Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
File: Q664_1W9RlALJ9uc8d7CVidrK2o.mft (raw, json)
Hash identifier: pxTaED7ntejVZn8fL0Lq58nozz1RgBJtybbie8GbQzM=
Subject key identifier: DA:09:F5:0D:5C:D4:34:4F:B1:34:72:78:D6:A5:A9:8B:35:D9:FB:D8
Authority key identifier: 43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
Certificate issuer: /CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Certificate serial: 01A1728186DEDF4E66DC66D06D7223164852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
Manifest number: 07B6
Signing time: Sun 25 Oct 2026 10:00:53 +0000
Manifest this update: Sun 25 Oct 2026 10:00:53 +0000
Manifest next update: Mon 26 Oct 2026 10:00:53 +0000
Files and hashes: 1: 0jAsd4jHu2P4YiShWU_tmFjG-Xo.roa (hash: 6hlBHdr9FEW88angOioMbp5usn4/nEWFUcWTWPzZueU=)
2: Q664_1W9RlALJ9uc8d7CVidrK2o.crl (hash: AjLC1Xyt27g6OPDyMVS3XF8POJAwrS6s3kySR1mqBfg=)
3: kniFntdxPbS1jBvN0hKNK7QT914.roa (hash: Hc1QVDwdt4HeTUIYJSo4nwn3K1JUnhk+8tjIWHMrCAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:81:86:de:df:4e:66:dc:66:d0:6d:72:23:16:48:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43aeb8ff55bd46500b27db9cf1dec256276b2b6a
Validity
Not Before: Oct 25 10:00:53 2026 GMT
Not After : Oct 26 10:00:53 2026 GMT
Subject: CN=da09f50d5cd4344fb1347278d6a5a98b35d9fbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9d:f9:c8:55:91:8d:47:6d:bf:7f:93:37:dc:
2b:a0:90:b7:0b:03:96:9d:a4:fc:56:40:fb:12:90:
e6:0f:4d:ca:6e:04:bf:5c:7b:11:16:7d:ec:3c:9b:
cd:c7:3d:9e:ea:0c:88:26:45:e4:d8:b8:72:6b:4c:
61:1a:d6:4d:eb:4e:43:d1:1e:83:a0:74:ba:13:20:
61:52:d0:67:a7:1b:d9:5d:8b:71:18:a0:cd:76:5e:
63:f4:36:9a:27:90:07:9a:e8:6d:ab:f7:73:27:be:
1c:e7:1c:b3:fd:da:f1:71:5a:3f:ef:3f:b0:6a:dc:
b4:1e:ca:24:53:32:4a:ba:c1:ad:05:07:6d:82:6c:
1a:03:95:61:2b:d3:75:a1:1a:ad:08:59:ca:e5:d4:
51:64:db:fd:2c:14:09:16:5a:93:81:4f:45:40:77:
c8:56:47:3d:0f:92:ef:da:0c:48:f7:09:c2:3e:ae:
c3:83:35:91:a9:cc:8a:85:6c:9a:a1:07:f1:20:12:
d3:cf:21:d9:b2:d3:b2:80:6a:33:33:22:b5:cd:36:
86:d0:96:34:70:74:77:30:ee:d9:5d:7c:0d:c1:5b:
c4:4a:bb:95:e1:e3:94:9d:ac:2b:e8:bd:b9:de:d2:
18:53:9c:68:d4:08:fa:fe:9f:56:43:94:27:a2:24:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:09:F5:0D:5C:D4:34:4F:B1:34:72:78:D6:A5:A9:8B:35:D9:FB:D8
X509v3 Authority Key Identifier:
keyid:43:AE:B8:FF:55:BD:46:50:0B:27:DB:9C:F1:DE:C2:56:27:6B:2B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q664_1W9RlALJ9uc8d7CVidrK2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/3b6fb4-52e8-44e2-abe8-2c2fbad2f011/1/Q664_1W9RlALJ9uc8d7CVidrK2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2e:09:e6:e2:0a:ac:a9:b2:b8:d9:c0:73:78:14:8e:7c:fb:
2d:4c:56:d6:43:4c:8d:ca:68:63:08:36:51:9a:98:c3:e1:60:
4b:91:84:61:a1:7b:ad:88:7b:d7:38:95:ac:9b:c8:de:64:e2:
f2:7f:1f:af:8f:90:59:97:33:be:33:77:6b:bd:30:98:38:eb:
42:95:1c:a9:e6:d9:4a:d1:24:9c:09:bc:1c:25:65:57:04:b0:
2f:76:cb:1d:15:19:8b:00:34:64:76:7d:08:e5:7a:d0:07:3d:
ad:ea:33:76:b8:b0:d4:32:4b:d9:2f:d3:24:9e:03:14:1c:13:
96:92:be:c5:f4:4a:a3:6a:b5:0e:1a:52:10:c2:f4:e8:3c:fb:
25:84:ad:a8:86:e3:73:0a:44:87:e6:e8:ac:18:70:68:20:9e:
63:f4:ee:16:be:60:f7:88:91:57:fd:9a:9f:15:0e:e0:c7:9f:
ce:74:e0:ef:49:e2:64:fe:ef:9e:b5:f8:3e:43:dc:19:94:92:
d1:07:f8:dc:15:3c:b8:24:c2:d5:1f:3e:28:e5:a3:e2:55:4f:
21:67:d0:33:58:95:65:1d:95:da:f9:76:d6:ae:01:a1:39:0a:
d4:77:17:32:86:8d:22:a3:2f:71:05:b2:be:b1:2f:a1:c7:ce:
1b:65:5e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:53:32 2026 by rpki-client