Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
File: QTe22qILXgYYYrb7meI2rCwuNPg.mft (raw, json)
Hash identifier: AQbKx1ITxHrn6Vr8GN6KD827Ti64rbS1RZLt+62veGk=
Subject key identifier: 07:B5:25:7D:46:15:F8:58:6B:FC:89:E9:88:FC:AD:F0:38:09:42:12
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 01A17DE1B97DE26141892A105364DBD9D48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
Manifest number: 0A94
Signing time: Tue 27 Oct 2026 15:01:47 +0000
Manifest this update: Tue 27 Oct 2026 15:01:47 +0000
Manifest next update: Wed 28 Oct 2026 15:01:47 +0000
Files and hashes: 1: QTe22qILXgYYYrb7meI2rCwuNPg.crl (hash: gYv5FOnhyF4lpmp8658aZ/Qy7sNtBOTiu7Lyx69g/kc=)
2: cnMksPM8qHUJS7PE1xwm-IJZIEs.roa (hash: F0Xawui/3p0KQ1PsdF0IPS6D5QX+wIN0HvSrMKPyjOo=)
3: iXKcLuJmGyAb1eHjCTVSp7W3GfM.roa (hash: fKesRGsQOYtr1MHvJTlZYCSawG7ul48aKfBiS+3ImGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 15:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:e1:b9:7d:e2:61:41:89:2a:10:53:64:db:d9:d4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Oct 27 15:01:47 2026 GMT
Not After : Oct 28 15:01:47 2026 GMT
Subject: CN=07b5257d4615f8586bfc89e988fcadf038094212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:ff:cc:96:a8:b0:db:b4:0d:b4:47:94:12:
46:37:03:a2:6d:d5:ee:be:cb:ba:b5:fb:4b:f1:51:
f3:dc:a5:bb:58:ab:26:7e:0f:98:cb:dc:41:ab:a9:
a5:80:50:62:4b:c0:22:8d:5d:53:6e:7e:31:54:26:
89:00:d0:8a:de:98:da:20:df:e4:e0:87:08:2b:38:
d4:da:46:51:56:c9:2a:e8:ab:f1:fe:c0:7c:3d:b1:
e6:bc:6d:14:2d:6a:42:44:5c:cf:b3:25:1b:ad:61:
eb:74:88:b0:99:2f:5f:44:fc:e1:20:ef:b3:52:03:
ef:e5:04:0d:5e:fa:8d:9b:38:3f:bc:a4:3b:44:bf:
10:39:a3:fd:5e:2d:29:fe:16:b7:9b:ec:ed:74:68:
79:a5:5d:60:b7:72:48:4f:f1:7d:d7:c0:b2:2f:95:
5b:86:dd:20:e4:c6:a2:8c:0e:e7:55:4f:05:37:01:
d1:b0:83:84:de:e8:db:d4:4f:35:3c:24:9f:aa:52:
80:14:a8:67:80:e1:7c:0d:bc:d4:c9:55:37:99:73:
11:af:86:5f:2e:d9:7b:bc:72:dd:cd:2c:b3:70:a5:
07:f0:7f:d9:f5:81:88:15:cc:db:42:79:14:92:44:
06:f0:9c:f0:07:62:db:17:84:bb:b6:6d:61:19:22:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B5:25:7D:46:15:F8:58:6B:FC:89:E9:88:FC:AD:F0:38:09:42:12
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b7:0d:55:0d:6d:5c:9e:0e:0a:a3:68:3c:93:14:b8:e3:e7:
d5:db:c2:da:a5:51:b8:1a:95:6d:d0:ff:8b:44:0a:15:ce:7d:
85:4b:09:f4:8d:aa:26:38:94:98:b2:47:0f:47:95:6f:30:e2:
c9:c3:29:9c:85:eb:88:8c:68:41:20:ff:d3:a4:be:e1:cc:3e:
a3:b5:a2:08:ad:9b:e4:12:47:c5:dd:a9:a9:9c:2a:58:e2:e2:
da:53:86:37:2b:3a:a7:07:51:a2:ed:19:80:de:b0:08:3b:da:
fc:c4:94:ad:a3:09:16:a7:2c:15:7b:b4:b1:5a:b2:de:3d:95:
5a:0e:8c:b5:1b:fb:20:6c:87:79:6a:21:13:6a:e8:35:02:5d:
e4:1b:7e:1f:2c:3b:15:ac:2b:56:42:14:67:b6:c8:27:7b:04:
93:2f:a2:d3:47:c6:d3:1b:64:a8:bf:26:04:a6:b8:76:20:96:
77:b1:34:f9:fb:19:79:10:2b:d0:95:77:c3:45:82:bc:7b:9d:
70:c5:46:24:90:2b:f8:58:13:61:57:20:04:67:56:ef:2e:8e:
5f:4b:c9:ce:b9:06:a9:ba:cc:eb:80:73:90:41:fc:65:c3:cd:
91:56:94:70:3c:28:5c:8d:ec:24:5a:f3:92:8d:01:eb:08:3b:
d6:7b:a2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:52:29 2026 by rpki-client