Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: qln+6oyXeUJf19dn8LqXZgPod6/r5W/2P/hiixeSgcM=
Subject key identifier: 89:8E:A9:9E:13:EF:B5:A7:FC:F0:4C:A4:C4:EE:D7:67:8D:F8:57:EF
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 019DCDBE1E1253CA13900A74D0ECF38DB520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 05D1
Signing time: Mon 27 Apr 2026 07:01:21 +0000
Manifest this update: Mon 27 Apr 2026 07:01:21 +0000
Manifest next update: Tue 28 Apr 2026 07:01:21 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: FRusadGqShBxkpoL2paCp-tYl9I.roa (hash: u0M4J6xRL9yocHk0JRl+kCiGzN5rm3Nwf2AuG18JDLc=)
3: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: NOIqh3JOFVNzN20VRcswcCQNISHe6wxWAV+qlpkQ980=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:be:1e:12:53:ca:13:90:0a:74:d0:ec:f3:8d:b5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Apr 27 07:01:21 2026 GMT
Not After : Apr 28 07:01:21 2026 GMT
Subject: CN=898ea99e13efb5a7fcf04ca4c4eed7678df857ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:67:3a:63:d2:2a:a0:a8:cd:24:3c:31:c1:2f:
b3:3f:c6:cf:98:0f:e8:c8:85:4e:17:e8:d9:97:0a:
8c:a0:ae:62:1c:88:ea:3f:37:68:21:4a:99:76:35:
e2:9a:12:66:c1:fb:88:ea:a1:8e:cf:eb:af:5b:a3:
c3:34:c6:1b:cf:fd:68:03:60:1d:41:3e:8d:17:b6:
34:b9:75:b0:7d:8b:bb:04:f5:b1:38:2f:08:2d:a8:
88:53:37:e7:35:7b:cb:29:52:b0:6c:f5:ca:7a:d7:
f7:68:2b:71:cd:08:b8:1d:dc:b2:2a:11:18:6b:5f:
d9:4a:40:ee:3d:d2:0b:03:16:07:76:9c:1a:f3:aa:
1f:97:96:11:bd:c4:f0:60:a8:82:c8:e9:06:7b:9a:
73:22:c8:f4:83:45:89:16:6d:1f:ca:bd:d1:db:dd:
b5:f9:8e:de:56:fd:fa:9b:f6:45:db:72:29:df:8b:
75:49:4c:72:76:4a:93:35:bf:f6:cd:d4:66:6a:17:
98:c5:0e:7e:6a:ec:b5:aa:3e:e7:b5:41:fd:47:b0:
35:3f:97:55:5b:5e:89:b5:37:af:60:61:50:6d:3f:
ee:d0:24:ea:79:92:e6:30:19:1d:b8:1f:6d:aa:aa:
38:5b:95:27:37:83:bc:82:af:af:f3:ac:ff:bb:98:
a3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8E:A9:9E:13:EF:B5:A7:FC:F0:4C:A4:C4:EE:D7:67:8D:F8:57:EF
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a2:cd:39:a4:2c:0a:e0:9f:49:3b:0b:26:7d:15:37:8c:1e:
5a:47:14:0f:33:a0:0f:ea:e2:ae:cd:b5:5a:c7:3d:94:84:5f:
f9:5b:52:61:e9:d8:68:f1:78:b8:0c:40:29:7d:aa:0e:80:b8:
71:6e:2e:95:07:01:4e:de:0d:43:22:8f:e5:1c:6d:48:cd:a0:
93:74:e8:72:03:96:41:a5:1b:c0:f3:78:e6:6b:a5:8e:82:ee:
43:91:3e:21:52:a2:7c:f0:1c:37:ff:9e:fe:73:8a:17:d2:19:
cc:34:ab:c9:ca:b1:35:5b:e9:4b:d1:88:db:3d:ed:63:10:22:
50:41:b6:33:d0:78:ad:e4:4b:56:e7:da:ed:82:aa:5f:32:e9:
f0:63:4f:8f:53:43:e6:26:57:94:d6:f1:47:78:6b:0b:1b:66:
db:27:a1:c5:fc:b3:08:6c:11:a8:d1:db:f9:80:2d:1b:a3:ba:
45:54:d1:45:1d:43:f0:90:ab:f9:09:c2:3b:36:d0:a6:81:4d:
25:28:1f:57:f7:c3:a9:8d:29:2b:55:c8:1d:4a:5c:28:f7:7f:
16:96:b6:66:d1:d2:0e:e7:fe:87:c4:6b:70:e8:f3:fd:15:9d:
40:93:42:79:4f:77:ea:9c:37:35:97:d8:c3:79:6b:a1:48:ed:
db:e8:86:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 16:13:25 2026 by rpki-client