Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
File: Q34DDURmGkwgHroD3kUrBLjn2eU.mft (raw, json)
Hash identifier: 5ze8l5+Pj5jfSTMjm0h4HecZOvp3DXAwKa0KJ/xxess=
Subject key identifier: 7F:FB:BA:8A:18:BD:2D:7C:1A:DC:F1:31:3C:AF:2B:9F:B9:A9:44:F9
Authority key identifier: 43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
Certificate issuer: /CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Certificate serial: 01A174024D3CC8DB765DA42F91EF868F9714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
Manifest number: 1A06
Signing time: Sun 25 Oct 2026 17:01:10 +0000
Manifest this update: Sun 25 Oct 2026 17:01:10 +0000
Manifest next update: Mon 26 Oct 2026 17:01:10 +0000
Files and hashes: 1: DsEiDbdONX-wlDkZ_X-1g9jpCQg.roa (hash: OA/21KHBKcEIJSTWxQCJ0tkhioZ536fK4ENW6PbwjpI=)
2: Q34DDURmGkwgHroD3kUrBLjn2eU.crl (hash: BZOrBjAM8jqnQpG7l/KU+YwxhuOTIjqDuD/lL6IQxng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:02:4d:3c:c8:db:76:5d:a4:2f:91:ef:86:8f:97:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437e030d44661a4c201eba03de452b04b8e7d9e5
Validity
Not Before: Oct 25 17:01:10 2026 GMT
Not After : Oct 26 17:01:10 2026 GMT
Subject: CN=7ffbba8a18bd2d7c1adcf1313caf2b9fb9a944f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:d3:14:e9:ce:99:37:61:2b:dd:23:2a:2d:
08:8d:be:bc:b1:61:e7:96:68:c6:c1:ee:7b:3a:ac:
af:41:35:90:15:54:ee:19:d7:fc:c2:0f:bb:3a:78:
af:39:da:08:dd:45:08:20:96:46:f0:57:f7:2e:2f:
31:89:e9:5a:ad:ef:4b:e3:79:f8:01:46:6b:14:e9:
4e:55:1b:c3:4c:8c:34:75:b0:b9:d5:35:b7:5f:7a:
97:36:47:b3:7b:91:26:15:a8:b4:5c:0b:99:62:aa:
e5:31:c7:f7:05:59:f2:3d:88:e3:cd:ef:4c:99:c3:
2a:e7:36:b8:21:fd:16:d1:4a:fe:57:bb:58:dd:d0:
27:cd:cb:1b:b5:0e:73:8e:e4:0b:9e:fc:5d:5c:34:
04:ad:24:9d:73:e1:2c:89:31:e9:53:56:1d:70:b2:
f6:bc:b0:67:06:7b:39:14:4a:8e:1a:f0:19:86:1d:
eb:9d:5a:c9:8b:4f:7a:65:ab:ab:f8:04:ad:3d:01:
6a:ee:8c:a4:0d:3c:cc:2f:3a:d0:a5:2a:0f:a5:cc:
7c:a4:57:bf:26:27:e0:43:d5:10:92:6d:21:67:de:
44:1c:ee:e5:35:cd:89:40:5f:10:42:06:9a:24:28:
31:bd:52:e0:c4:bd:eb:0e:9c:68:51:55:c8:b8:7e:
ac:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FB:BA:8A:18:BD:2D:7C:1A:DC:F1:31:3C:AF:2B:9F:B9:A9:44:F9
X509v3 Authority Key Identifier:
keyid:43:7E:03:0D:44:66:1A:4C:20:1E:BA:03:DE:45:2B:04:B8:E7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q34DDURmGkwgHroD3kUrBLjn2eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/4be259-be96-40fa-880e-bbd2106f3370/1/Q34DDURmGkwgHroD3kUrBLjn2eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:21:57:81:b7:a3:4c:c1:4d:3e:73:af:f6:4d:d5:0c:34:eb:
0c:94:b6:00:1e:e3:2a:eb:31:e5:79:61:4e:6a:3d:0c:0a:bf:
13:24:21:85:70:f9:64:0a:a9:95:2e:07:91:d5:55:05:c8:c7:
1a:37:97:11:94:87:79:00:1b:66:51:d5:9d:fb:8a:60:f2:cd:
64:12:e9:bb:99:bc:f8:56:79:48:06:46:c1:1a:e5:22:ea:ba:
40:d3:43:97:73:f1:f6:bb:25:24:e7:67:56:2b:bc:c5:87:38:
41:68:f2:3b:d9:80:63:d8:26:7a:3c:85:c7:76:b6:72:d3:d7:
35:23:8e:e1:55:d3:7d:a2:dd:6e:db:df:9b:89:c1:08:cf:10:
ab:2c:7c:7a:ff:cb:43:0f:14:ac:29:e8:5f:8a:7d:a5:1c:7b:
2f:02:70:6e:35:0a:b8:26:8a:a3:81:27:99:af:82:3e:b9:bb:
ae:4e:e0:2f:ff:fe:5a:27:df:09:db:3c:65:61:26:4b:0a:6f:
3b:46:ff:e0:c0:3a:99:cc:aa:a4:8f:23:a4:e1:8b:c9:e4:f5:
c0:b9:8e:67:c6:ed:9d:18:27:0f:96:61:40:6f:a0:c0:81:0c:
3f:24:77:01:54:23:bb:a2:2a:26:ca:79:5f:1d:2b:e9:a7:71:
9f:b5:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:48:37 2026 by rpki-client