e0:aa:11:13:29:
e5:d9:69:11:a5:16:e9:74:04:a4:db:0a:48:5c:a5:f0:30:22:
b5:8c:db:89:28:54:ce:8a:b4:f8:00:b1:ec:b9:90:b7:d7:1c:
37:67:80:af:51:f6:53:6e:e0:0e:e5:73:a8:f5:3c:e2:e9:73:
cc:4c:ea:1f:d6:64:1b:5a:eb:18:e9:c3:37:8f:a8:46:b9:e1:
7d:1b:c4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:49:16 2026 by rpki-client