Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: WBYEikABvoAgJxtM9evaJqkjXgwf+vzBkobCokRaM9I=
Subject key identifier: 5D:DE:98:CC:D6:ED:D9:D9:36:B3:3E:23:FC:D9:F1:55:70:F2:52:44
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 01A190FA047F9DDA82E955A4F68831B565DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 1AD2
Signing time: Sat 31 Oct 2026 08:01:06 +0000
Manifest this update: Sat 31 Oct 2026 08:01:06 +0000
Manifest next update: Sun 01 Nov 2026 08:01:06 +0000
Files and hashes: 1: VQMozEw5e5cFbAbax7TNnFtChpk.roa (hash: kcI4JK6ZQqSjrwXa7nCut12JkcTP0x/T3dN3B6kDSUw=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: ktJ9LnvLfuD0phDpX9MYBO4wHhBYAcpa+hwLqZlaVPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:fa:04:7f:9d:da:82:e9:55:a4:f6:88:31:b5:65:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Oct 31 08:01:06 2026 GMT
Not After : Nov 1 08:01:06 2026 GMT
Subject: CN=5dde98ccd6edd9d936b33e23fcd9f15570f25244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:67:e9:c4:6b:72:90:43:57:2c:36:5d:c0:a1:
76:a1:c0:40:28:19:d7:2b:de:d2:30:8a:cb:28:d7:
89:97:ae:d7:23:2a:41:d5:89:4f:18:7a:ce:3b:3a:
9d:2e:d8:43:ae:a8:05:44:d3:c0:ee:e2:fb:be:66:
39:f4:74:7c:e8:1c:80:73:d2:91:09:31:0d:4e:2e:
f9:7b:5c:80:5a:c1:fe:01:31:e7:d3:61:03:85:bb:
c9:e4:04:d8:92:86:49:c4:f6:6e:c4:b3:86:fa:bd:
d5:09:dc:34:a3:cc:d0:42:ab:ca:24:2b:cd:d4:f9:
d4:ba:26:4f:6e:ee:58:9b:77:09:c3:02:a6:82:5b:
0f:46:ff:cd:42:8d:c4:8b:6e:56:f5:51:7b:39:23:
be:44:ee:a1:ae:95:0d:9b:e7:cb:67:cc:75:fc:70:
e7:65:31:aa:4f:a0:01:0f:d6:f7:e8:e8:2f:08:93:
b7:16:90:cf:27:7f:52:8d:3f:b7:42:76:0d:b5:7f:
50:e8:33:22:ce:51:47:6c:0f:7a:96:6b:95:02:42:
78:d5:6e:44:80:1b:e5:8a:8b:09:38:12:75:b5:1b:
c0:bc:5c:65:10:a3:dc:e7:8c:88:b9:5b:b6:4e:5a:
4f:4b:87:05:4f:5d:e5:fb:4e:32:1a:b0:10:ce:18:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:DE:98:CC:D6:ED:D9:D9:36:B3:3E:23:FC:D9:F1:55:70:F2:52:44
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1f:75:12:c5:68:b7:b3:0f:89:29:3e:1e:16:55:db:66:e1:
03:0d:5c:24:92:e4:ab:c1:c4:fe:c0:20:7b:1f:76:f1:20:42:
3f:d4:82:cb:a7:5f:5e:27:e8:4f:95:2a:55:1e:da:ab:41:68:
ba:be:ce:ed:80:9c:80:dd:a8:4f:9c:1d:1a:18:05:94:2c:15:
5e:eb:ee:da:c4:3e:ce:d2:0f:a8:f0:78:ec:53:ef:a1:94:e8:
3c:4c:00:e8:18:02:2c:26:a8:16:bb:a3:26:a7:2b:33:2b:a6:
ba:66:05:e6:5b:6a:76:ad:56:74:f4:3b:91:bb:fa:bd:96:0a:
c0:05:58:6e:22:6b:32:17:e9:45:b7:b2:6f:aa:03:6a:89:d1:
53:63:ac:92:61:6a:1d:91:aa:3e:dc:a1:91:1f:20:48:6b:af:
4a:17:33:46:44:f7:ab:06:da:61:0e:5a:6c:a5:6f:4a:eb:4c:
6e:65:76:47:8e:41:6a:19:73:27:a7:6d:6f:3b:56:fb:a5:a2:
b5:1d:fa:4f:67:e3:4b:66:80:0d:6b:9c:38:46:45:e3:b6:c2:
32:c9:e3:b3:56:02:36:d3:81:f9:4f:30:26:71:a5:66:19:70:
5e:ea:77:5a:a7:24:60:96:c2:a0:48:fc:1e:13:86:25:bb:b2:
6c:10:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:21:08 2026 by rpki-client