Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
File: quibwwl3aKzWfC3XR9O-Gtty6Zc.mft (raw, json)
Hash identifier: XPAjVX62fKGN8NIjzCxx+kJmVxjiBoAtgamRR8zIeO0=
Subject key identifier: B5:0B:CE:30:E8:B8:1E:21:B5:C7:56:40:7B:50:C5:1F:14:76:0F:C8
Authority key identifier: AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
Certificate issuer: /CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Certificate serial: 01A192E86BF9F464D0225EF6558556CEFB42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
Manifest number: 1AD3
Signing time: Sat 31 Oct 2026 17:01:07 +0000
Manifest this update: Sat 31 Oct 2026 17:01:07 +0000
Manifest next update: Sun 01 Nov 2026 17:01:07 +0000
Files and hashes: 1: VQMozEw5e5cFbAbax7TNnFtChpk.roa (hash: kcI4JK6ZQqSjrwXa7nCut12JkcTP0x/T3dN3B6kDSUw=)
2: quibwwl3aKzWfC3XR9O-Gtty6Zc.crl (hash: KP2Ydhk9Uxkjm+dSkQAs/XnJHUFjHWTrVvJm6gL18SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:e8:6b:f9:f4:64:d0:22:5e:f6:55:85:56:ce:fb:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aae89bc3097768acd67c2dd747d3be1adb72e997
Validity
Not Before: Oct 31 17:01:07 2026 GMT
Not After : Nov 1 17:01:07 2026 GMT
Subject: CN=b50bce30e8b81e21b5c756407b50c51f14760fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:04:cc:32:c7:d3:c5:62:95:d3:1b:4b:e4:
a0:07:67:fe:de:cb:46:c2:61:0c:30:b4:fd:01:1a:
94:1d:cf:c9:bd:42:fa:19:2e:ad:4e:b6:17:a2:1a:
2a:8d:35:50:c9:79:42:bc:d3:16:ff:d4:7e:06:a9:
2c:43:a8:3b:6d:75:39:2e:f7:5a:4b:e8:35:c8:9e:
a0:0a:5b:4f:82:69:d4:59:ff:c3:d2:ab:74:8e:03:
2f:e9:27:8f:d5:5c:37:02:3c:68:70:68:bf:5a:6b:
67:67:ba:9e:dd:ac:8e:5a:fb:e9:da:f1:7a:77:69:
bf:a3:af:26:df:19:81:a6:f4:b3:22:9a:c2:5f:90:
7c:92:e6:60:d8:17:71:1d:4b:e8:f5:0b:4b:b2:34:
28:d3:43:c3:7c:b3:0f:06:77:0d:62:a4:10:86:5f:
74:e4:c1:b2:00:b7:55:3f:37:6d:3b:99:e2:f4:7e:
7d:5f:ad:59:af:35:b2:e3:4c:6a:53:7c:2e:26:6b:
9d:cb:3b:d4:ab:bc:f5:79:23:a3:4e:f3:29:31:ad:
5e:ba:0c:04:31:4f:54:48:fb:11:31:d9:b8:21:11:
01:84:9b:90:72:0e:d4:1f:df:61:d7:94:9d:89:13:
31:65:b6:34:3d:0e:42:a9:04:e7:9b:cc:67:08:aa:
b9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:CE:30:E8:B8:1E:21:B5:C7:56:40:7B:50:C5:1F:14:76:0F:C8
X509v3 Authority Key Identifier:
keyid:AA:E8:9B:C3:09:77:68:AC:D6:7C:2D:D7:47:D3:BE:1A:DB:72:E9:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/quibwwl3aKzWfC3XR9O-Gtty6Zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/32e650-0cec-4262-bc93-e3dd776489a1/1/quibwwl3aKzWfC3XR9O-Gtty6Zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:8a:46:7e:98:28:c7:63:89:e8:75:82:37:84:79:3e:d7:97:
1e:45:5d:e6:51:10:2f:71:f5:18:7a:0d:a8:7e:4a:83:7d:46:
a9:03:4f:2d:3c:60:d6:39:9c:c9:18:55:cd:ad:10:28:c3:93:
79:ca:3b:33:a1:f0:a7:c3:55:a0:3b:6a:86:b7:f6:fb:8f:aa:
75:74:ed:f5:3b:72:3e:55:d5:cb:8f:3f:aa:82:9d:1f:35:78:
08:78:a5:9f:11:9a:e6:77:55:32:df:19:59:8a:23:28:d9:e6:
aa:89:5b:d5:f5:bc:bb:20:0e:03:5c:25:c8:eb:38:f1:ad:19:
f3:23:4c:48:fd:01:cf:64:8c:e3:40:0e:a4:48:96:f6:dc:67:
bd:76:37:7b:6d:a6:31:3f:71:96:a4:b0:21:a5:76:0b:eb:ca:
f6:59:4a:37:3b:e8:59:a3:13:12:20:a0:bd:45:b4:a2:df:cf:
3e:0c:35:ab:82:8d:f2:59:b4:dc:fb:0e:58:a9:9d:5d:49:f4:
93:3d:54:5a:53:30:72:d5:40:a0:e7:89:84:a1:4a:d1:6e:32:
a4:7c:a9:4b:cb:de:47:1b:86:af:78:d8:a2:3a:11:75:bd:5e:
67:cb:b5:82:9f:33:66:83:b7:0d:13:b9:a0:aa:8c:45:9e:cc:
18:19:38:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:54:50 2026 by rpki-client