Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
File: q3kW82CYNO1AFNqMaVs0CnsKWA4.mft (raw, json)
Hash identifier: d/UPjWOA8hWPo3JIQXxiPXXcehd48svxrRy9bn0+0zY=
Subject key identifier: FE:0F:4E:5E:C4:0C:DD:61:4A:46:0E:33:2F:84:7C:13:4B:2A:4C:2B
Authority key identifier: AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
Certificate issuer: /CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Certificate serial: 01A17D05A3EBBB9481F0E7983535B2DFB150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
Manifest number: 0471
Signing time: Tue 27 Oct 2026 11:01:23 +0000
Manifest this update: Tue 27 Oct 2026 11:01:23 +0000
Manifest next update: Wed 28 Oct 2026 11:01:23 +0000
Files and hashes: 1: LTVOJrN7tMu87dFspIcmBlzwME4.asa (hash: tHJyxmUmJCWBdZOh74CFjQH4LfeAyi34h5vxnLm7Pjk=)
2: SZY6wsq_78e2nLvWAkeHk1piMW4.roa (hash: crCAmARzqXmw7E9/kb/thI4py7GtbXwH0Xp22Jp2Zrs=)
3: q3kW82CYNO1AFNqMaVs0CnsKWA4.crl (hash: 4sVL6XjmdaGFb4gY5BWTTO3/QXef0fnHedBsiCbpSm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:a3:eb:bb:94:81:f0:e7:98:35:35:b2:df:b1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7916f3609834ed4014da8c695b340a7b0a580e
Validity
Not Before: Oct 27 11:01:23 2026 GMT
Not After : Oct 28 11:01:23 2026 GMT
Subject: CN=fe0f4e5ec40cdd614a460e332f847c134b2a4c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:77:34:7b:28:9d:21:74:04:28:3c:cc:93:3a:
44:19:d7:fc:e9:a9:11:e8:0c:d7:fc:aa:b4:44:2c:
62:38:96:b9:ad:3b:25:87:55:c0:93:44:f0:03:a1:
44:f3:a7:31:ea:ff:5f:3e:1f:33:d7:84:e5:d6:72:
2e:d2:e5:f4:4e:b6:33:64:a7:c0:62:47:e7:5b:6c:
d5:0d:07:ea:5f:68:bf:49:17:d3:00:00:fb:1e:79:
8f:2e:d1:18:26:35:25:97:0f:fa:be:90:49:ae:a6:
ee:fb:50:27:b6:92:18:f6:71:d0:18:cd:b0:62:13:
81:cc:11:37:d7:27:34:86:c6:43:31:0b:1a:b8:c8:
4a:92:e7:9e:90:8e:a3:f0:c8:61:d9:32:06:be:5f:
38:58:43:b2:75:88:af:d9:dc:99:4f:c4:be:20:09:
51:d4:f2:7d:60:1b:61:b2:65:0a:c8:e6:35:6d:59:
2d:f0:74:da:cb:81:16:ec:19:b1:d5:69:28:19:cd:
91:f0:1c:ec:84:51:8b:cd:34:40:ba:d6:44:99:fc:
ff:32:ec:0d:30:03:c6:63:85:5a:53:5a:c1:d8:c8:
55:ae:fe:3c:89:93:45:56:7d:dd:3c:26:98:08:24:
02:38:80:6c:0c:c1:24:b4:36:a6:3f:ad:92:70:d4:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0F:4E:5E:C4:0C:DD:61:4A:46:0E:33:2F:84:7C:13:4B:2A:4C:2B
X509v3 Authority Key Identifier:
keyid:AB:79:16:F3:60:98:34:ED:40:14:DA:8C:69:5B:34:0A:7B:0A:58:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3kW82CYNO1AFNqMaVs0CnsKWA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/f26514-aef5-4a46-8851-b66300a7f9f1/1/q3kW82CYNO1AFNqMaVs0CnsKWA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:59:7f:57:e4:38:73:d4:35:36:49:20:f7:32:60:70:84:41:
14:27:05:8f:1b:07:ed:2a:b9:36:35:08:0f:ef:cc:aa:16:a1:
89:7f:f3:c4:c8:99:86:65:34:b2:1d:fa:ea:ab:fc:f1:38:83:
71:2f:0e:0f:e9:ca:6a:3f:fd:47:de:47:bf:24:cc:4c:73:88:
d4:13:34:33:0d:8c:43:da:ad:c8:f2:da:70:f2:ef:33:10:b5:
4e:44:20:aa:ee:08:48:04:b8:e9:39:28:c7:50:10:21:07:f9:
de:f8:a7:b2:70:58:51:06:4c:e9:06:ed:71:ca:2e:2a:e3:e3:
b6:1a:d5:d7:a2:e6:08:13:2a:b2:99:9a:a4:be:b2:21:78:67:
35:b6:5b:95:90:bd:44:02:78:9f:6c:ec:0b:0b:43:53:89:b4:
61:3c:b0:cb:e7:61:a1:77:9d:66:c7:3b:51:aa:5f:0b:02:7d:
e2:ad:ef:93:e2:c5:a3:be:60:f5:ac:d3:6a:eb:d5:94:07:eb:
e4:17:3d:a2:71:a3:d8:2c:17:0f:01:60:aa:6c:73:0b:80:1e:
c0:ed:68:b5:28:1b:0a:d1:ef:18:f8:4e:01:d0:ef:71:01:89:
ce:75:2f:13:11:37:4c:79:5e:a2:7a:a8:ac:bd:83:9b:cc:d0:
47:98:35:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9BaPru5SB8OeYNTWy37FQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzkxNmYzNjA5ODM0ZWQ0MDE0ZGE4YzY5NWIzNDBhN2Iw
YTU4MGUwHhcNMjYxMDI3MTEwMTIzWhcNMjYxMDI4MTEwMTIzWjAzMTEwLwYDVQQD
EyhmZTBmNGU1ZWM0MGNkZDYxNGE0NjBlMzMyZjg0N2MxMzRiMmE0YzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Xc0eyidIXQEKDzMkzpEGdf86akR
6AzX/Kq0RCxiOJa5rTslh1XAk0TwA6FE86cx6v9fPh8z14Tl1nIu0uX0TrYzZKfA
YkfnW2zVDQfqX2i/SRfTAAD7HnmPLtEYJjUllw/6vpBJrqbu+1AntpIY9nHQGM2w
YhOBzBE31yc0hsZDMQsauMhKkueekI6j8Mhh2TIGvl84WEOydYiv2dyZT8S+IAlR
1PJ9YBthsmUKyOY1bVkt8HTay4EW7Bmx1WkoGc2R8BzshFGLzTRAutZEmfz/MuwN
MAPGY4VaU1rB2MhVrv48iZNFVn3dPCaYCCQCOIBsDMEktDamP62ScNQT2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4PTl7EDN1hSkYOMy+EfBNLKkwrMB8GA1UdIwQY
MBaAFKt5FvNgmDTtQBTajGlbNAp7ClgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEt
YjY2MzAwYTdmOWYxLzEvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mMjY1MTQtYWVmNS00YTQ2LTg4NTEtYjY2MzAwYTdmOWYx
LzEvcTNrVzgyQ1lOTzFBRk5xTWFWczBDbnNLV0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArll/V+Q4
c9Q1Nkkg9zJgcIRBFCcFjxsH7Sq5NjUID+/MqhahiX/zxMiZhmU0sh366qv88TiD
cS8OD+nKaj/9R95HvyTMTHOI1BM0Mw2MQ9qtyPLacPLvMxC1TkQgqu4ISAS46Tko
x1AQIQf53vinsnBYUQZM6QbtccouKuPjthrV16LmCBMqspmapL6yIXhnNbZblZC9
RAJ4n2zsCwtDU4m0YTywy+dhoXedZsc7UapfCwJ94q3vk+LFo75g9azTauvVlAfr
5Bc9onGj2CwXDwFgqmxzC4AewO1otSgbCtHvGPhOAdDvcQGJznUvExE3THleonqo
rL2Dm8zQR5g1qA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 20:49:14 2026 by rpki-client