Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
File: v02QFSU9d7e4q3m7vrs-_LdCwvE.mft (raw, json)
Hash identifier: 16UMXnA7XOBDkgWp0YuhRe0Z0bBQwMs3n3xEFoeGOS4=
Subject key identifier: 43:47:0E:D2:1B:E7:6D:8C:EE:DD:8B:3D:25:A7:14:39:63:D4:9D:0E
Authority key identifier: BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
Certificate issuer: /CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Certificate serial: 01A1859A689FB290C5A1F799A420116DD58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
Manifest number: 0143
Signing time: Thu 29 Oct 2026 03:00:51 +0000
Manifest this update: Thu 29 Oct 2026 03:00:51 +0000
Manifest next update: Fri 30 Oct 2026 03:00:51 +0000
Files and hashes: 1: LLW6KMEjDdWJNHccooMhS8WkJBo.roa (hash: 4wPZvW7aabauk/AVllnR9557p3pfAAJeEY/OlA5nxV8=)
2: azhaK6p4TY581nFNN0YSc0NYZII.roa (hash: D1i0KlyPZu/BLyg50mMb9PNPD0ML3cRf92lF5p6N+zc=)
3: v02QFSU9d7e4q3m7vrs-_LdCwvE.crl (hash: E1E6+pv6PiGRAl93jnvWALjnH1aPeMj0hke41wE9FaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9a:68:9f:b2:90:c5:a1:f7:99:a4:20:11:6d:d5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4d9015253d77b7b8ab79bbbebb3efcb742c2f1
Validity
Not Before: Oct 29 03:00:51 2026 GMT
Not After : Oct 30 03:00:51 2026 GMT
Subject: CN=43470ed21be76d8ceedd8b3d25a7143963d49d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:95:6e:d7:3d:7b:14:4c:e9:3a:72:37:d9:d7:
a6:10:2d:1c:7c:20:f2:2c:33:91:e4:74:f3:46:ef:
fd:c2:35:cd:e9:ef:30:e5:9e:39:1d:e8:af:22:79:
9a:a5:82:1c:f3:02:52:c9:92:57:31:ff:07:55:2b:
be:13:ca:11:be:9d:37:95:56:46:f1:d6:bf:a9:e5:
ba:84:39:bf:5a:7d:5e:70:74:d5:e9:bb:98:66:6b:
11:e4:0a:f8:8a:97:8f:bc:9d:a7:b8:9f:61:2c:f2:
c3:66:6e:b3:9d:c8:15:01:ac:83:26:c8:dd:c8:f7:
e0:b0:63:58:38:42:66:6f:8e:6f:c0:27:be:a9:db:
6d:20:b8:06:ea:c7:06:d0:5d:96:2e:97:03:9b:8a:
ad:99:a2:3e:77:b4:2a:07:3b:e4:02:be:e9:ce:02:
80:59:d7:a5:52:79:92:7b:7f:ec:cb:67:47:45:84:
55:48:4f:46:16:fd:59:42:89:6d:6f:a0:98:fd:82:
c0:cf:e4:79:1c:49:ec:e1:14:bb:d0:22:ba:6a:f0:
4b:61:f2:38:aa:41:39:a5:bc:c5:d6:f8:4f:df:64:
a9:eb:b3:48:36:25:70:43:97:96:e3:f1:f8:4f:2a:
80:7f:98:c5:89:b6:07:fc:34:6f:95:70:ce:17:cb:
98:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:47:0E:D2:1B:E7:6D:8C:EE:DD:8B:3D:25:A7:14:39:63:D4:9D:0E
X509v3 Authority Key Identifier:
keyid:BF:4D:90:15:25:3D:77:B7:B8:AB:79:BB:BE:BB:3E:FC:B7:42:C2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v02QFSU9d7e4q3m7vrs-_LdCwvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/0a1b83-86ba-401a-a543-bfdec0c112e3/1/v02QFSU9d7e4q3m7vrs-_LdCwvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:54:fc:0d:0a:92:04:96:04:39:c5:d7:7f:84:72:89:66:9d:
0e:5a:0c:9f:6b:cf:d0:f6:09:f6:ea:75:57:ec:2d:8a:43:10:
8d:a2:b0:33:f6:1b:72:e0:78:c7:ea:b1:d4:3a:77:11:23:6c:
96:c7:c9:3b:1f:97:f1:2c:b6:ff:56:18:09:8d:4c:aa:39:70:
ee:76:62:94:a9:cf:41:37:9e:6f:89:30:a4:5d:71:58:c0:0e:
9d:2d:b5:8f:79:4a:88:f8:8c:46:2d:3b:23:a9:de:b2:26:b2:
4c:74:2e:a2:f0:43:2c:02:87:1e:b0:9e:b9:b0:86:c7:6f:48:
cd:6b:64:f5:db:f4:c7:05:cc:d5:50:93:ec:d0:e1:0a:03:89:
17:31:a6:5d:28:95:22:ad:8a:70:8f:af:b9:9c:eb:bf:df:22:
2e:24:b1:2e:1a:36:b6:47:66:d8:8a:b2:91:15:45:0d:99:3c:
dc:ae:88:13:f5:d1:eb:8e:12:61:46:33:4e:64:44:c4:69:79:
81:53:12:35:91:1e:f6:61:da:9d:7f:c9:b7:e6:a0:1a:20:22:
76:c8:ad:05:ab:7d:ec:c3:08:a8:27:18:2b:ac:e9:f1:62:76:
71:0c:23:02:43:3f:64:d4:17:9c:3e:0f:a4:48:16:29:0c:b2:
f7:52:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 07:11:39 2026 by rpki-client