Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
File: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft (raw, json)
Hash identifier: rzxQ2GXLyPCO/49JvvXYGRBxUJBOaYeCnX4oxrt03gA=
Subject key identifier: 67:F2:86:87:89:9B:CD:B7:5B:88:12:36:D4:76:DB:CC:0B:4E:81:C6
Authority key identifier: 43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
Certificate issuer: /CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Certificate serial: 01A08C0D96691DB36C6CAD4E3602525CC37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
Manifest number: 1A5F
Signing time: Thu 10 Sep 2026 16:01:35 +0000
Manifest this update: Thu 10 Sep 2026 16:01:35 +0000
Manifest next update: Fri 11 Sep 2026 16:01:35 +0000
Files and hashes: 1: 9jc69vVsdWk6bDgFshwFaPkQiW4.roa (hash: vJY4PURpp9zlGE8vkcu9TTy5SV3ZXYUmKNEh03HjHbE=)
2: McRpwaQnqqZOGTag3hww5pMg2ZA.roa (hash: S2MuhIxLoEt0UYzfR1rcMJ/qgJF6eA4a0C2qNQuo9nk=)
3: Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl (hash: wstPIqk5L8kvOw7Vv40Hp50Lt3aw4oRmpMiBM5HYUv8=)
4: tDspM2jjSgEGhc8BloKM8cbAdEU.roa (hash: yKxOJy53jyvQOqMbQzES6V6OdCvwq23pAU2NRVmp2OI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:96:69:1d:b3:6c:6c:ad:4e:36:02:52:5c:c3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43965dd1f6f24a46d7cc4bccfecd4151c6dd1bfb
Validity
Not Before: Sep 10 16:01:35 2026 GMT
Not After : Sep 11 16:01:35 2026 GMT
Subject: CN=67f28687899bcdb75b881236d476dbcc0b4e81c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d6:a7:6c:42:8c:bc:13:a8:05:0d:02:74:88:
d5:e1:d7:67:d1:c3:f7:ec:39:90:7e:0d:ec:92:81:
2f:47:f8:20:06:a5:7d:d8:34:52:89:cd:c1:9f:e3:
27:fa:c0:4f:6f:2b:fd:d9:ec:79:fd:ca:ec:6e:b4:
79:57:ea:5e:83:ee:51:c7:a4:b4:75:5f:61:7c:a7:
13:94:93:6d:70:57:7a:98:44:7b:f3:62:da:a0:e3:
33:3b:46:86:b4:84:8b:f9:bc:7c:b9:56:46:8e:80:
dc:d9:f2:79:1f:87:56:4e:0b:6b:77:73:ef:0d:0a:
27:5c:0d:56:ef:14:3e:32:a0:a5:ab:1a:2c:fe:2f:
c9:2a:b1:91:86:42:d4:3d:55:1b:1b:c8:a2:13:d7:
d3:0b:57:bd:22:2f:5f:8d:34:76:69:fa:ae:d4:a9:
1a:a9:16:08:49:42:14:86:65:0e:b7:66:9f:9d:17:
b2:16:e4:d2:ee:a3:4c:19:0f:fb:f7:ba:8f:49:58:
06:a2:33:20:a8:c6:bc:85:85:f7:e7:ce:1c:3b:95:
1c:73:09:36:9a:dd:11:95:fd:8c:18:49:f8:61:ce:
b0:5d:0c:67:eb:8a:7d:d6:37:11:d0:05:18:fd:54:
59:93:5d:1a:69:66:2e:f3:22:14:09:8e:0e:2d:21:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F2:86:87:89:9B:CD:B7:5B:88:12:36:D4:76:DB:CC:0B:4E:81:C6
X509v3 Authority Key Identifier:
keyid:43:96:5D:D1:F6:F2:4A:46:D7:CC:4B:CC:FE:CD:41:51:C6:DD:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c731c4-9183-4db3-b70a-33980c03f08e/1/Q5Zd0fbySkbXzEvM_s1BUcbdG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:04:b1:a9:04:7d:40:cf:9a:a8:21:e3:6b:ac:5f:fd:01:79:
75:5e:fb:c9:47:1b:59:66:e7:76:72:c8:6d:71:5c:45:3e:4a:
81:ea:6c:51:b9:d2:c7:85:0c:ad:bf:03:7b:13:63:b2:2e:29:
53:61:fa:69:ba:19:a6:4a:7c:80:59:af:a6:43:dd:4b:f0:4e:
83:4a:5e:6f:b7:1e:53:3e:51:18:5d:d4:5a:7f:be:3b:f0:d0:
d9:56:03:d3:06:78:d1:0e:d6:ab:19:8a:0c:0d:eb:5e:e9:af:
26:3b:0e:03:91:e4:19:aa:75:99:3b:6c:d5:c6:ce:2e:2b:be:
fc:cc:ce:20:01:86:f4:d2:8f:f1:d1:ca:d6:6f:b2:ab:21:0d:
1d:d4:23:1f:21:34:11:e4:8d:28:02:75:43:bc:15:41:9e:4f:
d1:12:77:23:ec:38:cb:22:97:1c:f6:3e:b5:59:1c:33:23:35:
0d:24:bc:8f:7d:f9:02:2a:a9:98:91:30:24:af:a4:66:be:3e:
cd:e6:68:e7:74:c1:b7:30:2d:9b:08:f5:d0:a9:d9:a7:c9:45:
7e:b2:c0:5f:5b:b8:23:e5:c5:12:86:a5:50:7e:10:68:b4:1c:
a5:1c:05:a9:24:8d:53:e6:41:c0:26:2c:d6:13:39:ea:3a:0d:
0c:cb:ff:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:33:03 2026 by rpki-client