Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
File: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft (raw, json)
Hash identifier: +R30NcRHCWNSBIkhNtOMmLSjiXeVVur2APMuuauNJW8=
Subject key identifier: C8:7A:7E:0C:A3:30:DA:1F:16:A6:0B:63:9E:D5:88:37:27:85:A1:E7
Authority key identifier: 43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
Certificate issuer: /CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Certificate serial: 01A17C97BB32433151903844F3A5BEE8A264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
Manifest number: 07DD
Signing time: Tue 27 Oct 2026 09:01:20 +0000
Manifest this update: Tue 27 Oct 2026 09:01:20 +0000
Manifest next update: Wed 28 Oct 2026 09:01:20 +0000
Files and hashes: 1: C8KAjAmMo4zHOxPsP5u33kaFWlY.roa (hash: U4UKkIWDo1A35uGyB5LLNTGRRGiNn0SaaQUFdLefZ24=)
2: Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl (hash: l54oveVmsWvL7TL1v0B9BMsfub8yy9/DwLI8NsKg9kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:bb:32:43:31:51:90:38:44:f3:a5:be:e8:a2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439e4321cf218b9265d563b5bea51dbf1766cec8
Validity
Not Before: Oct 27 09:01:20 2026 GMT
Not After : Oct 28 09:01:20 2026 GMT
Subject: CN=c87a7e0ca330da1f16a60b639ed588372785a1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dd:00:96:cc:14:6c:39:b2:93:5d:09:65:18:
3e:9a:61:bf:b8:d7:41:78:19:5a:84:e6:10:af:fd:
61:d6:4d:06:41:97:b4:7c:95:01:26:88:d7:ef:33:
eb:0a:a2:2e:b4:08:82:71:1c:28:9e:8d:81:2e:97:
b3:b0:de:3e:05:01:8a:31:23:37:54:75:13:d7:4d:
9f:ad:a8:56:fb:46:c4:41:7d:dc:04:84:4f:22:52:
8d:26:1e:d2:87:5a:cb:98:14:f8:57:8d:1c:42:11:
82:ba:7f:f1:9b:d1:47:f5:fa:69:40:dc:cf:75:5e:
83:a2:b2:02:7b:07:d0:d2:b7:5c:46:a3:39:98:13:
6b:b3:44:f4:8b:53:b6:c1:be:3d:6b:db:ba:23:3e:
22:d5:4c:99:01:39:37:ef:18:c6:85:e8:a9:d1:db:
73:5d:be:6b:59:f0:dc:34:7a:50:72:62:91:df:87:
8b:39:ca:77:d0:37:72:97:32:35:b5:7a:c9:82:b9:
6d:1d:9b:37:3d:4a:bf:ba:13:76:36:36:88:5a:09:
ef:38:6d:18:cf:87:5a:3d:d1:11:ca:3d:6b:7d:6e:
39:50:f4:ca:ce:cf:39:98:14:98:02:cb:ee:20:99:
ca:d6:87:93:03:d7:07:94:e2:e9:05:58:bb:3c:11:
2f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7A:7E:0C:A3:30:DA:1F:16:A6:0B:63:9E:D5:88:37:27:85:A1:E7
X509v3 Authority Key Identifier:
keyid:43:9E:43:21:CF:21:8B:92:65:D5:63:B5:BE:A5:1D:BF:17:66:CE:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6dd756-3899-4a49-b6fe-15515ad9b605/1/Q55DIc8hi5Jl1WO1vqUdvxdmzsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:03:7a:f1:9b:8b:ca:b9:bc:01:b4:18:9d:d7:12:5f:7d:31:
bd:e9:68:33:38:0c:63:a3:0e:37:41:08:90:80:d1:78:64:15:
8b:7f:37:31:a5:e1:1d:2e:4c:91:5c:72:ad:12:b2:0a:3b:f8:
34:67:84:8d:59:96:9a:e7:32:ae:c0:9a:10:29:71:08:7b:69:
da:6b:aa:bf:99:cd:aa:40:2f:fe:2c:89:20:1b:de:28:84:f7:
0b:71:a0:88:bf:e4:b8:e4:2a:e3:8c:c6:82:ca:52:c9:ac:1a:
47:0e:15:8d:ca:5f:94:55:a5:d2:23:a7:a8:a2:13:42:ef:32:
5a:2a:5c:a8:88:99:2c:52:e9:2b:7c:d0:97:2b:78:67:00:fd:
f2:f9:42:d6:f2:17:31:a1:44:d4:94:95:78:03:4e:94:02:ea:
d5:39:aa:a0:8f:76:57:2a:51:fc:20:5b:a7:0b:a5:90:6d:d0:
de:ac:18:8a:31:26:5e:1c:8c:c9:9f:64:cd:b8:f1:3b:06:41:
73:18:dd:f3:a3:5a:0c:e1:55:d4:52:74:95:74:1d:50:c6:26:
ec:6f:68:41:92:d2:68:e4:58:80:3f:a7:6a:71:b4:4a:b7:2a:
63:3f:d1:3b:12:aa:14:43:cb:0e:4a:54:68:f7:12:6a:1c:ba:
ba:84:53:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:01:08 2026 by rpki-client