Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
File: Q57sdw36ZitOpkoCLus46D2q4ig.mft (raw, json)
Hash identifier: eqNIUs0VDUH2F7EUtYBMXbnMT4XtHgcowd7itIVTPWM=
Subject key identifier: 9A:73:61:EC:24:3E:E0:AA:49:E5:6D:58:62:EE:7E:F0:5E:F2:F8:71
Authority key identifier: 43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
Certificate issuer: /CN=439eec770dfa662b4ea64a022eeb38e83daae228
Certificate serial: 01A17BF211F2D2C4C5D9AEF46A512E7152F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
Manifest number: 0C5B
Signing time: Tue 27 Oct 2026 06:00:24 +0000
Manifest this update: Tue 27 Oct 2026 06:00:24 +0000
Manifest next update: Wed 28 Oct 2026 06:00:24 +0000
Files and hashes: 1: PYhdlsUvc6cMikLsj2CZu44GozA.roa (hash: TWRSUVS4O6iaQs3ZX5NWtc+VI0J6VDPVPjsAdIWPgM0=)
2: Q57sdw36ZitOpkoCLus46D2q4ig.crl (hash: YhJ8Z5YaRAVucCPYg1Ucx8gofweP2oBZ9gzLnVqixB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:11:f2:d2:c4:c5:d9:ae:f4:6a:51:2e:71:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439eec770dfa662b4ea64a022eeb38e83daae228
Validity
Not Before: Oct 27 06:00:24 2026 GMT
Not After : Oct 28 06:00:24 2026 GMT
Subject: CN=9a7361ec243ee0aa49e56d5862ee7ef05ef2f871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:23:21:c2:64:c9:8c:23:7a:41:aa:3b:73:df:
6f:d5:6b:46:43:85:b4:0c:fb:06:a2:9f:8a:1f:43:
a2:d0:d6:6e:d1:f4:9b:05:ef:84:00:b1:b1:c9:c3:
05:44:fe:9d:5d:26:5b:0b:ab:54:58:49:dc:e9:ff:
d1:6b:35:31:3f:4a:cd:46:a8:9d:b5:42:98:a2:5e:
f0:0e:8c:53:c8:87:66:68:1d:76:98:60:68:0b:65:
7d:ed:c7:7f:30:1a:5e:87:22:ae:1a:d5:94:f9:fd:
17:25:e1:71:60:98:2a:4c:fd:da:0f:18:04:01:af:
15:86:c0:e2:13:29:f2:a3:f1:dd:dc:25:25:98:1b:
04:ef:2e:d2:b3:2f:12:94:90:5c:d9:2c:09:31:c3:
aa:41:53:81:8e:ab:8f:a7:f1:6a:e1:92:aa:95:64:
71:a8:d4:0b:e2:dc:71:80:01:3d:c9:a0:cf:af:02:
4d:9e:72:e7:e4:12:39:f9:c0:4b:b6:9e:4e:2b:3d:
ca:28:73:36:ea:d9:4d:55:e6:b1:21:2c:d3:87:44:
2e:48:32:98:c2:f8:e2:61:07:ca:ac:de:85:66:e2:
d9:4e:c9:fb:7d:5d:15:43:ac:2b:d7:2a:b0:7e:c0:
37:ed:c1:7a:5b:f6:9d:1d:8b:bf:2c:97:22:8b:a0:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:73:61:EC:24:3E:E0:AA:49:E5:6D:58:62:EE:7E:F0:5E:F2:F8:71
X509v3 Authority Key Identifier:
keyid:43:9E:EC:77:0D:FA:66:2B:4E:A6:4A:02:2E:EB:38:E8:3D:AA:E2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q57sdw36ZitOpkoCLus46D2q4ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/6b8434-f454-41c7-92b9-352f7ca011ae/1/Q57sdw36ZitOpkoCLus46D2q4ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f6:d3:c6:a0:05:40:1b:d9:aa:7d:ed:9f:61:1b:3a:f4:5e:
03:66:90:c4:8f:cc:14:f3:e1:8c:2f:86:76:61:27:71:59:c6:
af:f4:48:19:5d:b0:8a:f7:8a:93:e5:d9:b0:1e:19:c6:90:fe:
8c:59:ea:b5:3e:3a:b6:b7:93:e4:6a:aa:09:dd:19:03:e3:63:
ce:5c:5b:e9:15:3d:10:76:5e:b1:4d:71:5d:6d:d2:8c:6b:e1:
25:60:86:3d:bf:52:bf:71:df:6e:54:9d:87:07:46:9f:d4:d4:
92:7c:9e:d7:5b:01:ed:4d:e5:17:42:6b:cb:f6:bb:32:c4:f1:
99:a6:25:95:ac:23:5b:6d:fb:aa:cb:54:be:4e:8c:5a:16:6d:
2d:69:00:f5:30:75:a5:c7:91:95:ae:70:11:54:04:f4:66:40:
f1:c1:e1:b0:41:d1:ec:12:e1:71:35:da:30:b1:2b:34:17:23:
23:e6:e3:06:bb:3d:f1:d5:0d:1e:27:79:8f:dc:01:d8:b0:2f:
20:fe:3b:dd:f9:fa:9c:0a:e7:88:1b:89:a3:31:b3:24:aa:6a:
59:e5:2e:d8:56:14:a2:1a:88:03:87:57:5d:61:ae:a3:5f:fd:
5f:b0:69:97:aa:82:d1:5f:7f:75:23:2a:57:de:e3:ff:af:00:
5f:01:a3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:40:15 2026 by rpki-client