Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: rK6isAmBhiaywsoYyJe9k3L/ZGpSi7nRdXbL7qwxKIE=
Subject key identifier: 9D:9B:06:71:EC:F1:A6:44:BB:CD:87:B1:8B:E0:1B:48:92:99:F1:33
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 01A00101613174AA8984709B1EE2D44CCC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 14CC
Signing time: Fri 14 Aug 2026 16:01:02 +0000
Manifest this update: Fri 14 Aug 2026 16:01:02 +0000
Manifest next update: Sat 15 Aug 2026 16:01:02 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: ZvJk+dIE7kJMFyO4MxSmOJbI0yXIB1IsPpBcHFpLsoA=)
2: CfjqQqpPDnBhH-p0lAIrBIhNgY8.roa (hash: /5wTY3Au8nodbJrzfE4opPFUcgrAfS3BmM1XuaMh8Fg=)
3: SosxbjlFtLu-lsuh4-rF3Rw-rK0.roa (hash: c0C1OZyGN1Qv/oPDh5sJipEydB/aVrMAT59EdQMDAY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:61:31:74:aa:89:84:70:9b:1e:e2:d4:4c:cc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Aug 14 16:01:02 2026 GMT
Not After : Aug 15 16:01:02 2026 GMT
Subject: CN=9d9b0671ecf1a644bbcd87b18be01b489299f133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ce:42:c1:89:c7:23:94:1e:94:4f:cc:9e:1e:
fb:4e:4a:cd:cf:d9:a3:87:74:d5:a4:d0:b5:3a:dd:
d7:08:8b:8e:1b:73:9d:45:f3:6d:51:53:ff:77:01:
5d:27:09:de:9f:66:ae:9a:6a:0b:63:d0:3b:d7:ee:
77:15:f8:75:32:6a:95:fa:2c:1f:28:28:ee:00:d0:
45:44:6b:8e:27:2d:fc:c7:63:2d:77:bf:2d:e7:3d:
bc:78:d0:3c:68:e5:b4:a4:af:dc:5f:57:15:5c:58:
06:04:89:39:d5:08:e3:84:1a:e3:26:22:d3:a4:41:
8b:86:0e:1c:fe:6c:12:c1:b6:04:ca:99:bc:3a:17:
d3:6c:bf:f3:cd:bb:91:77:d8:d0:96:8c:d2:5d:f2:
78:7d:74:99:a4:48:3d:b9:b8:7c:8f:57:23:64:ff:
4d:d3:da:07:44:19:bc:15:23:41:74:d0:b9:dc:31:
76:d3:3a:85:90:ea:49:db:cb:89:1d:e5:a3:41:c3:
89:7d:23:05:e6:d2:bf:15:a6:17:2e:67:e1:29:a6:
14:01:09:be:a5:b3:b5:be:cf:15:58:a0:75:22:76:
7f:3e:44:74:60:4c:d2:de:7d:bf:0e:44:e3:06:ea:
15:37:ba:ad:9e:14:6d:9e:71:a0:9e:e7:bd:d4:fd:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:9B:06:71:EC:F1:A6:44:BB:CD:87:B1:8B:E0:1B:48:92:99:F1:33
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fa:23:16:c0:41:cc:1e:18:d9:49:76:6a:69:82:23:be:a1:
0f:5b:5a:ed:f1:42:32:c3:6a:c7:ef:b4:6d:d1:50:e9:db:d3:
06:71:17:38:c3:5b:7b:af:c1:74:09:9a:8c:66:78:42:48:4f:
73:57:b6:c8:88:ba:70:9d:57:bd:14:13:3d:ff:9f:4f:b2:54:
f0:3d:63:b9:16:ae:fd:50:e2:29:1e:88:6b:87:0b:1d:ac:7b:
0b:1a:cd:55:c2:3f:be:bc:61:8e:56:a1:35:56:6e:45:cc:2b:
ae:95:e4:04:74:15:9b:6d:1f:ec:8d:b3:45:a8:55:ca:67:6d:
74:5e:08:b4:43:37:15:30:17:83:bc:9c:df:26:8b:55:e0:2a:
00:19:00:41:d0:a0:9b:35:e8:d4:17:65:bf:c8:70:19:88:ab:
42:c8:e6:fa:89:fe:e1:9c:76:f1:a6:af:3c:69:37:76:2d:89:
50:66:20:80:96:f0:58:51:21:9f:2f:47:bc:fe:2a:3c:6c:66:
7a:d3:8a:9e:35:f3:ae:4d:ee:a5:0d:48:bc:81:dd:a5:ce:15:
b3:5f:1f:fe:9c:c6:f6:f6:d4:0a:08:ec:b0:aa:fc:52:bd:af:
94:3a:9e:2f:11:81:fb:c7:a1:d7:48:7e:56:68:09:96:0a:64:
de:15:4d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:16 2026 by rpki-client