Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.mft
File: QaKq1CT4s2whxBBOzeTwqUwU6rU.mft (raw, json)
Hash identifier: 09s5qr2SvZRezwUkEh4YDfrRPkn5GJnWUrfdkBZ6l7g=
Subject key identifier: 46:D0:BF:1D:67:8B:82:A9:EB:A5:D3:87:35:BC:66:B8:7C:98:B3:82
Authority key identifier: 41:A2:AA:D4:24:F8:B3:6C:21:C4:10:4E:CD:E4:F0:A9:4C:14:EA:B5
Certificate issuer: /CN=41a2aad424f8b36c21c4104ecde4f0a94c14eab5
Certificate serial: 01A177A78DA154D9BD2207240DC8AA921D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaKq1CT4s2whxBBOzeTwqUwU6rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.mft
Manifest number: 5D
Signing time: Mon 26 Oct 2026 10:00:31 +0000
Manifest this update: Mon 26 Oct 2026 10:00:31 +0000
Manifest next update: Tue 27 Oct 2026 10:00:31 +0000
Files and hashes: 1: QaKq1CT4s2whxBBOzeTwqUwU6rU.crl (hash: 4ua0F0NT6P0/GjDEAc5JiHAJS5/eGfmdFAyO000Y1rg=)
2: hmqViEquWUswNU98B0WP5sYANn4.roa (hash: cdtwzuRgZBZSCCSKfbfF5U752ScIvmwq/6SJfzh37Kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaKq1CT4s2whxBBOzeTwqUwU6rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:8d:a1:54:d9:bd:22:07:24:0d:c8:aa:92:1d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a2aad424f8b36c21c4104ecde4f0a94c14eab5
Validity
Not Before: Oct 26 10:00:31 2026 GMT
Not After : Oct 27 10:00:31 2026 GMT
Subject: CN=46d0bf1d678b82a9eba5d38735bc66b87c98b382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:fa:1b:58:4b:99:89:10:43:2f:66:25:eb:
32:00:3b:56:4a:d5:7c:74:e2:14:cd:82:8b:0a:7b:
45:07:df:a6:de:df:f2:b9:15:6e:9e:b0:64:01:21:
33:54:06:63:ac:c4:da:c8:b5:5e:f9:52:05:a1:0d:
e6:3a:b6:68:32:24:1e:c1:22:73:8f:6c:d7:32:63:
36:b6:c7:a9:d9:8f:fb:0b:8b:98:13:52:36:dd:7b:
20:3e:a8:12:e8:d8:bc:dd:35:30:b5:c8:64:5c:08:
dc:35:c9:1c:ff:3b:3a:a0:97:79:66:99:ad:b6:3f:
6c:96:cb:3a:bc:c6:7a:03:8b:d9:30:f0:56:38:d5:
16:a3:dd:c1:af:df:40:37:9e:90:04:11:c3:a7:88:
08:3e:fe:61:9c:0e:19:e4:80:54:67:73:21:6a:19:
19:6b:a6:f4:4c:4f:81:8b:58:06:ba:c1:cf:07:9f:
c4:b7:c8:34:57:f8:4f:9d:bb:b2:85:e9:7f:95:b0:
85:d1:93:6c:e4:be:2b:e6:28:ff:a1:7a:f3:e0:ec:
50:f1:34:f7:56:a2:d0:ff:fb:80:2c:ca:ae:cb:e5:
2a:00:81:b3:ed:46:19:40:2f:89:34:04:bd:0c:b5:
0d:4c:ce:b8:5d:31:6e:c1:59:8c:3b:e6:56:ea:f2:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D0:BF:1D:67:8B:82:A9:EB:A5:D3:87:35:BC:66:B8:7C:98:B3:82
X509v3 Authority Key Identifier:
keyid:41:A2:AA:D4:24:F8:B3:6C:21:C4:10:4E:CD:E4:F0:A9:4C:14:EA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaKq1CT4s2whxBBOzeTwqUwU6rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/c14b52-aa9d-4cc3-a7ff-b19f24ae0007/1/QaKq1CT4s2whxBBOzeTwqUwU6rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:6e:de:8d:a3:1d:0c:38:73:fb:8e:3d:73:6c:71:5b:32:cd:
65:0d:cc:41:82:0f:03:52:93:6a:ac:83:a7:58:f2:1a:ff:f5:
f4:8f:40:ef:f8:1a:ef:14:90:f5:c7:b1:c5:55:3c:ba:48:80:
35:58:b4:fb:76:ed:4a:55:dd:9f:71:32:45:fa:83:1e:4f:29:
77:31:41:e9:c3:d5:2c:e8:e2:28:b9:36:0e:00:a6:4c:d1:0f:
ee:2d:03:43:72:54:07:20:c3:70:b5:23:6b:13:aa:da:8f:ab:
9f:c2:20:f6:d6:56:ba:4f:fe:e2:6d:d1:6c:bd:fe:c7:a2:04:
73:19:60:88:a1:b3:5b:a0:c7:51:eb:8b:01:72:fc:63:8e:00:
89:5e:7f:e6:f6:6d:ac:9e:f6:e9:1c:6e:86:6b:10:d9:20:5f:
59:1a:51:56:c3:cf:7b:8e:ac:65:99:d3:c9:28:eb:fe:da:98:
c9:ef:67:bc:28:b3:81:ba:10:08:18:46:bf:91:f7:22:96:ba:
d5:1b:c5:16:a0:ac:60:9e:ae:b6:fe:02:68:34:b2:e9:7f:f0:
6f:7e:ec:03:81:f9:66:d2:ad:f4:85:2a:19:0e:09:74:8b:4a:
be:94:ad:24:bc:3a:d7:0f:4e:4d:34:4e:da:30:f5:9d:3b:a0:
4e:4b:2c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:38 2026 by rpki-client