Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
File: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft (raw, json)
Hash identifier: cVTgh0hwtNuclsFq86se9MjH6Pq/kkbmlQgv5btOSuc=
Subject key identifier: BE:78:A3:BA:5A:5A:4F:59:8A:DB:A2:4B:54:E2:55:DE:A2:F5:12:61
Authority key identifier: 42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
Certificate issuer: /CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Certificate serial: 01A1A9025B91D28EE897A322D2FCAA9611AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
Manifest number: 1ADD
Signing time: Thu 05 Nov 2026 00:01:06 +0000
Manifest this update: Thu 05 Nov 2026 00:01:06 +0000
Manifest next update: Fri 06 Nov 2026 00:01:06 +0000
Files and hashes: 1: QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl (hash: AMVn3zBOBO2EPu7OHn0cVdRxQZM36L7j1XtzbiCT6w8=)
2: Qx55ZZjEUo3STaLz-yeXRfFXd6U.roa (hash: H6SY2nIdu7L2TEJH4MdS8DA2eloYCGNuqXlJqZac4sw=)
3: vuIHlCo4UFDYBSAD5tytHEhhhAY.roa (hash: hMc0m1Zi/iK2n4XsoGvD9oSD37NqfaVTNmYIxARhpew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:02:5b:91:d2:8e:e8:97:a3:22:d2:fc:aa:96:11:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4214088c77bd12687fd4ba9fe3159ea805888ed2
Validity
Not Before: Nov 5 00:01:06 2026 GMT
Not After : Nov 6 00:01:06 2026 GMT
Subject: CN=be78a3ba5a5a4f598adba24b54e255dea2f51261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9c:82:16:84:67:dd:96:63:ec:3c:89:13:fe:
e7:aa:a7:5d:ba:24:ef:3f:51:16:4d:c1:69:26:33:
dc:57:50:9d:f8:bf:f8:da:8d:32:5b:66:0a:9d:84:
34:21:6a:c1:e1:42:ed:9d:d9:60:51:32:29:f2:77:
4f:e3:da:bb:2d:46:8d:94:6a:81:27:fd:3a:f5:97:
a8:2b:b3:4b:bf:12:f5:41:aa:bd:bc:9b:22:71:44:
86:78:3b:a7:17:11:2b:40:b0:3a:10:e1:2e:38:80:
09:78:fc:e4:3f:02:60:38:0e:69:14:d0:ab:78:14:
64:eb:1b:16:6b:e0:df:5e:af:77:20:02:b0:e2:f1:
bb:2c:c3:eb:73:b0:4f:61:24:05:24:32:a2:2c:27:
a4:a6:9b:04:ac:af:86:e3:8c:ef:23:3d:21:0c:6f:
5a:4a:b4:72:39:f3:df:44:1f:ca:e8:9c:a1:7f:1d:
9e:82:7c:e8:d1:22:47:c0:c8:4d:e8:e4:06:d6:b3:
4d:8c:c4:b1:9d:82:bb:9f:a3:af:ce:a1:03:d8:a0:
24:8c:1b:2a:b4:61:85:5f:dd:6f:59:d8:37:26:28:
1f:d7:e9:31:de:32:d6:58:bc:f2:58:d0:4d:73:73:
80:e0:bc:cb:a7:33:9a:bb:1e:e5:b0:5e:d1:f5:5d:
69:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:78:A3:BA:5A:5A:4F:59:8A:DB:A2:4B:54:E2:55:DE:A2:F5:12:61
X509v3 Authority Key Identifier:
keyid:42:14:08:8C:77:BD:12:68:7F:D4:BA:9F:E3:15:9E:A8:05:88:8E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/bb5ece-012e-4194-9980-7e21db5a2ef9/1/QhQIjHe9Emh_1Lqf4xWeqAWIjtI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:91:f7:3b:90:05:f2:24:16:4b:25:9a:5f:cc:e9:0f:d6:51:
f7:c8:b6:42:5f:51:81:04:27:27:82:14:b9:bb:1b:1c:22:c1:
51:18:5f:ab:9d:8f:83:80:c7:1d:66:3e:06:e5:91:c3:d5:5c:
e4:c5:3c:53:4f:3a:46:77:da:7a:44:59:bb:50:10:b3:8b:71:
6d:d4:c8:f6:06:32:70:9c:4e:19:46:e6:2b:00:fa:a7:2b:17:
11:cd:c2:80:ac:d8:e1:a3:8d:03:ba:ae:d8:b3:a1:7b:37:e9:
d8:cf:d3:6b:af:c0:4a:92:18:d7:de:16:26:6f:91:3a:7c:75:
d8:ff:c4:ec:9b:f8:72:93:dd:0e:42:24:8c:58:a2:d8:0c:b9:
6f:c9:c2:74:4f:0e:5f:d0:0f:3b:47:d2:3c:6d:50:28:b0:87:
41:4a:07:16:9d:83:16:e7:8f:e2:89:85:00:fb:16:ea:dd:2c:
8e:5d:ff:5f:94:a0:d8:10:a1:b6:95:71:68:f6:fb:45:cb:4d:
d3:18:2b:14:db:2e:aa:6d:2d:30:03:47:83:6b:e1:d4:3d:b4:
ec:4e:f3:39:d7:cd:d1:46:11:ee:54:8a:e5:61:4e:b7:41:d8:
76:68:d3:25:ab:c1:c1:52:b3:af:39:a6:f9:79:b5:b2:85:14:
5a:28:ea:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:17:00 2026 by rpki-client