Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
File: 1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft (raw, json)
Hash identifier: 85c50Ftf3Zd60SGwAVfA7xDmfF2xKz3qnktAjM4nzaM=
Subject key identifier: B7:C2:DF:8E:70:85:C6:98:70:40:EE:B3:62:F7:5C:21:85:45:83:7F
Authority key identifier: FA:A4:01:B6:E9:01:5D:57:3A:96:DE:A2:6B:F1:97:41:50:A3:91:1E
Certificate issuer: /CN=faa401b6e9015d573a96dea26bf1974150a3911e
Certificate serial: 01A1AC3A9D97691E73C2271F3C264AC4F578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
Manifest number: 0157
Signing time: Thu 05 Nov 2026 15:01:24 +0000
Manifest this update: Thu 05 Nov 2026 15:01:24 +0000
Manifest next update: Fri 06 Nov 2026 15:01:24 +0000
Files and hashes: 1: 1-qQBtukBXVc6lt6ia_GXQVCjkR4.crl (hash: xepdaOo7of1LJhPsGD0ZJYfnaG27w02BMlVfMix2xFU=)
2: EPoE4gsTkP933V3-pgLEo8zsy7w.roa (hash: fekIOkyV2Bo+kFHWE4bvjR3pCE5ezbt15oCa5WLPf5M=)
3: xRZqLOAtBFzziLEfVGzNfn0Lo4c.roa (hash: 2acriZe84g+y2lzcl3s0xdnJ499T9fQJ6oaM3jWJRKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 15:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:3a:9d:97:69:1e:73:c2:27:1f:3c:26:4a:c4:f5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa401b6e9015d573a96dea26bf1974150a3911e
Validity
Not Before: Nov 5 15:01:24 2026 GMT
Not After : Nov 6 15:01:24 2026 GMT
Subject: CN=b7c2df8e7085c6987040eeb362f75c218545837f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:34:3e:d7:99:c6:a4:0d:6b:b6:f1:c9:52:
d7:52:a5:fa:37:09:d7:a1:c0:0b:3f:81:36:b3:9b:
53:b0:43:f0:45:bb:59:18:4c:cd:2e:c8:4d:41:35:
31:d3:c4:15:cc:25:72:56:82:49:59:c4:e5:84:f8:
63:1e:48:85:3e:75:8d:ca:29:ef:d9:ba:bc:85:a1:
5d:51:31:65:9f:6b:65:b6:8e:d0:e9:af:d1:27:0f:
cb:0d:1b:33:77:88:25:04:c2:31:eb:b4:8b:1e:3e:
dd:6c:0e:48:92:c8:a7:e6:86:58:98:70:ed:bf:f6:
75:ff:75:f2:02:1c:4c:48:ac:75:0f:0a:eb:cf:5a:
92:b5:46:58:45:67:be:21:49:12:8e:86:64:3c:a8:
e2:fb:02:cc:58:16:9e:9c:97:8a:01:a3:55:1a:9b:
03:c2:6b:1b:68:65:a4:18:44:f1:39:5b:df:10:da:
c6:d2:21:47:fe:cc:b6:15:9f:c8:b4:6c:6e:77:89:
88:ae:e3:8b:87:b2:ed:f5:60:ed:09:8c:bb:15:f6:
91:00:0b:b7:31:fd:c0:ea:a3:5d:40:39:26:e3:de:
3e:72:d6:2e:98:ae:3a:dc:36:c1:a7:33:72:eb:3e:
a6:29:2c:9d:54:c9:9d:fd:e6:62:b5:9f:3c:b6:f4:
e6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C2:DF:8E:70:85:C6:98:70:40:EE:B3:62:F7:5C:21:85:45:83:7F
X509v3 Authority Key Identifier:
keyid:FA:A4:01:B6:E9:01:5D:57:3A:96:DE:A2:6B:F1:97:41:50:A3:91:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qQBtukBXVc6lt6ia_GXQVCjkR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7c2e84-e6cc-4751-887b-bc7a24c2e219/1/1-qQBtukBXVc6lt6ia_GXQVCjkR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:6f:87:1a:84:f0:38:38:70:86:75:bc:cb:61:65:01:5a:be:
50:35:7d:75:53:34:5d:43:54:ad:cb:2b:76:a9:38:a7:3a:88:
61:9c:24:66:45:6b:48:4e:0b:53:bd:d4:3b:6d:6d:3c:a3:c2:
7a:16:26:21:ab:7d:91:9b:c3:fb:19:1c:91:42:e1:8f:62:ef:
af:04:b3:6f:76:5e:9a:d6:29:35:fe:fa:66:cb:f9:a4:ca:69:
8b:c1:e3:06:d1:d5:26:57:86:d7:67:e3:58:40:71:23:80:5c:
3f:a4:6c:76:7a:0d:2b:34:a8:b7:cf:2e:8f:1d:80:d4:ab:41:
19:15:87:ce:59:30:59:dc:00:ee:a0:f3:dd:d4:cc:4a:5d:0c:
7a:d2:c4:b1:7d:ec:a5:f8:97:bc:32:57:2e:f3:60:d1:94:cd:
72:c7:6d:e8:20:ff:2d:0f:76:88:b4:b7:48:5a:22:c6:9c:f1:
57:97:d2:8e:f2:b9:fc:86:18:24:ad:18:df:16:db:50:75:f1:
6d:37:9a:b8:40:48:30:ee:fd:78:d4:0d:76:ac:42:e9:56:df:
f2:88:ba:44:2f:e9:d3:a7:c8:8e:12:37:20:6c:f2:e2:d9:96:
29:d4:d7:ff:e9:d3:34:9b:9d:93:23:6f:8c:b3:f6:46:ae:5f:
0a:28:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:54:49 2026 by rpki-client