Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
File: QfpvoAiYrTXuZ_taWhkQXbbB0es.mft (raw, json)
Hash identifier: omEkOT3L1SuYf7QTSimRnxzmxUqTCrRW7j1QO/FXjjQ=
Subject key identifier: 36:E6:6C:CE:B9:9C:E6:41:3C:39:9E:96:93:A4:57:73:5B:6F:90:8B
Authority key identifier: 41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
Certificate issuer: /CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Certificate serial: 01A16E002E49D243FB066C522050F7BAEC97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
Manifest number: 02AA
Signing time: Sat 24 Oct 2026 13:01:07 +0000
Manifest this update: Sat 24 Oct 2026 13:01:07 +0000
Manifest next update: Sun 25 Oct 2026 13:01:07 +0000
Files and hashes: 1: QfpvoAiYrTXuZ_taWhkQXbbB0es.crl (hash: ks67jUt7MaEKn+1KOAGLo/HvNwKPiy/XvMNEHfIqgpg=)
2: tUgLrvuas3A8ffagzPey3XzQQXM.roa (hash: nldIcz0O0+/Bm3m2OMxGodFkGt2Ggg8SRrnW6hRBtug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 13:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6e:00:2e:49:d2:43:fb:06:6c:52:20:50:f7:ba:ec:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Validity
Not Before: Oct 24 13:01:07 2026 GMT
Not After : Oct 25 13:01:07 2026 GMT
Subject: CN=36e66cceb99ce6413c399e9693a457735b6f908b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:45:f4:30:1f:be:53:96:b1:f7:c7:af:d6:d7:
b5:0a:7f:1d:39:4a:73:16:eb:dd:20:ee:96:58:80:
0f:27:0e:bb:35:f4:a6:49:ca:c6:a5:ad:71:c4:48:
e8:16:57:b7:bb:69:93:7c:bb:c9:45:63:76:b6:bd:
30:ce:db:7b:f7:20:5f:4f:74:df:2c:e1:ed:42:b9:
6b:a7:e5:01:1d:66:05:29:6f:cb:06:cf:d4:32:86:
1f:aa:63:d2:dd:1e:9c:fc:f2:e0:32:00:23:12:b3:
62:9b:22:ca:ff:48:50:14:43:8e:2d:67:c0:26:d2:
cd:5f:13:72:d4:69:6a:f6:31:0e:b6:0d:db:5f:d4:
8d:98:54:2d:d3:b1:ab:52:be:36:fd:f2:2a:ae:c7:
45:53:5f:39:fd:33:bb:5d:6b:bb:eb:c3:71:90:09:
a2:02:d5:bf:10:e9:5b:62:ec:d5:82:1f:76:4b:06:
cb:f3:c8:e0:43:b4:ad:3a:ec:ce:12:bc:8b:32:7a:
ba:d1:89:62:7b:bc:be:1b:84:79:71:7b:17:af:50:
6b:1e:9a:b2:2f:42:03:52:f9:0c:14:90:68:0d:04:
5c:83:6f:7a:fc:3f:c9:4d:c6:81:5e:f8:43:c8:23:
9a:29:df:34:f6:65:67:a6:1a:6c:fe:fc:6a:0e:cf:
98:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:6C:CE:B9:9C:E6:41:3C:39:9E:96:93:A4:57:73:5B:6F:90:8B
X509v3 Authority Key Identifier:
keyid:41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a7:73:c0:15:e1:f6:8c:c5:bc:80:b8:86:f5:0b:01:78:e5:
49:2b:fb:65:44:5f:f0:d7:c7:55:41:d0:0e:5b:0c:f3:24:fe:
e2:cc:fe:2a:60:8c:11:09:e5:ee:47:ac:ae:b2:ff:c9:7a:6e:
73:99:de:d6:5e:5c:d1:5f:b1:2b:14:d6:06:65:70:59:3d:41:
c6:b6:ea:ee:71:88:ba:7e:fe:ef:e7:8a:98:c4:c7:eb:19:2b:
d3:1a:2f:7a:38:3e:28:4d:90:9b:e0:e4:c5:35:57:41:38:b3:
e4:e8:28:f9:e4:a4:23:6f:c2:2a:99:c7:c2:f6:2f:e0:12:4f:
86:44:be:7b:cb:5b:da:0d:e7:7d:fd:01:39:d4:5b:42:92:1f:
a1:70:d1:f2:f7:d4:80:ee:23:a8:36:33:f0:e8:b7:99:7c:5d:
0e:8f:14:42:18:fa:7b:e5:f2:1f:94:92:cf:ac:45:02:d7:7a:
f7:12:60:c0:d9:b3:3f:54:d9:09:1f:69:bf:88:eb:ab:e8:15:
96:ed:02:ba:b1:1a:61:65:c2:af:0e:1e:62:28:39:09:7d:8c:
dd:68:12:f7:cf:01:b8:6d:4f:8c:8c:d7:87:53:5b:e9:0d:24:
00:3b:5c:fe:bb:07:83:d8:a1:20:26:0c:b4:ed:b3:ec:f8:c5:
df:c4:de:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:47:07 2026 by rpki-client