Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File: sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier: JFLRYtsxv8dKFPlsd3zj0ZWpWk6BL6arcUVHIRDAn0E=
Subject key identifier: 4E:47:44:1C:23:97:5B:E4:FD:ED:B2:01:D4:0E:B4:D2:2D:30:58:FD
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial: 01A15CD551033FF45A8FF4AE8F8030128E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number: 1A46
Signing time: Wed 21 Oct 2026 05:00:46 +0000
Manifest this update: Wed 21 Oct 2026 05:00:46 +0000
Manifest next update: Thu 22 Oct 2026 05:00:46 +0000
Files and hashes: 1: IRpFGeK75W2NCoLOiJ_s8Xp5yew.roa (hash: BhIo7ljP7ZgEPGbs9sKTB4qik1eSNnRy76SvPdzQrR4=)
2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: ia0CShvlTlcqPl2DEzVT/vdtWhEp8PScvi1179TUIoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5c:d5:51:03:3f:f4:5a:8f:f4:ae:8f:80:30:12:8e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Validity
Not Before: Oct 21 05:00:46 2026 GMT
Not After : Oct 22 05:00:46 2026 GMT
Subject: CN=4e47441c23975be4fdedb201d40eb4d22d3058fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:26:21:c2:d7:76:20:6e:89:5c:09:fa:cb:3d:
f3:a3:7a:32:4f:3f:2f:ce:d8:4f:5c:a8:92:73:c5:
5b:2f:07:54:47:4b:90:da:c6:ec:4b:91:2d:83:d3:
f2:56:6f:be:08:c0:8a:75:11:c3:09:ff:38:a4:9d:
e9:bd:7f:29:b1:83:93:64:29:81:95:27:7a:f0:b6:
1f:46:fe:22:96:9f:4b:6d:67:49:07:a3:93:14:83:
f5:3d:74:a5:32:2a:be:06:6f:88:29:27:c1:32:28:
5f:7a:11:e4:8c:5d:48:c9:18:bc:e2:74:fd:98:02:
11:91:ae:27:5b:1c:28:89:0d:03:66:37:a4:55:f5:
d4:5e:a1:4b:a5:6a:75:0e:92:a8:8e:7c:f1:19:a9:
f6:38:b0:75:3d:16:c2:dc:d9:51:12:3a:bf:40:bf:
f8:43:31:47:76:5c:2c:10:de:2a:b3:d3:37:0b:a9:
fa:8a:13:b0:1e:fc:ea:7f:b9:16:51:25:e2:7f:f9:
b5:bb:e7:65:9b:30:ad:48:6b:8c:2f:46:e1:b1:dd:
8e:18:4e:10:b8:8e:8b:a4:88:bd:74:c3:ab:ce:7c:
df:4c:d1:b3:10:01:3b:9e:79:a7:7f:64:e7:d4:73:
3f:e2:a3:6f:0b:28:2e:d6:b7:6a:a4:d2:0e:35:f7:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:47:44:1C:23:97:5B:E4:FD:ED:B2:01:D4:0E:B4:D2:2D:30:58:FD
X509v3 Authority Key Identifier:
keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:10:9d:c4:62:f2:90:17:1e:b2:c1:e3:db:50:75:cc:23:31:
ba:c7:94:8b:16:24:58:e8:4e:f9:86:c3:81:59:f1:cd:c5:c0:
e0:f5:23:89:8e:09:3a:57:95:2f:b3:a1:44:4e:16:d6:e9:9e:
b5:0a:e9:f9:ca:f5:ef:8c:4a:63:2a:4c:b4:65:bc:69:50:a1:
31:fe:8e:c5:fa:f1:80:c6:d6:03:c8:8e:eb:56:3f:ad:dc:c6:
c9:87:13:87:ee:f2:86:57:15:3c:d5:0b:70:55:48:70:2b:0a:
52:e9:4a:08:12:4f:f7:7d:a2:70:89:a2:de:ff:41:fc:f1:6f:
23:0f:f4:6e:6f:6f:09:c0:1f:d7:ea:37:91:e0:da:1a:96:5c:
a5:1a:11:65:71:d7:fd:46:2d:be:5f:69:0b:d1:ae:af:06:e7:
00:39:0f:30:12:a3:3b:64:95:9d:5a:a3:24:26:91:df:6a:df:
b2:49:e2:a3:75:9b:c6:ca:e5:0f:00:60:76:21:df:a1:82:fb:
ec:dc:9f:18:af:c1:19:64:97:50:23:3f:04:db:cc:c5:51:11:
45:ac:6a:d9:fc:6e:34:24:36:cb:4a:c3:bd:5e:38:5d:2a:2f:
5c:db:ad:d4:b9:16:ce:71:d6:d8:26:96:c4:41:4b:52:ab:2b:
5f:ef:2c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:22:40 2026 by rpki-client