Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
File: qlPNLFhKPcFiCLqTsNt0dzs_I74.mft (raw, json)
Hash identifier: H2BnKPLrdSspz+JkP+XqMTLaDD2fV2SkXFYmeAIlnf4=
Subject key identifier: D9:88:15:7A:D9:B6:D6:72:41:CB:3C:B2:DB:C5:83:4A:29:AE:31:74
Authority key identifier: AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
Certificate issuer: /CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Certificate serial: 01A08A8D535FD30ECC0B74FFF5CD17CEEC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 09:01:52 +0000
Manifest this update: Thu 10 Sep 2026 09:01:52 +0000
Manifest next update: Fri 11 Sep 2026 09:01:52 +0000
Files and hashes: 1: GkaV6j5jPz1mP-Dn9Vke0qIsBRE.roa (hash: D0faA0NAhOg5B8uJp2cs027yC0WcbwJy1xgJBQXojpc=)
2: qlPNLFhKPcFiCLqTsNt0dzs_I74.crl (hash: TPBHs2ntq4NRMHDPB39IE9hTJo13012hw+0b4gfskrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:53:5f:d3:0e:cc:0b:74:ff:f5:cd:17:ce:ec:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa53cd2c584a3dc16208ba93b0db74773b3f23be
Validity
Not Before: Sep 10 09:01:52 2026 GMT
Not After : Sep 11 09:01:52 2026 GMT
Subject: CN=d988157ad9b6d67241cb3cb2dbc5834a29ae3174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:dd:aa:2c:5d:69:86:8f:09:2b:df:94:d7:
2e:a1:f9:a1:86:06:fc:ce:72:bc:7f:39:10:fd:82:
51:c6:c6:ad:83:97:12:e2:f5:72:9b:d3:23:b4:d4:
50:52:14:26:54:0c:69:83:72:40:88:54:49:41:fd:
d7:83:56:4f:26:9e:64:c8:02:9a:1a:82:9a:7a:a3:
c6:31:51:d4:6e:a6:eb:68:b1:48:2a:58:4f:d3:2a:
06:e4:0a:61:b7:91:d3:56:eb:52:34:d8:fe:21:12:
e3:0e:ec:11:20:a2:a2:70:d3:a8:93:5d:61:e1:f2:
9e:5d:2f:d9:bf:2f:c4:41:73:78:5b:7b:bb:ca:51:
1d:ec:e8:7a:d3:5e:1a:af:c3:5d:37:72:a7:c2:ab:
f5:e4:37:ba:8f:2f:62:c4:6e:e0:25:52:17:ee:41:
89:85:76:e8:14:9d:7c:c2:78:37:07:14:1e:89:05:
15:8e:d4:30:ce:7b:2b:d4:1e:38:80:a5:0a:c5:2d:
d1:ce:aa:4d:46:8c:2c:58:c1:36:91:5f:a3:35:9a:
6c:ec:3d:d5:f2:6a:75:aa:ac:d3:72:df:b6:52:39:
7d:43:34:52:2d:c8:8b:da:d0:2a:61:8c:04:a9:e4:
e5:ad:5b:86:ab:9f:3f:be:86:4c:ed:36:e6:2f:06:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:88:15:7A:D9:B6:D6:72:41:CB:3C:B2:DB:C5:83:4A:29:AE:31:74
X509v3 Authority Key Identifier:
keyid:AA:53:CD:2C:58:4A:3D:C1:62:08:BA:93:B0:DB:74:77:3B:3F:23:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qlPNLFhKPcFiCLqTsNt0dzs_I74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e670a7-ad78-457e-ad80-007978bdb052/1/qlPNLFhKPcFiCLqTsNt0dzs_I74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ea:22:e6:f0:47:8f:87:4b:73:65:e7:91:d7:28:ec:74:8a:
a5:d7:f9:41:1f:36:71:4e:9a:9b:28:56:85:5d:f3:80:f0:b4:
d4:77:73:11:f5:17:63:12:37:da:f0:45:88:97:59:69:07:f5:
2c:1f:cd:81:2b:8f:9b:28:58:76:d0:06:ed:0c:cd:97:87:be:
bb:46:43:6b:5f:bc:5e:75:8a:10:b4:4c:f0:fb:3a:0f:1c:ab:
48:20:b2:18:99:36:ac:d9:83:96:3d:cf:fa:e3:38:66:a4:b5:
ea:a2:6a:df:4a:26:22:37:68:2b:fb:9d:a5:64:f5:fa:9a:99:
20:5a:23:74:82:22:a1:44:cf:07:75:f0:54:a8:3a:58:d1:e8:
b0:7d:f5:ad:0e:f7:06:2d:4d:7a:5c:43:61:b2:87:8c:05:71:
9a:03:e5:bb:2d:35:ac:3c:af:9e:be:d0:a2:1a:f2:1a:3a:27:
b8:f7:a0:40:b0:41:c5:cc:9e:10:84:ff:fc:bd:5a:13:d9:e2:
8a:1f:8d:41:f7:26:ca:58:d3:3a:0b:82:c1:a8:5b:8b:75:bc:
28:13:ae:e7:95:2b:78:3f:c6:d5:7c:79:7b:a3:30:d5:b8:96:
dd:2f:0a:52:31:5c:bb:70:29:ee:3c:21:7e:61:3c:0f:95:e2:
fe:b1:fd:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjVNf0w7MC3T/9c0XzuxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNTNjZDJjNTg0YTNkYzE2MjA4YmE5M2IwZGI3NDc3M2Iz
ZjIzYmUwHhcNMjYwOTEwMDkwMTUyWhcNMjYwOTExMDkwMTUyWjAzMTEwLwYDVQQD
EyhkOTg4MTU3YWQ5YjZkNjcyNDFjYjNjYjJkYmM1ODM0YTI5YWUzMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9LdqixdaYaPCSvflNcuofmhhgb8
znK8fzkQ/YJRxsatg5cS4vVym9MjtNRQUhQmVAxpg3JAiFRJQf3Xg1ZPJp5kyAKa
GoKaeqPGMVHUbqbraLFIKlhP0yoG5Apht5HTVutSNNj+IRLjDuwRIKKicNOok11h
4fKeXS/Zvy/EQXN4W3u7ylEd7Oh6014ar8NdN3Knwqv15De6jy9ixG7gJVIX7kGJ
hXboFJ18wng3BxQeiQUVjtQwznsr1B44gKUKxS3RzqpNRowsWME2kV+jNZps7D3V
8mp1qqzTct+2Ujl9QzRSLciL2tAqYYwEqeTlrVuGq58/voZM7TbmLwYF4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmIFXrZttZyQcs8stvFg0oprjF0MB8GA1UdIwQY
MBaAFKpTzSxYSj3BYgi6k7DbdHc7PyO+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAt
MDA3OTc4YmRiMDUyLzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9lNjcwYTctYWQ3OC00NTdlLWFkODAtMDA3OTc4YmRiMDUy
LzEvcWxQTkxGaEtQY0ZpQ0xxVHNOdDBkenNfSTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOoi5vBH
j4dLc2Xnkdco7HSKpdf5QR82cU6amyhWhV3zgPC01HdzEfUXYxI32vBFiJdZaQf1
LB/NgSuPmyhYdtAG7QzNl4e+u0ZDa1+8XnWKELRM8Ps6DxyrSCCyGJk2rNmDlj3P
+uM4ZqS16qJq30omIjdoK/udpWT1+pqZIFojdIIioUTPB3XwVKg6WNHosH31rQ73
Bi1NelxDYbKHjAVxmgPluy01rDyvnr7QohryGjonuPegQLBBxcyeEIT//L1aE9ni
ih+NQfcmyljTOguCwahbi3W8KBOu55UreD/G1Xx5e6Mw1biW3S8KUjFcu3Ap7jwh
fmE8D5Xi/rH9Rg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:11:52 2026 by rpki-client