Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
File: Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft (raw, json)
Hash identifier: jb7Q5T7iZodghUuO83G/bpWEq/UvLi5m0ebv3vXlXGU=
Subject key identifier: 4A:B9:87:F2:4C:9D:02:24:7A:04:A4:8D:DC:55:75:0A:08:76:DB:5E
Authority key identifier: 43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
Certificate issuer: /CN=43772b99993b0608d2782af45a22eb93c7fda63b
Certificate serial: 01A17E864E4765D37774A5B84B3CAA42F6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
Manifest number: 1799
Signing time: Tue 27 Oct 2026 18:01:33 +0000
Manifest this update: Tue 27 Oct 2026 18:01:33 +0000
Manifest next update: Wed 28 Oct 2026 18:01:33 +0000
Files and hashes: 1: Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl (hash: XjRzaJytFEnfhvu8lVx9BukQr4r4f+0RatmRC3ejnSE=)
2: rlMjya3NsVVgO1waTc6yGFx9urk.roa (hash: 9FM63jOjz4W8peZkAPQ1K8fUNKLUxM1YrAhzY91gkyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:4e:47:65:d3:77:74:a5:b8:4b:3c:aa:42:f6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43772b99993b0608d2782af45a22eb93c7fda63b
Validity
Not Before: Oct 27 18:01:33 2026 GMT
Not After : Oct 28 18:01:33 2026 GMT
Subject: CN=4ab987f24c9d02247a04a48ddc55750a0876db5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:42:22:30:6b:41:4a:1f:2d:57:c9:93:5f:4d:
51:39:85:e5:f3:b2:f3:14:e4:0e:66:68:38:9a:a6:
02:7a:d9:f2:4e:0c:eb:bd:54:47:33:06:75:e4:52:
12:ae:e0:fc:78:f4:cd:0f:82:f7:8b:5c:52:b9:b3:
13:07:eb:cc:bb:42:c9:ca:e9:0e:cd:fc:e1:0d:03:
55:04:ec:d4:74:df:1c:eb:81:22:c4:f9:87:c4:05:
f0:f0:10:f5:60:ed:88:92:2d:82:28:af:4e:13:42:
a7:02:61:b0:a2:3a:2b:c1:ef:c9:59:a7:fc:66:6c:
9c:e0:84:5e:af:8f:65:45:e6:32:0f:d4:cf:78:34:
63:83:55:e1:ce:d9:c8:b0:23:7a:60:5e:f6:0f:0f:
63:da:79:8c:a0:65:39:b3:91:6b:6d:00:84:f0:66:
67:47:a5:6f:65:2e:78:34:03:cc:cf:71:57:1f:d9:
0d:84:da:85:c7:45:83:85:f0:79:ee:90:54:22:89:
a2:e2:c3:f3:a7:d1:9a:7c:40:c0:ab:80:3d:7c:3d:
f1:13:48:77:41:ff:dd:cc:ce:3c:54:f2:cb:35:52:
09:83:52:36:aa:4e:9b:c5:1f:b4:e7:bf:b6:85:e4:
30:c7:3b:a2:f9:67:f7:63:71:1a:44:30:f3:7e:fd:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:87:F2:4C:9D:02:24:7A:04:A4:8D:DC:55:75:0A:08:76:DB:5E
X509v3 Authority Key Identifier:
keyid:43:77:2B:99:99:3B:06:08:D2:78:2A:F4:5A:22:EB:93:C7:FD:A6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q3crmZk7BgjSeCr0WiLrk8f9pjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/4fbea8-5e79-46a2-ba5c-a16d97afa643/1/Q3crmZk7BgjSeCr0WiLrk8f9pjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8b:a0:e5:a3:4b:e2:62:af:73:99:6b:b4:f6:5d:57:c2:f4:
6c:5f:6e:fa:31:47:79:71:df:0b:22:72:a7:cc:0c:b3:53:75:
a8:2f:9b:18:ee:68:79:4b:7b:42:73:52:91:cb:fc:8c:c7:1f:
c9:73:b3:c2:58:f9:89:b8:d6:15:d0:88:4e:39:29:33:03:06:
61:77:a3:5c:56:ee:9a:0d:41:52:9f:b0:29:64:5f:fb:67:a3:
f2:de:c7:e0:33:64:83:4b:90:a8:9c:4c:f6:a9:90:4a:df:5a:
54:74:79:96:20:10:3d:8a:62:a9:7e:54:4e:e9:34:b6:d1:8d:
e9:17:04:64:47:06:14:42:76:61:d0:75:18:aa:7c:f1:46:e0:
5e:8d:bf:47:96:3c:1b:37:25:9b:3f:ef:a7:22:a5:87:55:ce:
44:53:b4:c9:24:89:31:2b:11:8f:03:fe:50:a6:89:e1:c9:05:
04:e9:55:35:a8:8e:72:1f:2e:d2:0b:58:2a:11:4a:48:bf:88:
b4:81:48:6b:1d:f3:f8:e7:1e:a5:d6:d0:09:7d:b9:dd:c0:ce:
6a:03:62:5b:f8:7f:cd:bc:cf:35:54:6c:55:8b:14:09:9e:55:
3f:b7:b6:78:bd:4e:2e:9c:d4:1c:b5:8b:7c:e6:d0:75:b9:48:
bb:41:ef:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+hk5HZdN3dKW4SzyqQvbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzNzcyYjk5OTkzYjA2MDhkMjc4MmFmNDVhMjJlYjkzYzdm
ZGE2M2IwHhcNMjYxMDI3MTgwMTMzWhcNMjYxMDI4MTgwMTMzWjAzMTEwLwYDVQQD
Eyg0YWI5ODdmMjRjOWQwMjI0N2EwNGE0OGRkYzU1NzUwYTA4NzZkYjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0IiMGtBSh8tV8mTX01ROYXl87Lz
FOQOZmg4mqYCetnyTgzrvVRHMwZ15FISruD8ePTND4L3i1xSubMTB+vMu0LJyukO
zfzhDQNVBOzUdN8c64EixPmHxAXw8BD1YO2Iki2CKK9OE0KnAmGwojorwe/JWaf8
Zmyc4IRer49lReYyD9TPeDRjg1XhztnIsCN6YF72Dw9j2nmMoGU5s5FrbQCE8GZn
R6VvZS54NAPMz3FXH9kNhNqFx0WDhfB57pBUIomi4sPzp9GafEDAq4A9fD3xE0h3
Qf/dzM48VPLLNVIJg1I2qk6bxR+057+2heQwxzui+Wf3Y3EaRDDzfv16yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEq5h/JMnQIkegSkjdxVdQoIdtteMB8GA1UdIwQY
MBaAFEN3K5mZOwYI0ngq9Foi65PH/aY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMt
YTE2ZDk3YWZhNjQzLzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80ZmJlYTgtNWU3OS00NmEyLWJhNWMtYTE2ZDk3YWZhNjQz
LzEvUTNjcm1aazdCZ2pTZUNyMFdpTHJrOGY5cGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4ug5aNL
4mKvc5lrtPZdV8L0bF9u+jFHeXHfCyJyp8wMs1N1qC+bGO5oeUt7QnNSkcv8jMcf
yXOzwlj5ibjWFdCITjkpMwMGYXejXFbumg1BUp+wKWRf+2ej8t7H4DNkg0uQqJxM
9qmQSt9aVHR5liAQPYpiqX5UTuk0ttGN6RcEZEcGFEJ2YdB1GKp88UbgXo2/R5Y8
Gzclmz/vpyKlh1XORFO0ySSJMSsRjwP+UKaJ4ckFBOlVNaiOch8u0gtYKhFKSL+I
tIFIax3z+OcepdbQCX253cDOagNiW/h/zbzPNVRsVYsUCZ5VP7e2eL1OLpzUHLWL
fObQdblIu0Hv5g==
-----END CERTIFICATE-----
Generated at Wed Oct 28 00:41:32 2026 by rpki-client