Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
File: qjX5B-x9v5xluBWqPXICtt-uMUg.mft (raw, json)
Hash identifier: RTA3hIo9IYKXt7jYBNtD2cuwQeFooOnx5gel6dH8L3w=
Subject key identifier: 40:A0:8F:28:FB:94:28:D7:B9:DB:6D:82:5A:1F:F7:DC:AE:2D:22:FC
Authority key identifier: AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
Certificate issuer: /CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Certificate serial: 01A15B552CBF3217EF94F16178FA404DDC64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
Manifest number: 1AB3
Signing time: Tue 20 Oct 2026 22:01:10 +0000
Manifest this update: Tue 20 Oct 2026 22:01:10 +0000
Manifest next update: Wed 21 Oct 2026 22:01:10 +0000
Files and hashes: 1: qjX5B-x9v5xluBWqPXICtt-uMUg.crl (hash: 8KquCfe9adv4c6ySod1w4ZU7ObYj/k84nqKmCLZNxjM=)
2: tkDo3ZU0uU50tRqmy_OtbPqQ45I.roa (hash: oFn0sS2KIEC+fcfgS1boOcIBmwWzk50WRGkvZp+ryXo=)
3: wga_WdR_8QvLv6SYCAFbkFgE4IY.roa (hash: 1WShRNTFDIi2o5zhM9Z4CcfauIXDzI1Kphz/pH1YsqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:55:2c:bf:32:17:ef:94:f1:61:78:fa:40:4d:dc:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f907ec7dbf9c65b815aa3d7202b6dfae3148
Validity
Not Before: Oct 20 22:01:10 2026 GMT
Not After : Oct 21 22:01:10 2026 GMT
Subject: CN=40a08f28fb9428d7b9db6d825a1ff7dcae2d22fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9b:77:97:ef:8d:a2:d3:15:07:ad:61:4b:f6:
f4:4c:69:a4:fb:06:4b:bf:18:37:34:e0:28:dc:b4:
f2:f6:c8:e6:89:7f:d4:dc:d6:c3:e4:28:7f:e5:a2:
3d:30:49:75:9b:14:e6:3b:6d:98:07:2c:ee:ed:83:
3b:df:01:36:09:22:ef:80:a7:ed:bc:72:a8:f4:0f:
94:01:87:1c:ad:81:92:e4:d8:cb:58:f8:e1:80:b0:
7f:e0:22:94:a2:35:f4:5d:c5:0d:55:0d:1d:47:e1:
d5:7a:0f:6a:6b:e7:49:af:b3:1e:aa:a4:f1:cc:88:
1e:79:89:ab:4b:99:eb:0b:9a:d7:e4:98:fe:83:cb:
e7:f0:8e:be:dc:53:e6:2d:85:56:02:66:59:19:d7:
ea:e2:9b:46:66:2d:6b:16:cd:c2:eb:cd:47:97:a9:
84:9b:8b:56:8e:3b:cf:f5:de:af:a2:8d:79:0f:b4:
cd:8f:ad:49:31:26:a4:e3:eb:48:a9:a5:c8:b0:86:
7f:2f:2b:b3:98:df:b8:09:74:b7:6d:48:1a:4a:1a:
df:60:45:78:27:06:6d:f2:db:69:c7:ce:02:e8:61:
09:79:b1:fa:97:76:74:92:9f:09:6f:5b:1a:61:6a:
42:d2:5f:c2:59:91:b2:97:e0:2f:17:55:2a:fd:07:
5c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A0:8F:28:FB:94:28:D7:B9:DB:6D:82:5A:1F:F7:DC:AE:2D:22:FC
X509v3 Authority Key Identifier:
keyid:AA:35:F9:07:EC:7D:BF:9C:65:B8:15:AA:3D:72:02:B6:DF:AE:31:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX5B-x9v5xluBWqPXICtt-uMUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b1c50e-af27-4a62-ae23-b6f1cfaa6985/1/qjX5B-x9v5xluBWqPXICtt-uMUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:fa:93:c0:24:e2:a9:09:80:f2:ce:d5:0d:dc:f7:77:e6:0a:
83:01:a3:b4:96:34:51:23:8f:52:98:18:a9:eb:4c:4b:ab:49:
e6:90:3a:81:db:d4:b0:55:f7:4e:be:b2:06:66:14:7f:9c:ff:
52:75:27:b0:73:be:7d:67:57:92:70:18:e1:b2:17:18:b7:1c:
96:c6:87:67:cf:ab:41:87:d4:89:8b:5c:1a:e4:50:a1:49:d1:
54:6e:df:28:a6:5b:82:27:05:7e:e1:20:26:c7:ce:c0:a9:83:
3c:55:f0:e2:f8:ba:47:fd:ec:eb:3f:44:3c:90:12:f0:84:6f:
8b:6a:20:b1:5f:10:bd:c9:c2:8d:64:d6:fa:0f:c2:dd:56:4a:
05:fa:a9:b3:65:75:75:fb:92:e0:12:27:5b:80:86:30:c2:04:
8c:75:54:99:1c:df:c3:27:89:1a:c3:a7:a7:f4:69:2c:a3:42:
63:cf:26:be:0d:e1:3c:06:bd:71:ea:0d:67:2a:ab:bc:45:9b:
d9:25:1a:a4:e4:d3:53:b5:9e:24:c0:53:eb:c9:a0:85:98:01:
d8:8e:85:16:aa:b4:5d:2f:6b:c3:64:2a:09:8d:90:45:cb:8e:
18:d7:9d:c4:29:48:87:01:01:6e:19:25:8e:53:13:c3:33:d5:
dc:5b:85:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:52:19 2026 by rpki-client