Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
File: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft (raw, json)
Hash identifier: vzG9oaqXMghDRdoWxxeaQ5FUyqb4UuSS8FV8Pj/oGmQ=
Subject key identifier: BB:09:52:09:80:1F:68:67:CD:1A:99:4C:E9:96:FD:3C:93:11:7A:9A
Authority key identifier: A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
Certificate issuer: /CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Certificate serial: 01A177DE1B9F17896F758D81D1951F81F2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
Manifest number: 171F
Signing time: Mon 26 Oct 2026 11:00:07 +0000
Manifest this update: Mon 26 Oct 2026 11:00:07 +0000
Manifest next update: Tue 27 Oct 2026 11:00:07 +0000
Files and hashes: 1: IWErWVtspulYBc2P0UkO-q5egfs.roa (hash: lBRwxz9Xohtldef78/SXShaF/JL3thmNLA+SU9F6qTI=)
2: dFq--4OMc9Rjg5-mNAsJIFvbJME.roa (hash: KdydhQpjZ/9bUOR6cl5ITO2afuDxYiCJCh8ZvZyKzpE=)
3: qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl (hash: Ez6AQJtiFfkUm8w/fVp6g6zaHsmP3ewAGMRYaf7ZVa8=)
4: yRUaitnmXUxZxGbULPkZbaJ4rlQ.roa (hash: C+dkviU9NULiViFs9l9KMMoHApjfQiWaRWnrAEZ92P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:de:1b:9f:17:89:6f:75:8d:81:d1:95:1f:81:f2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8d52cc870606a3f3f32c0fff97cf6931fa65ca3
Validity
Not Before: Oct 26 11:00:07 2026 GMT
Not After : Oct 27 11:00:07 2026 GMT
Subject: CN=bb095209801f6867cd1a994ce996fd3c93117a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:b2:67:88:6d:74:ef:64:98:97:7c:c1:a0:
17:64:28:19:12:9d:ee:09:8e:4d:de:cb:a8:23:05:
87:f5:48:55:74:2d:90:3c:ab:3d:2e:18:ef:48:7a:
76:b8:12:35:72:5c:ed:67:40:6b:d8:12:f8:54:31:
00:d0:ad:80:48:0c:a9:b1:fb:32:da:52:0b:8d:79:
04:26:79:3e:11:39:ea:de:9e:48:ad:7a:e3:0e:eb:
78:9d:6d:15:b8:94:f9:9d:ee:8a:0c:98:0a:6e:af:
8a:db:f7:48:38:fa:99:63:f5:70:ce:8a:ea:6d:b6:
09:9b:c4:f3:04:31:c4:69:1f:ed:f8:92:62:64:24:
6c:b4:99:1f:da:55:a1:5f:2d:a4:b5:f7:68:6a:38:
61:a6:c6:65:ea:3e:68:09:7d:6a:50:73:a8:2d:3a:
ac:ef:71:8a:ec:14:60:04:4d:f1:04:18:06:1a:5c:
ab:c8:7d:36:ff:a6:fc:23:c6:f5:9e:df:e2:1b:d9:
2b:22:74:bd:5e:f1:ca:60:46:8b:b5:e3:91:26:ff:
ca:e9:9d:95:b6:31:37:c1:a1:b3:95:1c:d7:a5:94:
c6:89:c4:6c:4c:45:16:b4:9f:25:10:58:1f:c0:f5:
cc:14:72:59:bc:4f:f8:31:62:c8:c7:af:75:7d:14:
a3:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:09:52:09:80:1F:68:67:CD:1A:99:4C:E9:96:FD:3C:93:11:7A:9A
X509v3 Authority Key Identifier:
keyid:A8:D5:2C:C8:70:60:6A:3F:3F:32:C0:FF:F9:7C:F6:93:1F:A6:5C:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fe131d-aa10-4c6b-8128-f55bc8af1506/1/qNUsyHBgaj8_MsD_-Xz2kx-mXKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:75:0a:26:84:f4:6a:0b:9e:c7:9d:eb:83:bb:bf:27:7c:d8:
dd:62:13:3c:24:16:e0:99:d2:f1:d6:be:97:0a:dd:ee:36:5b:
40:d6:54:05:a4:ed:84:d6:23:64:2a:f9:d0:83:99:a0:80:69:
1f:07:ce:39:d4:60:53:ef:d6:74:45:25:b1:47:c1:f6:80:72:
a1:c7:ae:8a:61:e0:09:88:af:8c:1d:4a:9d:22:a9:b7:08:af:
b1:e4:31:2d:05:07:9c:19:9a:87:30:6f:ce:4a:15:e2:6a:46:
ea:1b:eb:c9:db:62:c1:30:f8:5f:a1:8d:e8:ed:ba:bb:3f:03:
3c:c7:a7:86:d5:69:b3:7e:16:87:56:b4:91:2b:b8:c1:65:0a:
37:29:5d:1e:fa:0a:4a:7c:97:2a:57:5d:62:77:cf:c9:14:d4:
e0:d8:36:38:f0:26:6a:86:e5:5f:7d:a2:15:64:99:8c:a4:27:
1b:cd:9c:93:e9:cf:5d:68:a8:8b:de:c0:71:44:8b:cd:ad:03:
c9:69:54:8f:71:21:7f:0a:dc:80:60:12:a2:97:68:84:06:85:
ee:f5:0d:64:02:21:f3:64:48:b2:94:07:03:bc:a1:7d:e8:ca:
b8:d0:8e:d5:ad:13:1a:d8:c6:7e:11:92:65:6e:c8:08:9f:ae:
e6:b3:dc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:47:46 2026 by rpki-client