Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
File: QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft (raw, json)
Hash identifier: p7HlvBUxb+M3hS+/kRDk+K7mE+iJqudzNBm0fqzazvU=
Subject key identifier: E9:D3:DD:71:61:AF:92:09:4E:02:1C:60:20:12:98:AB:72:28:1A:77
Authority key identifier: 41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
Certificate issuer: /CN=414915cdd322bfe39472536955464a5ff67117c3
Certificate serial: 01A1968DCDA98F7B63525B3FAEA1DAB49EE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
Manifest number: 0AE0
Signing time: Sun 01 Nov 2026 10:00:37 +0000
Manifest this update: Sun 01 Nov 2026 10:00:37 +0000
Manifest next update: Mon 02 Nov 2026 10:00:37 +0000
Files and hashes: 1: D-OhIFYDtU_Cd-e4wB1EEbfz2ZY.roa (hash: NEAvke3XuRiHlogwVc4RcyWVQUznukeff4gqiKDQn+U=)
2: QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl (hash: qDgbGgUBnou06OD6D4pPJx+Z2SIK405cdZR4c3jRa0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:8d:cd:a9:8f:7b:63:52:5b:3f:ae:a1:da:b4:9e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=414915cdd322bfe39472536955464a5ff67117c3
Validity
Not Before: Nov 1 10:00:37 2026 GMT
Not After : Nov 2 10:00:37 2026 GMT
Subject: CN=e9d3dd7161af92094e021c60201298ab72281a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:49:4d:f9:48:c1:d3:94:25:06:2c:45:15:f0:
9f:74:55:02:cf:fb:8c:29:9e:3d:20:af:88:a9:91:
6d:6c:89:dc:01:22:5c:f9:c8:24:64:7b:91:97:89:
8e:3c:4f:63:55:33:a9:cd:f6:09:ea:7b:dc:d8:d2:
39:fc:60:59:b7:d0:6e:e3:b7:5d:1a:75:dc:66:6d:
9b:ba:ff:7e:d4:2e:4b:b7:3d:6e:ea:e1:d7:f6:fb:
ff:41:cd:bd:80:bf:33:96:14:97:d1:97:d6:a1:dd:
33:13:69:e6:cf:fe:04:a2:40:9f:7a:dc:ca:a6:04:
4b:e4:01:fa:8b:14:2b:91:68:db:0a:1d:f9:fd:21:
74:78:8c:56:40:3c:65:78:77:96:fa:66:51:3b:df:
0a:04:fd:4b:7a:6e:9e:39:9a:3e:83:a9:9f:75:fa:
89:22:87:33:9b:b6:ff:fc:61:5d:2f:69:59:16:51:
21:f8:de:6e:75:a6:66:0f:9a:dc:a7:fb:e4:75:0d:
64:2b:8d:37:8f:76:67:bf:3b:bb:fd:20:ad:63:69:
4a:bc:be:a4:15:13:3e:61:85:3c:83:6e:d8:71:ea:
dc:01:30:62:a2:53:0f:a1:ca:54:7e:69:ea:ef:1d:
05:4a:4a:d2:43:67:3a:17:54:b5:3d:38:71:6c:34:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D3:DD:71:61:AF:92:09:4E:02:1C:60:20:12:98:AB:72:28:1A:77
X509v3 Authority Key Identifier:
keyid:41:49:15:CD:D3:22:BF:E3:94:72:53:69:55:46:4A:5F:F6:71:17:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUkVzdMiv-OUclNpVUZKX_ZxF8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/283234-a52a-4556-b3cb-f1d5ca96a7d6/1/QUkVzdMiv-OUclNpVUZKX_ZxF8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:61:85:0e:8c:25:ac:88:8b:89:71:47:50:cd:da:d2:38:ae:
41:71:da:81:93:0b:93:62:f3:a6:c4:0c:cf:d5:8b:ab:ad:ac:
68:16:be:a0:6b:ce:21:47:79:14:9e:40:58:fe:fc:6d:26:1d:
d2:bc:41:cc:62:4c:2d:cd:32:b8:42:43:d1:3c:09:90:3a:91:
96:50:48:01:7a:8c:79:52:ce:6e:6f:28:86:28:ae:e6:c6:06:
f2:26:46:9c:d6:b7:6a:aa:c0:a5:91:42:5e:95:90:f5:2c:a1:
f5:4c:d0:39:96:2c:34:c7:ac:58:1b:2f:21:3a:0f:16:e7:e4:
dd:11:34:84:c6:4d:7b:56:f4:fa:4c:c2:12:06:0b:51:e2:87:
e1:61:6a:e8:75:b7:c5:62:6b:c3:3e:4f:a1:ea:89:f4:2c:d7:
97:ef:9b:75:5d:dd:65:53:dc:96:13:45:b1:27:4c:f6:f8:96:
70:52:c7:32:ea:49:dd:df:b2:24:63:e8:9c:64:21:ad:09:f8:
16:4f:84:81:4c:aa:f5:34:d6:af:3e:34:ba:10:c9:16:4c:bf:
97:65:8c:fb:c2:a1:ba:d2:e7:2d:a6:00:61:8a:6a:93:10:39:
0f:56:94:62:04:e1:4e:7f:03:62:cf:80:d8:61:ac:11:eb:dc:
7c:81:67:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:40:13 2026 by rpki-client