Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json)
Hash identifier: GVKCtk1AJF6ltQp7uYZYVcQFD+DIDMdNd7N/RR9qqQY=
Subject key identifier: A2:01:93:27:E8:2C:28:48:DE:D8:7E:A4:B7:9C:10:FC:D0:EC:38:01
Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Certificate serial: 01A1570ACF5EF99B9540423CAFC435BB759A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
Manifest number: 052A
Signing time: Tue 20 Oct 2026 02:01:28 +0000
Manifest this update: Tue 20 Oct 2026 02:01:28 +0000
Manifest next update: Wed 21 Oct 2026 02:01:28 +0000
Files and hashes: 1: IDbm4BTVJkr2LGXzbqOrz6EVNx4.roa (hash: 6Be3sqYYXs7RhhAxfXcGlT5hWEPDQQflddEPFI3kouc=)
2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: G7wPiXKJs2JcAkqHob7Ba2Qq/ENn2h//0lLMrP/2LrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:0a:cf:5e:f9:9b:95:40:42:3c:af:c4:35:bb:75:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b
Validity
Not Before: Oct 20 02:01:28 2026 GMT
Not After : Oct 21 02:01:28 2026 GMT
Subject: CN=a2019327e82c2848ded87ea4b79c10fcd0ec3801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:3e:fe:4d:c8:b3:09:ad:af:5b:ba:23:ba:
a3:ad:67:7d:7d:15:fa:24:6b:07:d2:04:e7:b5:21:
82:ba:4c:62:a7:1d:8e:b5:63:1c:9f:94:69:99:53:
9a:08:99:4f:e1:f6:5b:ac:bd:66:12:ff:70:f7:a8:
23:f0:a9:18:6a:5d:14:7f:32:18:ee:fc:57:a6:0c:
55:2a:61:f0:8e:78:c9:48:6e:8f:12:cf:42:19:c5:
c4:f4:2c:33:b0:06:91:81:9e:ba:ca:46:1f:a5:eb:
ae:82:5e:86:43:c6:3f:90:6b:64:ae:6d:c2:25:8e:
8c:c7:e9:dd:fe:eb:fc:4a:f7:a3:81:4e:3d:1e:b3:
63:7f:d7:5e:b5:e1:4e:c6:c9:1f:bf:64:53:6e:23:
f9:70:3b:42:83:3d:75:e1:f9:f9:5c:f2:69:19:ca:
60:ec:97:05:5b:33:87:d5:26:92:69:fe:ae:b6:d9:
a7:62:c1:94:b2:5f:b4:f1:7f:2d:95:66:72:ca:97:
7c:af:df:04:0b:0e:bf:29:d5:ab:de:60:6e:28:88:
50:e4:80:d2:e2:5f:5a:cc:91:a0:9f:ba:59:4f:d1:
69:67:5a:b9:b3:a0:ba:45:ff:be:8b:03:17:14:32:
17:8a:8b:cf:7e:6b:a3:3d:94:03:a2:77:3e:19:52:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:01:93:27:E8:2C:28:48:DE:D8:7E:A4:B7:9C:10:FC:D0:EC:38:01
X509v3 Authority Key Identifier:
keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:26:76:49:47:14:b6:f9:81:9f:93:de:4e:a4:64:20:49:9c:
7c:ad:b5:f1:6f:80:12:f3:64:57:89:a4:97:40:39:f2:20:ff:
a7:5a:79:d1:41:34:75:da:5b:aa:a4:56:b0:96:f8:59:b4:47:
5b:4f:ed:57:70:f1:13:57:dd:95:21:55:24:15:51:bf:47:9b:
49:46:1e:b2:32:42:53:5e:fc:db:8a:be:6c:5f:54:fd:82:0a:
5d:e9:24:59:d8:22:b8:78:f6:71:79:79:dd:5b:1b:42:4e:6a:
c4:bf:5b:9a:19:bc:19:74:ba:52:09:b3:8a:98:fc:ca:cc:42:
b2:0a:04:8d:94:7b:bb:d8:5e:46:48:bd:ed:43:8a:00:3e:9a:
85:12:bd:79:d6:2a:49:08:73:bc:0a:81:c3:7c:22:dc:58:35:
4a:75:1a:60:7f:75:16:99:35:e0:7b:d1:95:cb:59:ef:a3:1e:
84:cc:67:c6:c1:36:f5:a6:d1:05:fc:04:78:bf:9d:65:37:c8:
26:31:3e:ba:7e:d1:27:bf:16:38:54:39:20:9b:65:3b:ea:82:
ef:49:01:5a:6c:e3:4c:b4:7b:c4:cc:46:89:16:fc:d4:16:ab:
88:ce:17:4b:81:90:0e:9f:89:7d:d6:7c:36:01:62:99:98:15:
45:8d:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:31:00 2026 by rpki-client