Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
File: qFERp16dOcxDDqhbjSkgYNnop8I.mft (raw, json)
Hash identifier: AoU+58V/MwHbWJ7B5DOzCygWzo0LmtbXs6SE3p7MPVY=
Subject key identifier: 2B:51:03:21:17:2A:66:5F:BC:83:C0:FC:6B:91:67:F7:C3:F7:97:61
Authority key identifier: A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
Certificate issuer: /CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Certificate serial: 01A14D62A4B1D16F7412FFE92FDC4A9A6399
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
Manifest number: 0156
Signing time: Sun 18 Oct 2026 05:01:12 +0000
Manifest this update: Sun 18 Oct 2026 05:01:12 +0000
Manifest next update: Mon 19 Oct 2026 05:01:12 +0000
Files and hashes: 1: h6c3rKlsCh2Ta6ieH4wNZunbZ_c.asa (hash: wHSgIizYN0GV/TTAR4CRTTTf21VDW35ePjsqiIQojnU=)
2: qFERp16dOcxDDqhbjSkgYNnop8I.crl (hash: aXhPWSgkv6rBQUO0Q2GZnioBuIz8tFHJqnaNRc1gdyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:62:a4:b1:d1:6f:74:12:ff:e9:2f:dc:4a:9a:63:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85111a75e9d39cc430ea85b8d292060d9e8a7c2
Validity
Not Before: Oct 18 05:01:12 2026 GMT
Not After : Oct 19 05:01:12 2026 GMT
Subject: CN=2b510321172a665fbc83c0fc6b9167f7c3f79761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:bf:d4:7c:69:e8:80:8a:8f:81:26:29:05:
d2:44:09:88:07:6d:13:b9:47:03:c0:9a:74:cc:4d:
19:2f:59:49:16:39:00:fe:f6:e3:e0:12:e6:05:dc:
d0:a6:62:cd:c6:0f:79:ba:1a:4c:01:16:95:cd:d2:
76:d8:82:c6:34:c6:65:44:fe:cd:dc:7d:b1:04:d4:
39:da:21:5e:e2:83:13:36:22:ab:37:9a:5f:db:2f:
1b:dd:e5:b7:9e:48:8b:27:97:d3:31:73:49:a5:4b:
e5:ec:a3:12:24:4b:91:fb:1b:47:9b:c4:ad:33:2e:
99:c7:b3:fc:81:20:1f:3e:c5:ae:53:52:72:e8:78:
38:e9:5c:61:e1:ba:9d:dd:1d:8b:9b:3d:c6:7b:c8:
8a:81:3f:65:a2:a0:20:cc:03:26:68:bd:39:41:d8:
58:99:30:e0:f2:75:72:69:be:59:ed:5c:58:89:f9:
90:72:82:c6:f3:9e:49:e3:c6:51:66:11:e3:3b:43:
b5:49:a4:ed:79:f1:aa:c1:c7:1a:f1:82:ed:19:2b:
19:7b:23:13:f6:5d:de:da:5e:c8:07:ed:64:88:55:
10:da:ff:d2:88:8c:ff:e0:ab:82:93:66:4d:93:55:
07:e9:5e:e8:f9:fc:90:e0:8d:18:16:3d:fd:bf:d5:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:51:03:21:17:2A:66:5F:BC:83:C0:FC:6B:91:67:F7:C3:F7:97:61
X509v3 Authority Key Identifier:
keyid:A8:51:11:A7:5E:9D:39:CC:43:0E:A8:5B:8D:29:20:60:D9:E8:A7:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFERp16dOcxDDqhbjSkgYNnop8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cd0bda-cbb2-48f3-9dd2-52d8d6e6d298/1/qFERp16dOcxDDqhbjSkgYNnop8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:9a:e7:e7:50:cb:fb:4d:ed:5e:0b:8f:a8:91:69:11:a5:7f:
2a:64:d3:42:54:a1:1b:82:d5:53:31:65:71:fe:3f:7f:30:37:
3a:79:8a:25:59:47:62:79:08:03:1c:9a:e3:21:5b:b8:b3:89:
35:8b:df:f9:91:1f:83:bd:51:9e:16:87:fc:5f:63:77:73:82:
fd:f3:a9:91:9c:90:b5:6f:56:7c:21:09:e9:de:17:65:1c:eb:
9e:2b:8b:ac:53:1f:0d:9b:a4:41:b3:05:cd:0e:8e:89:76:0c:
8c:2e:4a:8a:b4:e9:28:ba:31:87:22:28:3d:5f:52:fa:bf:ac:
a6:b9:2c:2a:48:73:e3:b7:ed:0a:5a:f5:6a:13:02:f4:e5:1e:
a8:7d:ed:b6:8d:e2:c3:e2:c4:41:52:11:2f:a0:d6:7b:ea:29:
d5:02:12:e8:f4:0d:db:65:eb:1d:7f:95:98:e5:0a:f4:bf:db:
25:37:ea:4f:8f:4c:1f:88:2c:6f:49:18:6a:d5:fc:fb:79:ca:
57:01:63:26:ee:1f:1a:c8:d5:f1:d4:d7:c0:13:f7:b6:b1:aa:
e7:b4:04:0e:19:40:79:dc:37:85:52:5a:00:f0:77:c1:d6:b6:
28:d3:b8:35:13:a0:66:27:29:d1:d2:5b:c9:8e:46:c5:6d:b3:
72:01:41:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 10:56:51 2026 by rpki-client