Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
File: RQi117NzxB3b6pjaW8lxcpDkF_k.mft (raw, json)
Hash identifier: QuhDFPAU+qWSr+5FeD8mfFkgkHAPa2mbN7M1HM1uqJ0=
Subject key identifier: FF:1E:0B:4F:32:5F:A0:68:81:24:83:AA:D3:E7:F4:6E:5A:C7:0F:CE
Authority key identifier: 45:08:B5:D7:B3:73:C4:1D:DB:EA:98:DA:5B:C9:71:72:90:E4:17:F9
Certificate issuer: /CN=4508b5d7b373c41ddbea98da5bc9717290e417f9
Certificate serial: 01A19356000D96299078D94A8C8881C5888A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
Manifest number: 0128
Signing time: Sat 31 Oct 2026 19:00:49 +0000
Manifest this update: Sat 31 Oct 2026 19:00:49 +0000
Manifest next update: Sun 01 Nov 2026 19:00:49 +0000
Files and hashes: 1: RQi117NzxB3b6pjaW8lxcpDkF_k.crl (hash: L3H80dwSUWRM68tXBe46fC7Rlo+YtmrHvonpGadJguc=)
2: n96x_KV9AIPo6sljEniHgrYwYdo.asa (hash: MZQfPY2YJsa6skvxi4+gsitkkwqOwZWNNGCWs8mjX6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:93:56:00:0d:96:29:90:78:d9:4a:8c:88:81:c5:88:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4508b5d7b373c41ddbea98da5bc9717290e417f9
Validity
Not Before: Oct 31 19:00:49 2026 GMT
Not After : Nov 1 19:00:49 2026 GMT
Subject: CN=ff1e0b4f325fa068812483aad3e7f46e5ac70fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6f:31:a9:d8:ae:60:50:4c:16:70:7d:49:38:
96:cf:1c:44:51:7b:86:98:b8:0a:ce:27:93:18:89:
f9:c0:61:c3:a7:c1:61:b9:53:d6:04:26:1d:fd:f5:
5a:e8:00:96:ef:bc:e0:ad:2e:5d:5c:c6:f2:54:26:
33:76:c6:5c:39:2c:e6:96:e2:cb:0e:f2:ab:4d:cb:
02:1b:16:26:2f:1d:37:02:25:6a:c4:73:6e:4c:de:
df:87:c6:39:8e:ee:b9:1f:e5:55:2d:57:9f:53:80:
2a:f3:ed:65:d7:96:0c:4f:80:8c:dc:7f:24:cb:26:
8d:ec:0c:35:f3:c7:11:24:41:2f:32:d8:77:c7:f5:
db:15:4b:b7:27:65:99:bd:04:8d:3f:36:a3:bb:e7:
bb:3c:12:ad:12:ba:ae:a1:94:40:a0:58:8f:3c:88:
53:67:52:f3:8c:d8:9a:e6:d1:85:50:73:fe:f8:33:
20:a2:56:25:bd:3e:e8:96:16:6b:02:65:94:38:e5:
2b:8f:22:93:7c:8b:9c:30:a8:75:ff:91:34:96:05:
f5:db:4e:a8:b7:96:67:c2:cf:43:eb:d7:59:06:ad:
0f:0c:28:d4:c0:69:bd:8b:7d:55:4a:f9:b5:69:e4:
16:81:3b:a0:7a:ac:51:f8:14:27:22:0f:36:33:fc:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1E:0B:4F:32:5F:A0:68:81:24:83:AA:D3:E7:F4:6E:5A:C7:0F:CE
X509v3 Authority Key Identifier:
keyid:45:08:B5:D7:B3:73:C4:1D:DB:EA:98:DA:5B:C9:71:72:90:E4:17:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQi117NzxB3b6pjaW8lxcpDkF_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a3df8b-69d9-41d9-8c83-f1bd8c6dff82/1/RQi117NzxB3b6pjaW8lxcpDkF_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:97:27:be:dd:ce:c1:db:d3:7a:95:02:73:22:58:e2:16:84:
41:fb:e4:e5:5f:77:01:0e:50:42:28:98:2d:55:d6:6f:df:4c:
38:72:b7:4d:37:d2:03:cd:25:18:84:c5:b0:f9:fc:a1:21:2d:
87:d8:ef:12:8c:da:57:53:35:b3:30:ab:fc:0d:93:8c:06:56:
82:d5:b2:b1:d1:25:d7:c7:13:5b:bf:f3:2e:ed:c0:03:6c:f4:
4d:d4:2e:15:c6:e0:dc:f9:16:09:48:be:95:02:07:ce:43:00:
97:e9:9c:81:fa:c7:b7:b6:72:06:55:24:54:d2:56:33:0f:d4:
c3:5c:03:60:19:b7:19:fa:d8:81:31:8d:29:d0:fd:b8:7c:31:
d2:24:ff:93:60:2b:7b:ff:73:3f:aa:6e:90:3e:77:d2:19:d2:
0d:b5:6c:21:a6:9a:54:56:a8:1e:4e:2a:b6:e9:f9:a1:a3:38:
b8:78:7d:ef:7a:48:58:81:9a:07:39:98:b7:59:59:20:a7:63:
22:81:e3:71:2d:99:ab:18:4a:a3:80:c0:2f:02:dd:c8:da:e7:
ff:84:d7:60:12:8c:60:d3:7a:cc:26:ca:3f:97:e0:c6:0d:6b:
f8:16:af:7c:8d:f5:d5:c0:58:41:c8:31:9e:8a:4d:ac:53:30:
aa:ab:27:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGTVgANlimQeNlKjIiBxYiKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MDhiNWQ3YjM3M2M0MWRkYmVhOThkYTViYzk3MTcyOTBl
NDE3ZjkwHhcNMjYxMDMxMTkwMDQ5WhcNMjYxMTAxMTkwMDQ5WjAzMTEwLwYDVQQD
EyhmZjFlMGI0ZjMyNWZhMDY4ODEyNDgzYWFkM2U3ZjQ2ZTVhYzcwZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApG8xqdiuYFBMFnB9STiWzxxEUXuG
mLgKzieTGIn5wGHDp8FhuVPWBCYd/fVa6ACW77zgrS5dXMbyVCYzdsZcOSzmluLL
DvKrTcsCGxYmLx03AiVqxHNuTN7fh8Y5ju65H+VVLVefU4Aq8+1l15YMT4CM3H8k
yyaN7Aw188cRJEEvMth3x/XbFUu3J2WZvQSNPzaju+e7PBKtErquoZRAoFiPPIhT
Z1LzjNia5tGFUHP++DMgolYlvT7olhZrAmWUOOUrjyKTfIucMKh1/5E0lgX1206o
t5Znws9D69dZBq0PDCjUwGm9i31VSvm1aeQWgTugeqxR+BQnIg82M/w3PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP8eC08yX6BogSSDqtPn9G5axw/OMB8GA1UdIwQY
MBaAFEUItdezc8Qd2+qY2lvJcXKQ5Bf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlFpMTE3Tnp4QjNiNnBqYVc4bHhjcERrRl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hM2RmOGItNjlkOS00MWQ5LThjODMt
ZjFiZDhjNmRmZjgyLzEvUlFpMTE3Tnp4QjNiNnBqYVc4bHhjcERrRl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hM2RmOGItNjlkOS00MWQ5LThjODMtZjFiZDhjNmRmZjgy
LzEvUlFpMTE3Tnp4QjNiNnBqYVc4bHhjcERrRl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJcnvt3O
wdvTepUCcyJY4haEQfvk5V93AQ5QQiiYLVXWb99MOHK3TTfSA80lGITFsPn8oSEt
h9jvEozaV1M1szCr/A2TjAZWgtWysdEl18cTW7/zLu3AA2z0TdQuFcbg3PkWCUi+
lQIHzkMAl+mcgfrHt7ZyBlUkVNJWMw/Uw1wDYBm3GfrYgTGNKdD9uHwx0iT/k2Ar
e/9zP6pukD530hnSDbVsIaaaVFaoHk4qtun5oaM4uHh973pIWIGaBzmYt1lZIKdj
IoHjcS2ZqxhKo4DALwLdyNrn/4TXYBKMYNN6zCbKP5fgxg1r+BavfI311cBYQcgx
nopNrFMwqqsn+w==
-----END CERTIFICATE-----
Generated at Sun Nov 1 03:04:40 2026 by rpki-client