Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
File: Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft (raw, json)
Hash identifier: 0Xk7IxzNbtL0LfdfXmTDrzfx91RcyZZuA6xbDcMxB9U=
Subject key identifier: 6A:DB:0D:1E:55:33:D4:CF:BF:16:1F:E9:58:16:69:91:72:20:D4:09
Authority key identifier: 42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
Certificate issuer: /CN=425bf4375f17a0357019690301f9419324ff7d44
Certificate serial: 01A17D3C8FEA1D3C51DC98DD07B80C8D24C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
Manifest number: 1A5C
Signing time: Tue 27 Oct 2026 12:01:23 +0000
Manifest this update: Tue 27 Oct 2026 12:01:23 +0000
Manifest next update: Wed 28 Oct 2026 12:01:23 +0000
Files and hashes: 1: Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl (hash: sofSKadDf3OG86JEIWl4CLJ7qEooC8lgEDw64x6/3Ic=)
2: ekViUfVjeX96GOzSolN__8-4A4k.roa (hash: YyzGmywtQBLblhHE3rDDlveGwps6u/nY6w46Xdc6qtY=)
3: meH9o9i7-j2R-Vcd-oY44f90eGc.roa (hash: jMkC1VRwXkD+Vzq7AX9qpzMXsW5ynXfkYRel0vHaW90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:3c:8f:ea:1d:3c:51:dc:98:dd:07:b8:0c:8d:24:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425bf4375f17a0357019690301f9419324ff7d44
Validity
Not Before: Oct 27 12:01:23 2026 GMT
Not After : Oct 28 12:01:23 2026 GMT
Subject: CN=6adb0d1e5533d4cfbf161fe9581669917220d409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:f8:0b:56:5c:8f:dd:be:7b:dc:77:8c:4e:a6:
03:0d:70:0e:fe:31:5c:4f:a6:c6:9d:44:69:5c:b7:
2f:8a:79:f0:8a:0f:b7:72:66:d2:1e:12:53:9f:14:
54:b0:e2:d2:c7:6f:8e:3a:36:8c:ff:c9:35:3a:ff:
a6:f5:6d:82:e2:23:ea:71:7d:6b:d0:46:12:f6:bd:
6d:4a:e7:da:09:ec:b6:ca:63:dd:be:08:b2:57:f4:
7f:d4:17:f4:c2:52:14:b6:a1:32:67:b5:7f:40:a7:
57:f7:56:cd:d3:04:b7:1f:6c:dd:19:53:30:27:82:
ed:25:9d:77:2e:5d:89:59:ed:98:c4:72:cd:5b:b2:
52:45:3e:7c:ac:33:37:92:f0:ca:9c:4f:a7:2b:30:
7f:8b:3b:a9:04:e8:09:d3:6b:4d:d9:a1:d5:ec:9c:
6e:87:1c:fe:8c:cf:b0:df:ff:21:de:82:43:b1:6c:
9d:d7:58:24:fa:98:19:80:03:c1:a1:3d:2d:41:5b:
df:17:40:d5:c9:54:a4:93:d8:44:31:9a:5c:b4:7b:
39:d3:73:4a:1e:30:aa:08:8f:10:46:36:fd:60:b0:
66:10:a8:ed:0e:f0:15:66:9f:f7:25:64:18:58:66:
3a:9d:1a:54:c4:c1:f0:0a:5c:a1:5e:fb:38:24:bd:
21:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:DB:0D:1E:55:33:D4:CF:BF:16:1F:E9:58:16:69:91:72:20:D4:09
X509v3 Authority Key Identifier:
keyid:42:5B:F4:37:5F:17:A0:35:70:19:69:03:01:F9:41:93:24:FF:7D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qlv0N18XoDVwGWkDAflBkyT_fUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f28a75-d53f-4e9f-82dd-f0ed8fe82b97/1/Qlv0N18XoDVwGWkDAflBkyT_fUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:57:b1:b2:96:11:7e:f1:70:50:75:40:56:25:38:fc:4b:db:
75:b6:87:c9:a1:19:66:87:a1:e7:f4:84:0e:b5:ff:a4:bd:9b:
63:1b:ef:58:e0:82:00:7f:03:80:ca:39:fc:d7:43:01:91:09:
73:a6:2a:b6:59:bd:1b:fa:2f:ee:98:bf:2e:58:e2:91:59:ef:
5f:c7:39:c8:a2:76:c9:44:9d:2b:45:02:fb:de:c9:e4:60:25:
5a:d0:b6:0d:a3:1e:5f:52:a1:24:60:0c:1b:0e:95:dc:fa:dc:
af:34:73:12:f7:0a:43:b7:6f:3e:de:d8:24:65:5d:af:a7:1d:
f2:d0:d9:cf:34:b0:2a:9b:fd:6f:59:25:48:92:aa:33:0d:d1:
46:1f:aa:1d:4c:e2:72:52:d2:fd:a2:7f:5c:20:df:a8:44:2c:
57:ea:0c:46:fc:bb:a7:8a:8c:23:0e:a2:c0:35:e6:f1:df:c6:
b1:1c:80:0c:ef:b7:4a:ae:31:bd:88:f2:27:bc:d2:63:39:8b:
89:51:31:4b:9e:e1:c7:fa:38:19:72:c9:44:2e:a4:8c:a2:8e:
81:94:67:c8:e3:d3:e9:a9:55:17:f3:25:5e:1d:bc:13:96:21:
ad:8d:04:5e:66:9f:ff:ff:ad:a2:9c:34:7e:83:ee:43:3f:cc:
04:7a:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:30:10 2026 by rpki-client