Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: Rz/zkk25Bla2+boWeZT75a92Vi5RbFKiQEu19zFk3Dg=
Subject key identifier: ED:9A:98:67:89:32:C4:A5:6A:40:AC:26:FE:28:AC:2B:7B:78:8E:BD
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 01A14D2BF7E702C65193FED03689FCC05CAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 1578
Signing time: Sun 18 Oct 2026 04:01:29 +0000
Manifest this update: Sun 18 Oct 2026 04:01:29 +0000
Manifest next update: Mon 19 Oct 2026 04:01:29 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: L02Zk9yNckbmrpuB0R0Xe6ktNmPor+Wfagyc2lKgDS8=)
2: CfjqQqpPDnBhH-p0lAIrBIhNgY8.roa (hash: /5wTY3Au8nodbJrzfE4opPFUcgrAfS3BmM1XuaMh8Fg=)
3: SosxbjlFtLu-lsuh4-rF3Rw-rK0.roa (hash: c0C1OZyGN1Qv/oPDh5sJipEydB/aVrMAT59EdQMDAY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:2b:f7:e7:02:c6:51:93:fe:d0:36:89:fc:c0:5c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Oct 18 04:01:29 2026 GMT
Not After : Oct 19 04:01:29 2026 GMT
Subject: CN=ed9a98678932c4a56a40ac26fe28ac2b7b788ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:ee:db:da:7c:a8:d3:95:39:b0:ec:8c:57:
38:b8:2e:11:9f:59:95:45:65:d0:dd:41:bb:02:a2:
c8:bc:39:c1:70:e8:26:f0:b3:3b:32:24:71:8c:04:
af:82:8e:2f:60:12:d3:cc:7e:7c:51:13:50:c9:75:
17:fc:5d:82:df:16:62:53:4e:23:44:b3:4d:87:e5:
25:de:84:20:13:35:09:9d:bf:40:21:20:5d:3a:a7:
72:67:22:66:b4:8b:e1:66:b8:ae:12:9f:6b:aa:e8:
1f:37:bf:82:b2:73:1c:34:de:25:fc:01:1c:76:db:
82:98:b7:88:af:71:30:30:e0:7d:26:e1:05:9f:f8:
c3:d7:92:4b:d8:aa:14:b5:54:9d:0c:32:ac:c9:81:
69:e5:83:1c:f1:b7:91:d2:47:c7:44:59:8a:ba:57:
da:9d:94:bc:96:04:ba:a8:a2:b8:37:93:10:73:d5:
2a:72:5c:87:18:e2:86:37:63:1c:02:1d:43:20:f6:
19:4b:32:be:69:a9:25:a3:0e:79:7a:8a:cd:8a:de:
91:53:73:49:43:1b:3f:ab:3d:7d:8a:df:e5:12:d6:
61:77:1b:55:7c:2a:29:5b:1d:72:c8:bc:7b:2e:9d:
96:5d:c3:86:8b:6f:13:78:89:eb:d8:18:48:c2:fb:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9A:98:67:89:32:C4:A5:6A:40:AC:26:FE:28:AC:2B:7B:78:8E:BD
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:38:6b:f7:a4:4d:64:89:01:45:c4:83:11:84:ec:01:cb:cb:
d0:05:c9:71:49:85:4e:6b:c7:8c:44:61:a1:61:15:ae:e5:b6:
8d:ba:39:f8:72:21:78:be:a0:6e:55:6b:d9:96:08:78:96:5c:
ec:46:42:80:9c:a7:c7:98:03:27:a8:bc:2c:1f:9a:e4:fe:58:
1d:75:bb:ec:7a:4d:8f:93:58:71:03:bf:46:fc:d4:2b:2a:41:
47:4c:50:16:f0:86:78:c9:71:ef:d1:5a:c0:b5:b6:ab:08:e0:
2d:30:ab:88:2e:d1:ef:5e:71:f7:0d:17:ee:f8:13:06:a7:2e:
9e:12:bd:6c:07:0a:77:57:c8:44:43:dc:24:c7:b5:7c:53:cd:
c0:62:c1:ef:05:26:ce:9c:4e:88:55:d6:b2:51:9e:e4:cf:97:
83:4e:20:3d:6c:ce:45:7a:7f:f9:87:92:16:b8:df:8c:59:0a:
57:ba:e3:27:b5:9e:75:9c:af:82:45:39:a1:1c:eb:eb:85:7e:
1f:88:32:67:5c:1a:7c:64:14:b6:af:96:8f:33:c0:3e:4d:a8:
e7:7f:27:87:39:9b:b9:e6:9c:08:52:c2:18:47:33:34:98:d5:
1c:a6:56:a9:09:d6:f7:80:62:7d:4e:b2:32:e0:46:e9:ec:21:
0a:80:12:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:47 2026 by rpki-client