Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
File: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft (raw, json)
Hash identifier: ty4zBkLlHQRwZuBJjDT9jzNbvMYd/IQbDgtJ6XgTAKM=
Subject key identifier: E5:ED:0E:4C:B8:D5:97:C0:4F:35:2C:40:E9:DA:13:22:A5:8B:CA:AF
Authority key identifier: A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
Certificate issuer: /CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Certificate serial: 01A183758F6C7259900489CAF6744E4DBAE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 17:01:22 +0000
Manifest this update: Wed 28 Oct 2026 17:01:22 +0000
Manifest next update: Thu 29 Oct 2026 17:01:22 +0000
Files and hashes: 1: TG-T28D3sM1IJX9-bR6zimuu3dQ.roa (hash: sKx/GRdEWeKSqR5AF1hTqJiMQ+ztWu0vS1aze4IWqmA=)
2: qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl (hash: XnaxiTZaHIur1MoD+jOSPlv+8uHmP59m82yvfssKAM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:75:8f:6c:72:59:90:04:89:ca:f6:74:4e:4d:ba:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98e5943c355d48c004e6bf4a3b6cdb8c30adc4c
Validity
Not Before: Oct 28 17:01:22 2026 GMT
Not After : Oct 29 17:01:22 2026 GMT
Subject: CN=e5ed0e4cb8d597c04f352c40e9da1322a58bcaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:63:d5:fb:c6:1c:8b:c5:8a:2f:c0:b2:79:a2:
83:69:76:70:5f:d8:79:a7:a2:f5:4f:36:8e:aa:ca:
39:ed:da:83:ad:02:f9:b9:52:a9:df:3d:ab:15:c8:
75:5e:95:d0:9f:a7:64:a9:b4:fd:02:13:d3:e7:6f:
1d:8c:ab:7f:2a:6a:6a:48:29:1d:36:d0:ff:c4:9e:
f4:fc:78:ea:94:41:c8:5e:de:a5:8c:09:fe:17:33:
9c:79:f8:94:1e:70:66:0c:0b:0e:3f:f7:e9:ae:ac:
87:4a:cf:d8:5b:ca:79:41:f1:c3:4c:1b:61:21:be:
15:76:a0:e8:0d:df:a5:40:56:8d:80:58:32:ae:f0:
f2:a4:a0:05:3a:ab:dd:41:44:88:fa:e1:9b:6e:8d:
e7:5a:04:19:50:d7:f2:82:c0:7e:f9:52:fc:25:80:
1d:93:04:1e:0e:29:e4:ac:8b:b3:69:2f:87:f3:a3:
e3:f2:0e:40:46:9e:b6:a4:9d:37:c1:13:ef:af:4b:
44:dc:da:8d:3b:f8:67:da:15:b7:5e:7b:2a:ba:ce:
45:46:c1:c6:60:62:bb:10:5a:9a:7f:b4:77:e0:81:
d6:a4:9c:eb:a5:b2:86:88:98:18:64:28:59:f2:b1:
86:57:3b:10:bb:18:85:db:28:76:cf:35:ef:91:96:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:ED:0E:4C:B8:D5:97:C0:4F:35:2C:40:E9:DA:13:22:A5:8B:CA:AF
X509v3 Authority Key Identifier:
keyid:A9:8E:59:43:C3:55:D4:8C:00:4E:6B:F4:A3:B6:CD:B8:C3:0A:DC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd92cd-7fe3-4223-8350-3c773a6c42f9/1/qY5ZQ8NV1IwATmv0o7bNuMMK3Ew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:ab:ce:8c:c1:0d:a8:14:20:7c:d5:61:25:31:08:7d:05:7d:
d5:7e:d1:23:0d:ac:8a:ba:cc:97:95:8c:86:ed:21:bd:22:d3:
f9:d6:5b:46:92:a6:d0:0f:a1:9f:72:c1:22:23:34:f4:d8:83:
63:1a:41:4b:c7:8a:f0:4f:e0:57:c3:36:ef:4b:d1:c4:e7:cd:
af:ac:34:62:dd:56:b1:5c:df:cc:92:d9:40:cc:70:6e:a9:15:
b2:25:de:2c:03:3c:0f:bd:ac:d6:a7:51:eb:84:65:a8:67:6c:
52:0e:94:bf:87:37:98:5c:15:46:b7:c0:af:94:34:46:68:31:
69:bc:11:ba:93:c2:8d:51:ec:a2:a2:95:d6:8f:70:72:5d:c4:
b7:24:7f:a2:28:8d:e7:b1:52:93:59:d0:c3:1d:da:6e:0b:43:
b1:79:f4:0f:8e:6b:8e:4d:19:74:b0:1b:69:14:ad:80:fc:f5:
ff:74:1b:7f:1c:a2:ff:01:5f:8d:46:26:18:02:3e:74:de:10:
e4:4e:c2:4c:c3:94:12:0a:64:d4:95:54:ac:d2:68:93:e0:4d:
a0:23:b8:28:57:e7:67:14:ab:28:7b:b5:42:1f:2d:e6:0c:6a:
49:1b:bb:41:cf:23:df:32:1c:f9:2a:30:b3:97:4a:af:c4:87:
48:50:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 20:58:21 2026 by rpki-client