Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft (raw, json)
Hash identifier: cz6O/aJSgp+Ww1iVkISw3CyoRzKfx+g0l/rO8/mTCz0=
Subject key identifier: 3B:80:7A:72:98:8F:C0:B5:88:76:FF:E5:23:04:82:53:83:9F:CF:6F
Authority key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Certificate issuer: /CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Certificate serial: 01A17C5FF437C53AA2A9D156EC464BA6BC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
Manifest number: 17BA
Signing time: Tue 27 Oct 2026 08:00:25 +0000
Manifest this update: Tue 27 Oct 2026 08:00:25 +0000
Manifest next update: Wed 28 Oct 2026 08:00:25 +0000
Files and hashes: 1: 0llklTGwRpo1D7HWMMbydisxDQ4.roa (hash: 3z2IZ4s8AyOuNF65gLQqbep0m2rYxv6RvjyL7CQP75U=)
2: QWs1csGK8KUFGhfj2QFKlBU8El0.roa (hash: 0iVAN86kduscSDUBK67oi4SEPANLs+DqgTgFkRGgbJQ=)
3: r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl (hash: vfQwQsypsRHVcvbCLEYcNLRHwAG8c2vG+y+QHp9Yy+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:5f:f4:37:c5:3a:a2:a9:d1:56:ec:46:4b:a6:bc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Validity
Not Before: Oct 27 08:00:25 2026 GMT
Not After : Oct 28 08:00:25 2026 GMT
Subject: CN=3b807a72988fc0b58876ffe523048253839fcf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:da:9d:51:7a:a0:a5:e2:77:7d:67:fb:af:3b:
57:f1:b4:3b:32:30:59:7b:4f:54:b6:05:14:51:6f:
b2:96:2a:8c:a5:bd:4a:ae:b1:91:2f:fe:ce:d9:e5:
44:c5:4a:45:5f:82:35:19:73:97:ed:08:c2:b5:69:
b5:7c:2a:e6:7e:b7:0d:e4:8b:05:de:0a:ed:b8:39:
ac:cb:f5:b6:dd:ce:a3:87:8f:a9:99:a1:39:8a:9f:
9d:9a:96:d5:b0:ed:fd:30:83:ca:91:56:5a:2a:7e:
ed:3f:a6:96:f0:d1:d1:26:6d:a7:91:ce:81:f7:c8:
f7:99:2e:9d:a2:0f:0d:62:e6:ca:2c:19:f5:25:93:
df:fd:70:18:63:3b:83:6d:53:ec:28:db:23:20:37:
a0:77:7f:9b:09:5e:50:54:32:f5:65:2c:cf:99:3a:
30:91:75:43:15:b1:df:56:b8:d5:e2:92:3b:92:38:
32:01:9c:f8:67:92:a1:5c:8f:2d:3b:21:49:2a:6e:
18:5c:f2:62:fe:07:50:bb:d2:0c:1f:ab:88:f1:48:
5c:1c:7b:8f:48:7e:68:7d:f0:1b:9a:05:da:85:a9:
2d:85:70:0d:2b:e7:80:1d:41:32:b8:67:8b:d1:a5:
d1:a2:1f:4e:c0:4c:7d:18:f5:5b:3a:25:8f:73:b9:
99:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:80:7A:72:98:8F:C0:B5:88:76:FF:E5:23:04:82:53:83:9F:CF:6F
X509v3 Authority Key Identifier:
keyid:AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:42:45:a7:1c:77:ea:07:d8:e7:a9:38:7e:dd:19:5e:ec:ac:
71:5f:dc:4b:d8:08:81:11:c2:82:15:18:ed:a4:4f:5f:28:fa:
21:d9:f9:30:eb:a6:ad:ae:cd:1a:eb:ed:49:a0:6d:42:f4:85:
43:03:98:84:20:d7:0b:6b:a5:5c:2b:92:20:b2:b1:a6:24:cd:
a3:b8:19:b4:8a:f6:91:a0:0e:74:6a:3b:97:79:97:b7:bc:4a:
7d:59:4c:ff:50:21:a2:12:e6:73:bf:68:2e:ab:04:f0:72:70:
01:44:a9:11:c9:e4:55:90:63:49:2f:15:6d:d7:4d:38:83:72:
ff:91:0d:ed:fe:2d:ce:ad:5b:e3:4b:92:ec:a3:62:94:59:c6:
ef:04:b5:8a:a1:e2:fb:cf:75:d7:c4:94:73:03:e3:f8:02:12:
81:ea:31:5b:3c:96:76:9a:ac:4a:06:15:0f:45:45:0c:90:0d:
10:9d:26:dc:1e:d5:28:98:b8:f1:b3:f3:b1:e2:3d:86:90:a4:
7e:3f:c6:6b:91:45:ee:a5:98:c7:91:d7:ec:dd:fb:1e:67:08:
3b:e2:98:1c:6e:65:6f:26:11:7f:b4:16:16:09:c9:f0:d8:d5:
39:bf:5b:74:e0:6c:8f:ed:d5:77:57:3e:40:d9:a5:39:08:38:
de:9e:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:38:30 2026 by rpki-client