Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
File: qERYOVOgK8amaZ3pJ89FcAfwVSg.mft (raw, json)
Hash identifier: +vXJE5R54mXgLHfsLRuV0nhuS1dRBwRLuU7FHg4dzTs=
Subject key identifier: 14:AA:12:B4:67:04:78:CD:83:E8:96:7B:70:9E:4A:FC:F0:3F:DC:8C
Authority key identifier: A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
Certificate issuer: /CN=a844583953a02bc6a6699de927cf457007f05528
Certificate serial: 01A17D05858783A8F75315B579DD41F3320C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
Manifest number: 035C
Signing time: Tue 27 Oct 2026 11:01:16 +0000
Manifest this update: Tue 27 Oct 2026 11:01:16 +0000
Manifest next update: Wed 28 Oct 2026 11:01:16 +0000
Files and hashes: 1: bzuHav72txau2Blj1JcbQR-3zHA.roa (hash: TCvNISq9G9+8+m7g0vleezt4nSYPh9D8kXCKj2MC7tQ=)
2: qERYOVOgK8amaZ3pJ89FcAfwVSg.crl (hash: +amcGFDQH7hIPnOA/kggdb3VIRjQ67TL4IoBxda5hHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:05:85:87:83:a8:f7:53:15:b5:79:dd:41:f3:32:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a844583953a02bc6a6699de927cf457007f05528
Validity
Not Before: Oct 27 11:01:16 2026 GMT
Not After : Oct 28 11:01:16 2026 GMT
Subject: CN=14aa12b4670478cd83e8967b709e4afcf03fdc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:35:a7:e3:d4:84:da:7f:d8:8d:7d:d8:e4:
e8:f0:16:67:1e:e1:b6:7d:1e:72:62:50:0f:9f:fd:
0f:33:34:bf:d8:bd:54:f6:c3:dd:2d:42:5c:b4:95:
8e:4b:ed:e7:9b:e2:1c:35:02:74:5d:27:e8:f0:f1:
88:bf:ce:36:7a:0b:dc:50:bd:45:4f:f6:93:d2:84:
e4:e9:47:36:ee:c0:72:83:7b:24:07:59:2b:18:67:
01:04:1c:59:47:61:e5:83:69:42:35:ca:48:0e:79:
d5:14:ea:c9:d5:46:7d:14:eb:7b:2d:b2:0b:64:3e:
32:c0:3a:54:41:93:44:a2:30:41:82:c5:6f:20:9d:
df:50:a5:10:25:4a:3f:99:b6:80:9e:15:27:3d:87:
7e:22:45:cd:90:0a:73:15:50:68:10:b2:df:7f:6a:
86:7e:ed:d9:d6:a1:64:f6:10:03:73:f3:f0:1f:23:
de:ab:33:4f:03:f0:d0:2e:3e:3a:cd:98:da:3c:c3:
70:68:ee:3f:46:df:d3:d5:e4:c6:05:9e:9f:ad:bd:
ba:18:03:e5:d3:9b:32:d4:47:65:80:a3:04:d7:27:
a5:a8:c2:81:62:94:15:33:4c:66:e9:49:30:8a:45:
fd:81:82:03:c4:18:dc:67:0a:94:74:1c:cf:17:94:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AA:12:B4:67:04:78:CD:83:E8:96:7B:70:9E:4A:FC:F0:3F:DC:8C
X509v3 Authority Key Identifier:
keyid:A8:44:58:39:53:A0:2B:C6:A6:69:9D:E9:27:CF:45:70:07:F0:55:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qERYOVOgK8amaZ3pJ89FcAfwVSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/3031cc-a705-42c8-8003-113810a9fcae/1/qERYOVOgK8amaZ3pJ89FcAfwVSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1b:3a:34:36:56:8b:3d:94:80:9c:f7:17:6b:b1:23:b2:c5:
9d:e4:7e:5a:87:3c:60:7e:4e:06:a8:64:1c:25:89:72:0a:7a:
eb:29:ad:34:74:a7:31:5d:bc:a9:6b:79:50:ad:66:ea:e9:00:
8f:a8:dc:b6:37:52:a6:91:52:52:1d:62:9c:13:30:6f:2f:b7:
1d:78:9d:67:6f:ac:b6:f9:6a:62:f1:e0:25:f1:98:4c:a6:94:
d5:0e:aa:dc:d5:14:88:da:69:65:75:80:af:9b:ab:f3:c3:39:
ba:a9:67:94:e6:c6:a4:90:a6:5b:38:58:20:05:f9:e0:b6:2c:
67:99:ae:45:32:40:bf:e6:9d:a6:53:71:3b:16:c0:ba:36:da:
00:af:59:74:be:1c:d2:37:75:23:b2:d2:f7:00:5e:95:77:d0:
c8:81:e8:e6:bf:13:14:dd:6f:d2:63:5f:3f:01:4b:6e:17:bf:
29:59:50:f0:27:64:ff:46:c1:9c:2b:9d:ef:21:19:06:fd:d6:
5f:e2:48:64:94:79:a2:0d:6c:69:a8:2e:ab:41:e6:49:a6:8a:
bd:b4:79:04:16:09:41:f1:60:bb:79:3f:f6:8e:bf:39:3a:21:
4c:cf:0b:30:b9:0c:b4:0e:1e:9d:e7:07:da:c1:73:e8:5f:41:
e9:84:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:33:03 2026 by rpki-client