Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: b0yiLvX0IB1L3w3Eb6mqig7itH2oUPO5nyfPXOyxb5s=
Subject key identifier: FB:05:85:E2:9E:04:FF:6D:7D:B1:98:A5:1D:2F:E8:F2:9A:EA:42:B3
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 01A18487E521F6017765EE8111B600F8592B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 1A5E
Signing time: Wed 28 Oct 2026 22:01:00 +0000
Manifest this update: Wed 28 Oct 2026 22:01:00 +0000
Manifest next update: Thu 29 Oct 2026 22:01:00 +0000
Files and hashes: 1: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: YiumpyT+88zYvSVvcAghMgmCpYAHSKoCk5RiQURy6jY=)
2: zkS0MtUwrQ_h652IdJT_LVppRJ4.roa (hash: SXClzu9ACUlrsWWr12HFWPaz9CkpTAyEDwuny+Lvk9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:87:e5:21:f6:01:77:65:ee:81:11:b6:00:f8:59:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Oct 28 22:01:00 2026 GMT
Not After : Oct 29 22:01:00 2026 GMT
Subject: CN=fb0585e29e04ff6d7db198a51d2fe8f29aea42b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:e8:d3:67:d1:73:40:8d:64:2d:13:a6:e2:
ee:20:cd:f3:ad:ed:53:d3:ee:69:c9:78:a0:06:b8:
46:92:5e:83:7d:ca:3f:67:2a:c7:fa:a9:f8:13:86:
9d:63:59:3a:aa:33:7f:43:e2:c7:f6:60:00:c6:d4:
b7:50:6d:b8:df:8a:fb:a6:c1:44:71:e8:25:c1:11:
2e:06:94:96:56:55:70:a0:c6:52:f5:ed:e4:18:f5:
56:ae:d5:a1:2b:1f:37:aa:f3:78:92:21:c4:c5:ce:
6c:dd:0b:2a:e8:ff:0a:e1:66:39:8b:56:61:5c:a6:
06:4a:9c:60:c8:92:ce:88:2f:17:22:87:b4:73:20:
d4:21:41:70:34:33:2e:30:ab:f6:71:82:c7:a7:ba:
4f:c5:c4:3c:d8:fb:40:50:d1:a6:92:a4:65:36:ca:
a2:18:93:dd:12:77:1f:f3:e8:80:63:4d:72:03:e0:
12:b6:de:fb:31:7d:e6:43:74:be:6f:50:00:20:f2:
c9:00:ea:0a:f6:2a:53:51:4a:d6:29:96:07:80:1b:
22:ce:e8:ad:5d:ac:d5:32:e6:70:3b:3a:c3:44:0e:
21:ce:92:3b:21:b0:8a:29:8b:eb:4c:b7:55:18:49:
dd:2f:aa:df:d8:bd:ea:6f:d5:ee:6e:46:19:e5:63:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:05:85:E2:9E:04:FF:6D:7D:B1:98:A5:1D:2F:E8:F2:9A:EA:42:B3
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9c:49:91:8a:f7:e2:ef:61:3e:1f:aa:ba:87:51:23:de:03:
91:64:e8:5b:b3:67:fa:22:6e:55:68:15:68:cd:01:18:a2:3e:
70:a7:e7:d7:15:e7:3f:23:7e:7a:d3:e1:5c:e6:a1:10:56:6e:
19:f0:a9:44:d1:ec:dd:ce:f8:7e:01:0d:ab:1b:55:5f:6c:3d:
c8:c7:e8:e2:ee:6f:01:ec:2b:59:13:ad:b0:57:d6:b7:f7:da:
f4:86:7e:ec:62:13:1d:20:27:89:92:13:b4:7f:d1:90:07:56:
5a:b7:93:b2:8a:54:ca:64:12:87:ca:08:c3:e4:7c:40:9f:b2:
a2:21:fe:6b:e4:94:df:0b:9c:03:48:37:6d:30:22:eb:15:1e:
a9:1c:38:91:95:3f:96:13:11:9d:3d:d4:1b:a5:d9:80:22:44:
94:b5:3f:fe:fd:e4:85:98:6e:9b:d8:f4:55:67:23:1c:ca:52:
07:38:53:7d:1f:1a:42:dd:c9:a7:ad:79:80:32:c2:91:4c:f8:
b5:fa:2b:46:86:76:d9:8e:46:c9:a0:ea:96:43:5f:32:f4:de:
b9:3b:91:96:1d:c4:f1:f0:da:f8:bb:f3:ab:bd:8c:39:11:08:
e7:a9:06:1f:77:6c:1e:79:28:47:b8:44:73:a2:b9:8c:a2:fc:
fa:68:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:06:02 2026 by rpki-client