Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
File: qwJca7PczxsWUUnChzwEsabH2no.mft (raw, json)
Hash identifier: x9nYLAVIy2iipZGUZ7Ve4Ed8z7tcZxCs2tM6CWsZKk0=
Subject key identifier: 98:E0:47:D9:10:DA:D7:6B:52:58:C5:67:DE:1E:96:3B:36:94:01:8B
Authority key identifier: AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
Certificate issuer: /CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Certificate serial: 01A1DE71364FD91B9209473BE1C956D219AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
Manifest number: 0FB4
Signing time: Sun 15 Nov 2026 09:02:03 +0000
Manifest this update: Sun 15 Nov 2026 09:02:03 +0000
Manifest next update: Mon 16 Nov 2026 09:02:03 +0000
Files and hashes: 1: Me-3_nMxEtudvFEiZv13drFygFE.roa (hash: iW69kKCgFDhPrZ2mp9OiMFp2BNpeSnBxeI31XMO1Tao=)
2: O9lVHnD2EHVTvj7ukTgRKudmQ2o.roa (hash: GDENzzsOo8/Aw6HS8wSkKax7E8OzvFrFYmDsz8bDz80=)
3: qwJca7PczxsWUUnChzwEsabH2no.crl (hash: TPn9CNHAKLrsrZh6FIc0j0E8z8nMTPTjN2x6Zk1KOxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:36:4f:d9:1b:92:09:47:3b:e1:c9:56:d2:19:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Validity
Not Before: Nov 15 09:02:03 2026 GMT
Not After : Nov 16 09:02:03 2026 GMT
Subject: CN=98e047d910dad76b5258c567de1e963b3694018b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:da:ef:fb:e3:1b:ab:d9:be:2b:4c:03:ce:f7:
4a:f5:d6:15:02:fe:dd:0a:ec:0e:6d:26:60:2d:6e:
a6:11:e2:da:22:8e:4a:24:f4:f1:6b:b8:ef:12:b4:
85:d9:47:c8:d0:e4:c2:85:0f:c3:3c:71:57:4c:86:
a1:a1:05:c5:bd:b2:af:42:bc:c2:67:d9:76:5a:0b:
a0:e4:4c:08:00:a5:fb:3e:02:38:50:4c:13:db:09:
ab:89:3e:c2:d3:d8:9c:7f:1d:df:fe:ce:12:81:d9:
d5:60:5f:2b:04:61:21:49:b2:cb:bf:cc:77:80:5f:
b9:71:5f:d6:0f:d2:61:62:4b:6b:b5:8b:13:2f:24:
7a:8b:5e:d8:74:58:ec:4d:37:bf:bf:8b:eb:ce:f0:
a6:2d:b9:40:02:fb:de:13:1d:dc:df:52:90:c9:81:
57:4e:db:3e:7f:c2:82:24:41:f9:43:2d:dc:ee:16:
73:57:4b:24:19:74:89:90:58:33:c6:eb:86:c8:a4:
d9:64:c3:b2:7f:54:3f:fa:dc:db:7a:c8:35:ee:c4:
29:8a:59:77:c6:89:b3:c1:8b:7d:e4:d3:d6:9d:9c:
4f:38:b4:32:f1:ab:36:ba:54:6e:16:ef:8f:a4:96:
f3:7a:27:73:9b:7e:8c:fb:c4:f4:b6:f7:5c:02:28:
4f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E0:47:D9:10:DA:D7:6B:52:58:C5:67:DE:1E:96:3B:36:94:01:8B
X509v3 Authority Key Identifier:
keyid:AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fb:e0:46:88:d2:50:d3:9b:2e:b1:fd:6f:55:4e:86:a9:6e:
6f:1b:2a:b7:ba:9b:5f:61:11:fb:a5:f3:f2:1a:03:58:eb:3c:
97:10:01:df:e9:f2:b6:18:8c:82:c1:21:d8:90:cd:ae:16:05:
ca:ab:66:9c:84:50:4e:a3:22:71:e0:57:1b:64:50:a4:b9:82:
49:6d:9b:9e:9f:a0:31:be:62:28:22:90:ca:53:7a:ef:81:8f:
e3:38:8b:21:49:90:43:84:72:82:39:8e:a5:f4:35:ee:34:43:
84:44:12:7d:47:6b:d1:44:4c:8f:a9:d2:62:20:45:dc:d8:f4:
0f:d3:41:29:1c:91:25:65:1f:4c:71:11:80:50:16:bd:07:ac:
77:2f:38:73:49:69:61:94:66:b5:95:1a:8f:77:c8:98:ed:e3:
2b:94:ed:dc:6f:23:40:ab:d3:ed:aa:b4:3c:0d:c6:1e:a7:de:
e3:a3:96:e0:42:5b:7c:e2:e5:97:6c:0f:cf:8c:ce:95:ac:c5:
79:f1:77:f5:0d:38:93:e4:c2:30:59:fb:18:67:25:78:03:04:
8d:43:bc:a7:53:1c:af:f1:d6:b3:42:ec:d4:61:3f:1c:53:8f:
dd:bb:39:9d:f7:7e:c5:d6:d1:e4:d6:06:87:3b:26:a3:11:d5:
31:df:4b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:49:56 2026 by rpki-client