Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
File: qS5dl54DJTmZRrI5CCLTDx0vNeE.mft (raw, json)
Hash identifier: neG6dIqGrBugnjW5n8Q10SFOHfVECddyqVG2EF4jLxc=
Subject key identifier: 90:84:6A:0E:F6:69:BD:EB:D8:23:3A:0A:BA:3F:9E:75:33:9E:67:24
Authority key identifier: A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
Certificate issuer: /CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Certificate serial: 01A17D73298F2F3BBE65EDC002CA9BA7D17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
Manifest number: 057A
Signing time: Tue 27 Oct 2026 13:01:01 +0000
Manifest this update: Tue 27 Oct 2026 13:01:01 +0000
Manifest next update: Wed 28 Oct 2026 13:01:01 +0000
Files and hashes: 1: LzYZHC-rjJGbruYM23VscVWulpM.roa (hash: sBrrJnoeM0fqyubYgpN8QGXQIytqFwMQbpd5rGJx9Ns=)
2: qS5dl54DJTmZRrI5CCLTDx0vNeE.crl (hash: ATriY19LK5ZznZ7P+79krxAS0uRlhbPk7ibO+KYS5EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:29:8f:2f:3b:be:65:ed:c0:02:ca:9b:a7:d1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92e5d979e0325399946b2390822d30f1d2f35e1
Validity
Not Before: Oct 27 13:01:01 2026 GMT
Not After : Oct 28 13:01:01 2026 GMT
Subject: CN=90846a0ef669bdebd8233a0aba3f9e75339e6724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:8b:68:65:f2:41:32:fb:67:af:cc:8c:eb:
01:c9:77:ab:b3:ab:36:82:bc:5d:53:03:5c:ca:c0:
4f:a7:6b:bc:da:be:0c:2b:58:50:89:20:f9:ca:60:
26:07:f2:5c:30:f7:eb:d4:5e:69:31:9d:da:7f:ec:
56:22:f0:f0:27:3c:22:96:d4:fa:42:eb:09:1b:10:
ec:ca:c7:57:f8:3d:06:ff:8f:21:31:84:51:65:43:
6e:bd:a8:ab:f1:8e:27:8b:47:b3:b5:a6:54:bf:40:
d6:f5:6f:4e:f6:63:f6:50:47:4e:0f:cd:3f:f0:4b:
8a:c7:49:c9:84:4b:67:01:9d:09:c8:1d:f9:ba:64:
64:d9:31:ed:a0:78:78:bd:ce:cc:fc:43:c2:d9:bd:
cf:24:d8:1d:d4:b1:11:d5:1d:37:20:aa:6f:5d:8d:
43:f1:53:40:52:86:1d:b8:e1:d8:53:9b:2d:6c:47:
ba:2b:13:2e:04:72:51:2a:8b:cf:fe:7e:49:4d:27:
3e:27:11:57:80:29:f1:29:43:23:00:cb:75:07:d0:
8f:8a:8d:81:de:9a:92:a2:0b:d7:1c:87:67:65:d5:
a1:44:0c:1b:1c:64:11:45:19:2e:0d:d7:66:06:f6:
b2:fd:f4:df:01:18:8c:97:70:26:77:7a:69:da:6d:
96:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:84:6A:0E:F6:69:BD:EB:D8:23:3A:0A:BA:3F:9E:75:33:9E:67:24
X509v3 Authority Key Identifier:
keyid:A9:2E:5D:97:9E:03:25:39:99:46:B2:39:08:22:D3:0F:1D:2F:35:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS5dl54DJTmZRrI5CCLTDx0vNeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/81115e-bca1-4375-8100-a47d141cfc5a/1/qS5dl54DJTmZRrI5CCLTDx0vNeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:86:5f:7b:13:23:66:0d:ad:5d:52:09:4a:b8:ca:e2:12:03:
39:86:1f:26:6b:36:4c:32:f8:43:d9:89:0f:2e:9c:d6:a8:07:
28:b9:b2:46:18:2f:4c:7d:45:e3:5b:c0:53:81:90:ae:04:f9:
3d:1f:34:8c:66:0d:6b:ac:c4:a4:fe:9b:04:96:ca:5c:67:1d:
4e:2e:e1:0a:a2:45:36:09:23:56:8c:9f:e3:70:58:98:bd:bb:
66:2f:26:41:2c:8e:4b:32:47:2a:ef:02:c7:87:4f:cc:a2:f5:
f4:ae:b1:fc:a1:45:74:7a:1b:bd:1a:fd:3f:77:a3:d3:05:31:
39:14:c0:4a:1a:7d:10:51:58:b8:13:00:78:b9:a1:d0:cf:0c:
7b:5f:26:48:77:5e:87:f7:24:9b:23:4f:99:7d:16:f9:5d:0c:
25:50:e9:f1:89:c7:78:bc:ba:f1:8d:be:e6:3a:6f:11:3f:fa:
13:b3:b4:e0:0c:76:a8:63:a6:f0:2c:10:5b:e3:a4:09:25:7d:
72:3d:6f:5e:59:74:2d:7f:0e:d6:38:4d:75:1c:fa:eb:b5:21:
f0:5e:c5:c7:5e:ca:42:c9:10:f5:be:b9:49:82:14:68:e8:e0:
3c:83:b4:97:dc:2f:70:bf:59:42:0c:10:9b:86:f2:b5:91:8c:
88:ab:5a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:14:44 2026 by rpki-client