Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
File: Qj2TBU8GPPiikYYXNfkAWauewWk.mft (raw, json)
Hash identifier: BsBKvqgOatPcY7DtQb1Tecp2d822hmWrboJc5YkaVs8=
Subject key identifier: CC:24:C7:F0:0C:7D:E1:23:A6:DB:1B:53:D6:BD:47:A7:B1:D6:71:FB
Authority key identifier: 42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
Certificate issuer: /CN=423d93054f063cf8a291861735f90059ab9ec169
Certificate serial: 01A197A08A652A5F41455E76FB585F774A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
Manifest number: 1ADA
Signing time: Sun 01 Nov 2026 15:00:43 +0000
Manifest this update: Sun 01 Nov 2026 15:00:43 +0000
Manifest next update: Mon 02 Nov 2026 15:00:43 +0000
Files and hashes: 1: 1mX8w6XwA7woU8wmLAJ5ZXky2sk.roa (hash: O4FxQ+GxB8UXGvgtMf5kwgBczUX5jVwN68R45/WuCz8=)
2: Qj2TBU8GPPiikYYXNfkAWauewWk.crl (hash: /8sDoLuVBe5DS0U5QyxfVZrGgNAPu/Dn9JbdiZVdhso=)
3: viJ7gwHZZkl8aycoxbcENmaZJk0.roa (hash: kFhg4Qul4VuaLn8GNiNuWw7f2bf4xMblv/3oeMcLjc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:a0:8a:65:2a:5f:41:45:5e:76:fb:58:5f:77:4a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423d93054f063cf8a291861735f90059ab9ec169
Validity
Not Before: Nov 1 15:00:43 2026 GMT
Not After : Nov 2 15:00:43 2026 GMT
Subject: CN=cc24c7f00c7de123a6db1b53d6bd47a7b1d671fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:ff:96:5a:37:2f:21:5c:75:96:5d:52:60:
c6:42:84:64:9f:e8:7a:0a:45:15:cd:9e:aa:bb:9a:
b2:d2:05:81:f7:85:f9:0e:13:de:cb:c7:e5:22:32:
eb:68:78:5b:13:4c:85:9a:88:f1:07:41:59:c4:cf:
1c:83:d3:fa:c9:bb:df:43:59:8a:df:36:6b:3e:16:
fc:97:cc:cf:5d:f9:66:ae:f3:cc:85:53:e5:88:bd:
ad:a4:fc:63:3b:cb:b4:07:31:0b:ac:a0:6b:c5:f4:
3b:b9:2e:14:f1:b5:4a:fe:4d:89:33:5a:ec:25:db:
5f:32:64:b5:62:84:11:07:5e:5c:f0:cd:e2:6a:7b:
a6:13:db:7d:0e:2e:1b:e3:57:f7:48:43:fe:70:0f:
34:cc:85:95:dc:78:71:07:19:85:23:fc:02:f1:6c:
e0:7a:5e:a2:ee:e8:f0:70:54:ed:7c:0e:84:1e:bc:
b4:7a:5d:d8:34:fb:3b:6e:55:3b:b3:83:45:01:d2:
c5:4f:b6:d5:93:cc:78:32:73:d3:40:e3:6c:f9:84:
f3:f2:01:1d:f2:a5:b9:fa:e8:c9:a8:88:ce:7c:4a:
f4:cc:f4:00:12:be:1a:a1:4b:2f:f0:ad:33:63:a4:
fa:7e:f0:2d:24:bb:83:5a:f9:6c:f4:78:bb:d3:9f:
0e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:24:C7:F0:0C:7D:E1:23:A6:DB:1B:53:D6:BD:47:A7:B1:D6:71:FB
X509v3 Authority Key Identifier:
keyid:42:3D:93:05:4F:06:3C:F8:A2:91:86:17:35:F9:00:59:AB:9E:C1:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj2TBU8GPPiikYYXNfkAWauewWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/0c2ec3-3844-4b5f-9f58-5f1b69048fe2/1/Qj2TBU8GPPiikYYXNfkAWauewWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:43:33:a6:05:21:3d:f0:00:eb:18:c7:eb:6e:cf:7b:4a:cd:
cf:ba:fb:ca:12:24:88:8d:b9:85:19:c8:c7:72:62:ec:d1:fc:
ee:3c:af:31:ad:df:7c:ee:53:0f:61:c0:93:bd:25:06:16:6f:
26:0d:6a:66:96:e3:b1:f0:9a:b0:d5:ce:8e:3b:91:dd:cf:b2:
3a:f1:fa:53:9e:55:47:9f:70:de:ae:e1:e7:f8:49:e2:dc:89:
28:0c:2d:3e:41:36:6f:0c:db:f1:b7:10:e6:a0:42:dd:d7:1e:
52:dc:22:f7:b2:e9:84:b0:83:0d:da:29:86:41:49:32:05:07:
13:7e:e1:12:08:b3:b0:11:7b:3c:b1:a2:e9:61:b7:49:79:ec:
64:4b:ad:e8:74:a8:2f:6e:01:58:14:f5:9c:38:4e:28:75:04:
ad:26:d1:0e:89:1c:23:e2:00:f0:42:a4:09:c5:d3:96:3e:82:
37:9b:10:92:95:e4:ed:71:c5:9d:d6:06:5a:71:9d:4e:cb:90:
8c:25:3a:ee:1c:62:73:0a:35:81:07:10:b7:30:da:49:d5:4e:
6c:e1:5f:71:43:72:85:ff:73:0c:df:1c:76:91:f0:59:ff:b6:
2c:eb:bd:60:4b:97:c7:54:07:6d:ba:0b:4c:3d:e5:8c:a7:5b:
20:b8:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 18:31:37 2026 by rpki-client