Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
File: QbA1V5NRFBbxRwW15pV14JEgMcE.mft (raw, json)
Hash identifier: BiiabbYrESeiqC33gTlsz4jTLnnQZP49xaxSX73dbg8=
Subject key identifier: 44:B4:A3:F6:2E:BA:49:7A:0F:E1:C5:9D:9B:88:11:AD:A0:87:92:67
Authority key identifier: 41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
Certificate issuer: /CN=41b0355793511416f14705b5e69575e0912031c1
Certificate serial: 01A172B86B807AC97E1EAAA124939C6E098D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
Manifest number: 0354
Signing time: Sun 25 Oct 2026 11:00:51 +0000
Manifest this update: Sun 25 Oct 2026 11:00:51 +0000
Manifest next update: Mon 26 Oct 2026 11:00:51 +0000
Files and hashes: 1: QbA1V5NRFBbxRwW15pV14JEgMcE.crl (hash: tm9nxlbHS9ULl/mrdf2qMEDkjVEx39An/ckobA2ci0A=)
2: jDh_e5jFCb4SZSQr89DNuyR1GmA.roa (hash: OOgQec1GLUpiwLdlG2tPvtCo/oWMRbASwbpSjxC/PqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:b8:6b:80:7a:c9:7e:1e:aa:a1:24:93:9c:6e:09:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b0355793511416f14705b5e69575e0912031c1
Validity
Not Before: Oct 25 11:00:51 2026 GMT
Not After : Oct 26 11:00:51 2026 GMT
Subject: CN=44b4a3f62eba497a0fe1c59d9b8811ada0879267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6e:0f:c7:51:c0:dc:a3:73:05:d9:ce:87:ab:
f1:18:57:58:33:fe:8e:bf:0e:a3:38:14:4a:6b:71:
0e:b2:6e:f3:3d:f6:f5:14:3d:56:44:51:65:a0:21:
f2:93:8a:64:3f:ec:e4:49:72:32:39:40:a4:4d:3b:
4f:e9:5a:f2:47:04:52:b9:75:91:23:40:d8:d3:0d:
9b:21:21:91:6d:53:11:4f:69:e5:84:12:fe:96:b4:
3e:d6:54:4f:f4:4b:7f:57:7d:65:d1:d4:55:0c:7a:
3b:ad:e4:76:38:37:cf:c6:ca:4d:9c:a0:16:9d:7b:
fe:37:73:99:a5:e4:ad:62:22:ae:f6:d8:09:54:2b:
54:b2:0c:59:1e:b8:0b:e9:83:d9:9e:4d:47:93:28:
75:bd:7e:13:3d:32:ae:ef:fa:11:7a:02:5e:82:9e:
13:1a:76:3a:11:8c:f3:a2:8d:02:ac:52:20:87:08:
44:72:28:e0:45:d0:5a:86:af:e7:f7:49:f0:5b:09:
2c:3e:25:d8:aa:e6:be:6f:8e:5d:b9:c0:ad:38:5e:
d6:8a:ce:4c:b3:e0:13:0d:61:28:26:4e:21:8c:04:
02:7b:aa:cb:1c:00:a0:a6:fd:c5:8e:56:b5:6c:f3:
01:f4:a0:99:82:2e:c8:ba:89:bc:ea:70:d9:ab:5b:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B4:A3:F6:2E:BA:49:7A:0F:E1:C5:9D:9B:88:11:AD:A0:87:92:67
X509v3 Authority Key Identifier:
keyid:41:B0:35:57:93:51:14:16:F1:47:05:B5:E6:95:75:E0:91:20:31:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbA1V5NRFBbxRwW15pV14JEgMcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a8bda7-2450-4ea5-827c-0f7589bc0ce0/1/QbA1V5NRFBbxRwW15pV14JEgMcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:5f:26:e2:15:55:e8:f4:06:13:2d:ef:72:7a:c2:c3:95:2c:
f8:45:43:27:a8:22:44:27:5c:2c:43:40:b4:11:39:22:3a:1c:
fc:2d:69:16:c5:e1:71:1b:2a:88:06:74:b9:9e:c8:63:d3:d6:
0f:1c:31:55:c2:6b:92:88:b4:76:10:12:ff:5b:e4:1a:13:2c:
21:1c:a0:e2:da:7e:a3:6e:55:78:24:b5:9a:8d:a8:c3:8d:9a:
d2:07:97:3b:31:81:ad:ca:8d:72:d4:8c:5a:8e:34:54:1e:b4:
d9:54:d7:a6:65:6e:7c:1c:4e:bc:8b:8f:93:2e:4d:8a:1c:76:
d2:1c:21:83:16:6f:e6:dd:2f:de:a5:c3:40:de:b3:71:dc:58:
be:df:73:fe:ca:39:33:f5:00:d0:78:bd:2b:fe:42:10:a1:b0:
39:0d:6f:13:77:6e:5c:58:e7:6c:12:ac:a7:50:af:9f:c1:1b:
4d:c8:5d:48:2b:a3:bd:ad:4d:72:c9:26:47:b9:b4:05:90:7c:
0e:cf:23:bc:95:bc:a9:e4:be:2e:e9:40:3c:80:8c:c4:e0:ac:
22:8f:b9:1a:f5:7e:e0:e0:02:07:00:80:35:43:6e:55:24:ff:
7b:95:10:26:d6:d6:e3:29:bb:ca:e1:04:e8:93:84:1b:95:07:
c4:96:2f:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFyuGuAesl+HqqhJJOcbgmNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxYjAzNTU3OTM1MTE0MTZmMTQ3MDViNWU2OTU3NWUwOTEy
MDMxYzEwHhcNMjYxMDI1MTEwMDUxWhcNMjYxMDI2MTEwMDUxWjAzMTEwLwYDVQQD
Eyg0NGI0YTNmNjJlYmE0OTdhMGZlMWM1OWQ5Yjg4MTFhZGEwODc5MjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m4Px1HA3KNzBdnOh6vxGFdYM/6O
vw6jOBRKa3EOsm7zPfb1FD1WRFFloCHyk4pkP+zkSXIyOUCkTTtP6VryRwRSuXWR
I0DY0w2bISGRbVMRT2nlhBL+lrQ+1lRP9Et/V31l0dRVDHo7reR2ODfPxspNnKAW
nXv+N3OZpeStYiKu9tgJVCtUsgxZHrgL6YPZnk1Hkyh1vX4TPTKu7/oRegJegp4T
GnY6EYzzoo0CrFIghwhEcijgRdBahq/n90nwWwksPiXYqua+b45ducCtOF7Wis5M
s+ATDWEoJk4hjAQCe6rLHACgpv3Fjla1bPMB9KCZgi7Iuom86nDZq1sxfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFES0o/Yuukl6D+HFnZuIEa2gh5JnMB8GA1UdIwQY
MBaAFEGwNVeTURQW8UcFteaVdeCRIDHBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWJBMVY1TlJGQmJ4UndXMTVwVjE0SkVnTWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOGJkYTctMjQ1MC00ZWE1LTgyN2Mt
MGY3NTg5YmMwY2UwLzEvUWJBMVY1TlJGQmJ4UndXMTVwVjE0SkVnTWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hOGJkYTctMjQ1MC00ZWE1LTgyN2MtMGY3NTg5YmMwY2Uw
LzEvUWJBMVY1TlJGQmJ4UndXMTVwVjE0SkVnTWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwF8m4hVV
6PQGEy3vcnrCw5Us+EVDJ6giRCdcLENAtBE5Ijoc/C1pFsXhcRsqiAZ0uZ7IY9PW
DxwxVcJrkoi0dhAS/1vkGhMsIRyg4tp+o25VeCS1mo2ow42a0geXOzGBrcqNctSM
Wo40VB602VTXpmVufBxOvIuPky5Nihx20hwhgxZv5t0v3qXDQN6zcdxYvt9z/so5
M/UA0Hi9K/5CEKGwOQ1vE3duXFjnbBKsp1Cvn8EbTchdSCujva1NcskmR7m0BZB8
Ds8jvJW8qeS+LulAPICMxOCsIo+5GvV+4OACBwCANUNuVST/e5UQJtbW4ym7yuEE
6JOEG5UHxJYv2w==
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:58:56 2026 by rpki-client